Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/715b647a-bea3-3b12-8bbd-75ca85153b57.roa
File:                     715b647a-bea3-3b12-8bbd-75ca85153b57.roa (raw, json)
Hash identifier:          eAGZtGj0/bdZrQv2+R8fZ0/blMW17fz0EBaFmo1Cv44=
Subject key identifier:   10:AE:C5:F7:E6:ED:79:1E:0F:4E:94:68:D0:77:23:6A:DC:EC:8C:64
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D66202928AC80F56213252D80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/715b647a-bea3-3b12-8bbd-75ca85153b57.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        173.188.64.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:20:29:28:ac:80:f5:62:13:25:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=3382df6c-6e2c-4807-aae4-703b32834155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:15:2e:92:fe:e4:e8:cc:56:53:22:ef:ce:86:
                    8e:eb:da:f3:bf:7b:7e:c0:44:08:e8:38:d6:16:47:
                    b1:f8:93:97:c2:e4:2b:ab:81:5f:da:49:4f:46:b5:
                    d6:07:e7:a7:69:16:b4:91:7d:1c:8e:5b:93:02:d5:
                    2a:f5:e7:ca:7e:3b:c8:cc:f0:2b:b2:d4:17:85:af:
                    01:e5:45:22:38:e5:47:75:59:8d:8a:44:1e:6a:bc:
                    49:94:b2:20:e4:9d:e1:b0:ab:74:af:9d:71:ca:0c:
                    76:40:00:be:b9:93:90:32:c3:c5:13:91:f3:a2:cf:
                    07:1a:9d:30:74:1c:d0:5b:86:77:97:15:4d:fe:64:
                    62:6f:d1:0c:a7:18:b8:a6:ee:32:91:b3:25:e5:4f:
                    f6:9d:8a:ec:be:59:00:2f:af:7a:7a:f9:9d:5c:7e:
                    4b:7e:dd:7c:f1:7a:41:1a:92:2a:8b:fb:77:d3:b1:
                    90:16:5a:a4:48:ec:8f:8c:2c:23:50:40:93:11:d4:
                    31:94:0a:29:f1:35:31:53:45:10:6d:a5:d7:f7:56:
                    51:92:7f:de:66:2f:28:f8:67:73:de:14:6d:78:c7:
                    7b:8b:47:b3:49:f6:92:02:83:68:d8:82:c4:c1:1a:
                    29:72:a2:91:19:1b:71:35:4c:81:b0:96:66:8e:ed:
                    c9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AE:C5:F7:E6:ED:79:1E:0F:4E:94:68:D0:77:23:6A:DC:EC:8C:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/715b647a-bea3-3b12-8bbd-75ca85153b57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.188.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:bb:0c:0d:4e:df:0c:e0:db:99:d7:07:f6:f0:98:94:74:47:
         5f:4a:a7:99:ff:0b:8c:02:25:f6:9e:86:e6:63:d7:f7:bf:f2:
         6d:c1:78:71:95:18:c4:a4:20:b0:8e:b6:60:f6:7e:87:8a:27:
         e1:6d:ad:9e:74:7b:7b:33:e1:67:0d:3b:b1:b2:01:36:de:3c:
         0e:db:ef:5b:aa:0a:d9:7b:a5:ca:67:53:09:c5:0c:e6:81:75:
         5a:21:cb:dc:47:a3:9e:70:2a:d7:85:59:66:86:da:8b:93:27:
         ce:67:02:8b:9b:bb:94:95:d7:e1:dd:dc:3d:7f:90:7f:7b:28:
         c2:5b:7a:52:43:ed:6e:ad:99:dc:db:f1:87:99:a4:71:c2:07:
         bf:cd:5d:f3:85:1b:95:ec:ae:c5:c5:32:79:86:bb:29:4a:e7:
         54:7f:08:64:86:31:95:48:63:61:09:3d:97:a4:14:0d:dd:99:
         97:15:6a:03:2a:c5:8b:69:77:19:62:df:ee:dd:06:00:be:f3:
         48:af:93:f2:dd:82:24:c5:1f:71:3d:1c:c2:91:3e:f2:8b:01:
         28:99:d1:99:a4:e0:96:88:85:c4:6d:1c:74:a8:62:2f:9f:56:
         bc:3c:40:96:21:e5:40:d8:7a:f5:58:99:85:e4:86:81:5b:e6:
         c8:23:fd:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mICkorID1YhMlLYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
MzM4MmRmNmMtNmUyYy00ODA3LWFhZTQtNzAzYjMyODM0MTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxUukv7k6MxWUyLvzoaO69rzv3t+wEQI6DjW
Fkex+JOXwuQrq4Ff2klPRrXWB+enaRa0kX0cjluTAtUq9efKfjvIzPArstQXha8B
5UUiOOVHdVmNikQearxJlLIg5J3hsKt0r51xygx2QAC+uZOQMsPFE5Hzos8HGp0w
dBzQW4Z3lxVN/mRib9EMpxi4pu4ykbMl5U/2nYrsvlkAL696evmdXH5Lft188XpB
GpIqi/t307GQFlqkSOyPjCwjUECTEdQxlAop8TUxU0UQbaXX91ZRkn/eZi8o+Gdz
3hRteMd7i0ezSfaSAoNo2ILEwRopcqKRGRtxNUyBsJZmju3JzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBCuxffm7XkeD06UaNB3I2rc7IxkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzE1YjY0N2EtYmVhMy0z
YjEyLThiYmQtNzVjYTg1MTUzYjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbxAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACy7DA1O3wzg25nXB/bwmJR0R19Kp5n/C4wCJfaehuZj1/e/8m3BeHGV
GMSkILCOtmD2foeKJ+FtrZ50e3sz4WcNO7GyATbePA7b71uqCtl7pcpnUwnFDOaB
dVohy9xHo55wKteFWWaG2ouTJ85nAoubu5SV1+Hd3D1/kH97KMJbelJD7W6tmdzb
8YeZpHHCB7/NXfOFG5XsrsXFMnmGuylK51R/CGSGMZVIY2EJPZekFA3dmZcVagMq
xYtpdxli3+7dBgC+80ivk/LdgiTFH3E9HMKRPvKLASiZ0Zmk4JaIhcRtHHSoYi+f
Vrw8QJYh5UDYevVYmYXkhoFb5sgj/Xo=
-----END CERTIFICATE-----