Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/638abe40-f15e-3f57-8114-b0244a6b77b8.roa
File:                     638abe40-f15e-3f57-8114-b0244a6b77b8.roa (raw, json)
Hash identifier:          e5ceSXA361yEajqMLcge0EsvqiyMFK8bVthT8oFQFb8=
Subject key identifier:   EC:C0:D7:BB:F0:23:4F:8E:33:30:A9:DD:DA:98:91:51:D3:4A:4A:A4
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D661B8ED9E6B4FC33DA96C040
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/638abe40-f15e-3f57-8114-b0244a6b77b8.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        75.91.152.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:1b:8e:d9:e6:b4:fc:33:da:96:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=cf5dea6d-1d63-4d5e-bd6e-236448aed401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5b:dc:91:a4:57:12:c4:d4:71:9d:43:db:99:
                    19:b3:31:19:4f:73:02:b4:50:72:10:98:0d:37:26:
                    b6:23:57:5d:58:80:0f:05:48:c3:e3:eb:b0:d4:2a:
                    d9:04:18:d0:be:d4:85:d8:62:85:eb:e5:9b:58:17:
                    45:85:78:c4:51:ba:1e:b1:99:b2:5b:a8:eb:39:d4:
                    01:3f:71:96:e0:10:35:ae:76:eb:ab:6f:eb:4e:bd:
                    1e:74:82:46:55:a1:9e:9d:2f:e3:7a:bc:11:25:24:
                    3d:f2:69:24:3f:df:38:41:b7:45:b9:c0:b6:23:19:
                    9f:67:c5:b6:31:2e:44:a7:7e:5f:e0:4a:83:f1:4e:
                    c0:be:ba:11:de:27:8a:06:e6:36:5f:5e:a1:08:aa:
                    ec:0e:25:ec:39:c8:95:03:9f:9e:c0:d4:c1:5f:1d:
                    33:30:ee:0c:9e:de:09:89:b9:ea:c4:f2:11:4a:b1:
                    2e:66:30:58:2f:1c:f5:8d:b2:61:5c:c3:53:84:2d:
                    99:40:30:72:4d:04:c4:e1:4d:cd:f9:6c:e1:ee:11:
                    f8:9e:20:94:d9:99:5b:10:07:46:fc:7e:4c:77:9d:
                    dd:5a:da:ec:9c:8c:99:ce:4c:37:d2:a4:da:96:14:
                    63:41:8a:68:a8:e3:30:cd:ac:02:a2:49:ef:97:93:
                    8f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C0:D7:BB:F0:23:4F:8E:33:30:A9:DD:DA:98:91:51:D3:4A:4A:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/638abe40-f15e-3f57-8114-b0244a6b77b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.91.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:d4:f9:40:ea:d3:86:ed:04:f5:14:cb:27:da:43:df:a5:e6:
         90:e7:c9:44:65:b3:9f:cc:8b:4f:51:f6:44:cd:78:37:37:fe:
         70:24:12:cc:8a:ee:15:98:56:89:f9:30:14:02:bf:14:bc:8b:
         d4:8a:39:86:d5:3c:92:1a:b7:6d:aa:a1:54:05:bc:6c:30:c1:
         e4:af:af:bd:a9:36:d3:20:3f:ef:86:84:cb:d6:b7:01:96:ed:
         3f:ab:63:dd:35:d6:0e:19:a6:c7:0c:db:ad:73:83:df:85:db:
         d1:4b:73:5c:7a:25:43:d8:44:aa:a6:2e:ae:25:48:7c:25:69:
         61:2e:ed:a6:06:ed:aa:17:65:42:b7:b2:0c:c7:47:23:bc:2e:
         a5:2f:0b:ad:bc:b3:7e:ed:b6:1f:0d:83:57:cd:39:bb:03:87:
         e9:91:84:6f:0a:43:f9:0e:82:95:5c:d0:ca:74:df:e6:d3:ba:
         5a:22:c0:d1:52:d9:f4:96:de:6f:fd:99:78:6a:24:04:83:1a:
         6d:e8:1f:de:d6:ff:6b:97:00:77:df:b9:9e:e9:51:69:55:79:
         c0:f9:4c:67:eb:64:6d:ba:18:92:ea:99:15:63:dd:bf:bc:ae:
         a9:53:92:b3:83:ff:fc:29:c8:f1:90:fb:bd:26:d1:19:4a:f1:
         03:1d:12:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mG47Z5rT8M9qWwEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
Y2Y1ZGVhNmQtMWQ2My00ZDVlLWJkNmUtMjM2NDQ4YWVkNDAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFvckaRXEsTUcZ1D25kZszEZT3MCtFByEJgN
Nya2I1ddWIAPBUjD4+uw1CrZBBjQvtSF2GKF6+WbWBdFhXjEUboesZmyW6jrOdQB
P3GW4BA1rnbrq2/rTr0edIJGVaGenS/jerwRJSQ98mkkP984QbdFucC2IxmfZ8W2
MS5Ep35f4EqD8U7AvroR3ieKBuY2X16hCKrsDiXsOciVA5+ewNTBXx0zMO4Mnt4J
ibnqxPIRSrEuZjBYLxz1jbJhXMNThC2ZQDByTQTE4U3N+Wzh7hH4niCU2ZlbEAdG
/H5Md53dWtrsnIyZzkw30qTalhRjQYpoqOMwzawCoknvl5OPVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOzA17vwI0+OMzCp3dqYkVHTSkqkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjM4YWJlNDAtZjE1ZS0z
ZjU3LTgxMTQtYjAyNDRhNmI3N2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1uYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvU+UDq04btBPUUyyfaQ9+l5pDnyURls5/Mi09R9kTNeDc3/nAkEsyK
7hWYVon5MBQCvxS8i9SKOYbVPJIat22qoVQFvGwwweSvr72pNtMgP++GhMvWtwGW
7T+rY9011g4ZpscM261zg9+F29FLc1x6JUPYRKqmLq4lSHwlaWEu7aYG7aoXZUK3
sgzHRyO8LqUvC628s37tth8Ng1fNObsDh+mRhG8KQ/kOgpVc0Mp03+bTuloiwNFS
2fSW3m/9mXhqJASDGm3oH97W/2uXAHffuZ7pUWlVecD5TGfrZG26GJLqmRVj3b+8
rqlTkrOD//wpyPGQ+70m0RlK8QMdEmQ=
-----END CERTIFICATE-----