Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea085879-96a8-300d-ba73-e1fd9b73c14e.roa
File:                     ea085879-96a8-300d-ba73-e1fd9b73c14e.roa (raw, json)
Hash identifier:          FABJdOZU4NpmjjUqoODAvOLss18QUT37/ZHBgQM/sh4=
Subject key identifier:   ED:CE:DD:92:62:E7:94:15:D9:41:0D:C6:13:32:95:E8:4D:F1:88:B5
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D66152392D580C5D1533F3F80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea085879-96a8-300d-ba73-e1fd9b73c14e.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        40.136.224.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:15:23:92:d5:80:c5:d1:53:3f:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=f827952e-0c6c-4b5a-b712-ed6f6c530f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:17:b8:11:b5:44:05:46:8c:dd:9e:a0:00:22:
                    02:94:08:11:54:a4:43:81:4f:ce:83:c7:e8:d5:2e:
                    69:23:95:3c:34:92:9c:8d:23:5c:db:dd:4c:6d:5f:
                    c9:d0:c8:c8:eb:7d:99:66:1f:49:3a:38:0f:c8:34:
                    07:56:7d:e4:e7:22:7f:79:24:d7:73:4f:1a:ca:d3:
                    04:ec:08:a5:15:4a:09:ef:28:d2:fc:17:e4:a1:7f:
                    3f:d5:0a:13:4a:a8:74:c6:d2:56:0f:55:7b:33:69:
                    ac:0a:99:7b:99:1d:52:e7:98:cb:75:21:b9:e7:bd:
                    2e:b5:32:a3:af:a0:a5:44:c9:a8:9f:d1:dd:c9:46:
                    ec:97:d0:86:a5:f2:13:38:85:73:73:3e:21:ae:0e:
                    90:67:07:91:f3:53:2e:a9:d0:f6:40:4d:9f:22:a5:
                    40:3f:bd:ff:5c:4f:a0:98:15:08:22:c4:cb:4f:73:
                    fd:d0:63:fb:ba:01:21:22:09:e7:1c:f1:11:38:55:
                    67:3e:b8:fa:87:fb:ce:de:ec:b5:b5:b0:fb:22:12:
                    0a:31:0a:66:fc:01:af:73:69:60:6d:2c:83:5c:92:
                    ad:c2:4e:9c:3b:18:c4:18:f5:f4:fe:ce:b2:eb:da:
                    22:65:1d:04:f4:8f:d0:85:01:59:f3:6d:ad:01:f5:
                    ce:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CE:DD:92:62:E7:94:15:D9:41:0D:C6:13:32:95:E8:4D:F1:88:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea085879-96a8-300d-ba73-e1fd9b73c14e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.136.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:35:19:6f:28:df:fb:94:1d:35:8e:db:28:57:d6:cd:11:1a:
         31:57:ec:15:e8:7e:be:8e:9f:dc:8d:86:8b:2b:f3:42:6a:53:
         df:bb:f6:4e:43:d6:aa:94:ae:b3:2c:1c:d2:59:36:7f:76:c6:
         92:37:b8:7a:74:bb:b3:ff:94:8e:75:8e:46:30:5f:85:f6:be:
         7a:47:66:52:b0:da:b1:67:e5:6c:d1:49:e0:1b:35:10:94:ae:
         0a:e8:2f:99:d4:63:86:1b:80:8c:83:6b:e1:ec:84:8f:bf:16:
         f8:11:28:7f:76:0e:4c:1c:74:a1:de:0c:c4:5f:d5:0e:b4:e5:
         31:b8:d5:ad:a5:f1:99:e4:e8:32:15:03:e5:37:6b:e6:02:07:
         86:22:27:49:b3:3a:70:c0:bb:ef:bc:03:40:2a:7e:cc:e6:e1:
         e7:74:1a:5a:37:39:13:66:bd:21:49:8f:c5:c6:aa:1a:bb:c4:
         a0:ab:de:5d:86:ca:16:8e:1a:a8:e8:f3:44:2e:bb:e8:7b:2b:
         9b:18:ba:0b:9b:54:50:fe:82:11:91:ea:5c:23:b5:e7:28:a6:
         b0:64:f3:69:c4:20:6f:d8:71:ad:86:ae:08:bf:21:69:74:eb:
         f9:99:b5:0a:3a:91:34:0a:10:9b:82:24:82:1b:82:ab:7a:37:
         de:17:09:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mFSOS1YDF0VM/P4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZjgyNzk1MmUtMGM2Yy00YjVhLWI3MTItZWQ2ZjZjNTMwZjYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRe4EbVEBUaM3Z6gACIClAgRVKRDgU/Og8fo
1S5pI5U8NJKcjSNc291MbV/J0MjI632ZZh9JOjgPyDQHVn3k5yJ/eSTXc08aytME
7AilFUoJ7yjS/BfkoX8/1QoTSqh0xtJWD1V7M2msCpl7mR1S55jLdSG5570utTKj
r6ClRMmon9HdyUbsl9CGpfITOIVzcz4hrg6QZweR81MuqdD2QE2fIqVAP73/XE+g
mBUIIsTLT3P90GP7ugEhIgnnHPEROFVnPrj6h/vO3uy1tbD7IhIKMQpm/AGvc2lg
bSyDXJKtwk6cOxjEGPX0/s6y69oiZR0E9I/QhQFZ822tAfXOEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO3O3ZJi55QV2UENxhMylehN8Yi1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWEwODU4NzktOTZhOC0z
MDBkLWJhNzMtZTFmZDliNzNjMTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIjgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEE1GW8o3/uUHTWO2yhX1s0RGjFX7BXofr6On9yNhosr80JqU9+79k5D
1qqUrrMsHNJZNn92xpI3uHp0u7P/lI51jkYwX4X2vnpHZlKw2rFn5WzRSeAbNRCU
rgroL5nUY4YbgIyDa+HshI+/FvgRKH92DkwcdKHeDMRf1Q605TG41a2l8Znk6DIV
A+U3a+YCB4YiJ0mzOnDAu++8A0Aqfszm4ed0Glo3ORNmvSFJj8XGqhq7xKCr3l2G
yhaOGqjo80Quu+h7K5sYugubVFD+ghGR6lwjtecoprBk82nEIG/Yca2Grgi/IWl0
6/mZtQo6kTQKEJuCJIIbgqt6N94XCaM=
-----END CERTIFICATE-----
Generated at Fri Jan 5 06:12:50 2024 by rpki-client on console-fra.rpki-client.org