Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/610a9e82-782c-32d6-bc90-85bdb091e5cf.roa
File:                     610a9e82-782c-32d6-bc90-85bdb091e5cf.roa (raw, json)
Hash identifier:          7l9ISmXa9zHk2sgHHrjBhBMo5sPAXXVCWhL+hUZS3jM=
Subject key identifier:   00:A0:86:D4:ED:DF:C8:E8:F6:9C:6A:71:8A:21:60:0F:3B:1A:D6:AE
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584553330C115DD6FC104158D500
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/610a9e82-782c-32d6-bc90-85bdb091e5cf.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        173.184.48.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Tue 07 May 2024 18:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:0c:11:5d:d6:fc:10:41:58:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=b89e6ebd-e36a-464c-a030-fa1c14e8ab9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d5:60:4e:d5:14:f1:43:a4:9e:bd:d1:0d:f3:
                    97:f0:b7:49:da:0c:66:16:11:89:99:81:36:e1:9c:
                    28:65:85:90:45:be:ec:7a:8a:23:9c:58:31:8f:46:
                    9c:5c:e6:de:d0:24:e7:1b:5d:1f:9c:27:c6:b7:da:
                    5d:b0:50:9c:19:ed:9e:d1:23:61:6e:89:7f:3a:a5:
                    98:93:b2:dc:d4:0b:eb:42:fa:95:87:64:a6:a1:b9:
                    61:ec:2b:f6:a9:2f:55:32:a1:8d:c7:ec:a6:7d:14:
                    79:ec:3f:a5:f9:ad:09:d5:8c:03:f0:db:06:b2:ec:
                    3a:7e:3b:ee:10:df:03:e8:33:ad:36:c9:d0:86:ab:
                    4c:6d:d8:24:b1:48:4a:d4:f0:dc:fa:6b:a7:83:ef:
                    4a:8e:b1:42:22:2b:d8:2d:bf:60:6e:ec:6d:c3:09:
                    4c:5a:c4:f2:2d:05:ee:67:9c:1e:27:a8:e8:84:26:
                    1a:b8:a8:bf:ad:e1:69:87:38:34:94:e3:0f:6c:13:
                    4a:7e:08:ae:92:81:48:63:67:82:5a:15:73:4a:81:
                    e1:d0:4c:f2:02:d1:21:db:96:c9:c8:cf:47:d6:08:
                    68:59:71:ed:91:a9:54:5c:a9:83:79:02:1b:13:bf:
                    cf:a7:cd:08:5e:cd:a2:2c:20:05:c0:a8:11:42:ac:
                    70:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A0:86:D4:ED:DF:C8:E8:F6:9C:6A:71:8A:21:60:0F:3B:1A:D6:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/610a9e82-782c-32d6-bc90-85bdb091e5cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.184.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:5d:51:90:40:a0:0d:7a:37:b5:b7:e6:d3:53:b1:86:98:b1:
         ed:03:bc:7e:8e:34:3f:eb:b7:21:ca:09:21:61:e5:0d:67:8e:
         48:3d:af:4d:02:d0:cb:34:d9:ef:5c:5c:d6:e8:5b:d7:e4:53:
         5e:9f:57:64:e2:0c:53:84:18:05:56:69:52:8b:f2:a8:20:6a:
         45:4c:57:f9:c4:1f:f7:d2:c3:f5:f1:e9:6e:59:af:75:51:0c:
         f0:0f:e0:31:16:ff:c1:99:4e:5a:17:94:0a:92:f3:30:a8:d8:
         20:12:49:b1:37:c2:bc:53:85:f9:9a:38:09:cb:ad:16:82:60:
         a5:67:6d:9d:6b:91:00:81:36:93:6f:83:a0:46:62:8f:6c:6d:
         7d:cf:7b:fc:6f:ee:4a:44:95:ea:eb:63:6b:66:0a:71:bb:42:
         ed:79:53:be:bd:35:62:bf:ac:5b:8a:2f:4d:c2:6f:c7:0e:3b:
         88:ae:14:e9:bb:19:4c:01:26:30:7b:ed:5b:58:29:78:f1:d5:
         f0:6b:c9:09:e4:1d:b2:06:06:0d:2a:ea:8f:f5:77:34:ec:66:
         b5:d9:26:76:44:e1:98:13:fb:e8:88:b1:64:40:d5:d8:9e:ff:
         68:14:6b:cc:3d:6a:6c:08:79:54:47:e1:af:64:8d:e7:26:48:
         8b:a6:f9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----