Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5e965bad-7f17-37c0-8583-50d5ed9b0242.roa
File:                     5e965bad-7f17-37c0-8583-50d5ed9b0242.roa (raw, json)
Hash identifier:          1YflxVaLL8ODSlMaL2rEM6g1z8m1HxNvkOld5xWWfNY=
Subject key identifier:   13:67:95:81:58:AC:9B:2A:4B:20:33:FC:7C:9B:51:A5:21:7C:F7:F9
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D66188C7B2A5A2645D3C10FA0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5e965bad-7f17-37c0-8583-50d5ed9b0242.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        71.29.168.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:18:8c:7b:2a:5a:26:45:d3:c1:0f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=68d76a3c-898e-4cc3-b45d-f204fd4e01ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:68:40:e4:ec:ff:7a:23:51:f3:e6:ec:4a:5c:
                    ac:da:08:f7:b2:57:15:d4:03:fe:0f:aa:6a:eb:d7:
                    bd:83:35:60:9c:c7:50:34:c0:b5:3f:67:b2:d9:44:
                    1c:9a:0e:9b:0b:26:cf:89:b9:c8:12:9d:e4:21:7b:
                    7d:6c:b5:e3:1c:c2:c9:07:07:8f:e9:e9:f2:e0:76:
                    c8:de:b4:81:35:30:b1:5a:10:55:11:34:5a:24:4f:
                    be:f1:ab:b0:a2:58:84:9f:91:dd:3f:73:75:73:d6:
                    67:b3:1a:5b:5c:2a:a9:8b:89:3e:6d:43:1f:8d:89:
                    13:af:88:da:72:82:4a:32:b1:96:79:6b:0d:e0:19:
                    2d:82:8d:0e:6b:c1:16:92:5e:e4:9c:14:5e:8b:34:
                    cf:0f:7a:a4:e7:64:a6:d2:f1:bf:11:54:c7:b0:aa:
                    a5:83:ed:1a:3a:fb:f8:a9:1b:46:ea:08:39:46:4e:
                    a5:b2:c0:0d:84:5e:40:1f:f7:ee:dd:65:1e:cf:0d:
                    a7:47:36:e3:07:d4:ea:1a:a1:02:18:4c:67:e8:52:
                    01:db:e1:fc:66:55:18:9d:82:00:9b:5a:9d:f5:35:
                    4d:30:a6:ab:d0:3f:cb:3e:cf:eb:ec:33:59:e3:21:
                    24:03:76:75:37:05:50:d4:76:bf:d4:42:a7:53:7a:
                    f4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:67:95:81:58:AC:9B:2A:4B:20:33:FC:7C:9B:51:A5:21:7C:F7:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5e965bad-7f17-37c0-8583-50d5ed9b0242.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.29.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:f2:b2:f4:cf:1b:de:61:a8:45:d8:3b:c8:9c:fc:c6:6b:c8:
         4d:0b:79:36:79:92:fa:c9:de:3e:0a:e0:1a:96:dd:02:06:03:
         09:c3:da:17:10:9e:11:31:10:22:1e:8e:f3:c0:eb:2d:17:cc:
         eb:75:dd:64:7b:4d:0e:ec:57:ed:d8:06:ce:97:e4:3a:3f:73:
         07:87:30:b8:0b:19:ce:a0:fe:29:4e:f8:8b:9b:ef:b5:87:fa:
         a8:aa:1b:5e:78:fa:f5:67:96:3b:fa:56:e1:29:0b:0e:8f:f4:
         0c:52:56:91:0a:70:30:bb:7e:8b:77:ee:dc:0c:f3:36:34:c6:
         ce:fa:e3:78:64:0a:80:23:c6:c1:2d:89:af:12:57:ee:42:3f:
         5f:e8:ca:9c:d6:65:6c:27:2c:13:72:6a:b1:c6:eb:71:2b:16:
         cc:d0:94:31:db:94:24:c3:dc:5a:56:9a:65:fd:00:ed:13:e0:
         97:dd:49:de:ca:fc:a7:aa:ec:b4:e1:df:16:72:0b:2f:66:8b:
         45:e7:0e:00:c8:45:7e:82:e3:36:8b:50:02:54:43:b7:32:36:
         b2:ac:8a:a8:fe:e0:ae:e4:fc:32:51:f9:93:1a:9f:16:52:3c:
         bc:57:e4:47:94:d3:36:60:58:d2:b2:3b:20:cd:21:a9:ff:e8:
         f6:5a:3c:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mGIx7KlomRdPBD6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
NjhkNzZhM2MtODk4ZS00Y2MzLWI0NWQtZjIwNGZkNGUwMWVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WhA5Oz/eiNR8+bsSlys2gj3slcV1AP+D6pq
69e9gzVgnMdQNMC1P2ey2UQcmg6bCybPibnIEp3kIXt9bLXjHMLJBweP6eny4HbI
3rSBNTCxWhBVETRaJE++8auwoliEn5HdP3N1c9ZnsxpbXCqpi4k+bUMfjYkTr4ja
coJKMrGWeWsN4Bktgo0Oa8EWkl7knBReizTPD3qk52Sm0vG/EVTHsKqlg+0aOvv4
qRtG6gg5Rk6lssANhF5AH/fu3WUezw2nRzbjB9TqGqECGExn6FIB2+H8ZlUYnYIA
m1qd9TVNMKar0D/LPs/r7DNZ4yEkA3Z1NwVQ1Ha/1EKnU3r0xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBNnlYFYrJsqSyAz/HybUaUhfPf5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWU5NjViYWQtN2YxNy0z
N2MwLTg1ODMtNTBkNWVkOWIwMjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx2oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH7ysvTPG95hqEXYO8ic/MZryE0LeTZ5kvrJ3j4K4BqW3QIGAwnD2hcQ
nhExECIejvPA6y0XzOt13WR7TQ7sV+3YBs6X5Do/cweHMLgLGc6g/ilO+Iub77WH
+qiqG154+vVnljv6VuEpCw6P9AxSVpEKcDC7fot37twM8zY0xs7643hkCoAjxsEt
ia8SV+5CP1/oypzWZWwnLBNyarHG63ErFszQlDHblCTD3FpWmmX9AO0T4JfdSd7K
/Keq7LTh3xZyCy9mi0XnDgDIRX6C4zaLUAJUQ7cyNrKsiqj+4K7k/DJR+ZManxZS
PLxX5EeU0zZgWNKyOyDNIan/6PZaPJ8=
-----END CERTIFICATE-----