Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7651e5fc-6eb4-3eec-a9ff-4bf1af06e899.roa
File:                     7651e5fc-6eb4-3eec-a9ff-4bf1af06e899.roa (raw, json)
Hash identifier:          PC04n26keTMsu4Ca1GlhUk2zM0C85DADougcu285Fxw=
Subject key identifier:   C0:71:C5:65:F7:47:59:7C:DD:8E:9D:4D:64:65:17:FA:9D:0F:72:80
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D57E3DCCBC37C07F4488B1200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7651e5fc-6eb4-3eec-a9ff-4bf1af06e899.roa
Signing time:             Thu 24 Mar 2022 04:00:00 +0000
ROA not before:           Thu 24 Mar 2022 04:00:00 +0000
ROA not after:            Thu 16 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        209.155.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:57:e3:dc:cb:c3:7c:07:f4:48:8b:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 24 04:00:00 2022 GMT
            Not After : Mar 16 04:00:00 2028 GMT
        Subject: CN=9c81dd97-c4b7-4c2b-8777-047ad758c05b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:49:b9:ce:e2:5a:aa:11:bb:75:b7:51:65:9e:
                    cd:18:40:c7:44:37:b8:5b:27:0f:9a:64:51:4b:db:
                    35:a2:69:eb:40:c5:e8:59:f1:89:97:c9:57:0a:b0:
                    01:ca:3a:43:43:25:fc:4d:f7:4b:4e:fa:5d:0b:ef:
                    0f:d1:e2:cb:23:57:db:96:6a:16:e3:78:c4:e8:7c:
                    2e:34:0c:bf:1d:de:ac:6f:35:83:2d:7d:ce:cf:e7:
                    38:2b:b5:c2:4e:56:b6:64:05:44:ed:67:94:c9:97:
                    36:73:9e:2d:36:7f:30:13:3a:ee:7b:4e:03:83:1f:
                    3d:ed:14:a2:92:03:67:7a:d3:3f:e4:c4:73:88:46:
                    25:b9:88:ef:29:94:5a:1a:5b:69:1f:86:1b:93:e4:
                    1b:e5:4e:02:cc:69:d5:d1:e2:b1:50:ed:59:60:61:
                    6d:33:8e:1b:3e:8b:bc:a5:ac:70:17:51:0c:56:4e:
                    69:e1:fb:62:51:7f:ab:5f:80:6a:73:44:a0:41:f8:
                    12:31:b6:86:eb:de:72:8c:7c:cd:06:24:32:22:c0:
                    08:84:a7:1d:1f:f6:86:5a:97:4d:5a:62:e5:4a:07:
                    44:af:d6:0c:ce:47:63:72:ec:42:89:fb:68:55:ec:
                    1a:65:72:30:f6:a7:06:c0:b9:d6:39:eb:b5:25:7d:
                    bf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:71:C5:65:F7:47:59:7C:DD:8E:9D:4D:64:65:17:FA:9D:0F:72:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7651e5fc-6eb4-3eec-a9ff-4bf1af06e899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.155.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:b4:d2:53:5f:a3:f7:f9:12:23:ed:b4:8f:f5:b4:01:c5:d1:
         5a:68:de:68:53:06:3d:47:52:0a:d0:af:43:cd:1e:18:61:77:
         f1:75:39:8d:ec:a0:29:44:e4:ee:83:06:32:38:e6:ec:40:d4:
         5e:70:3f:0b:a5:86:65:8f:47:d7:53:91:a8:ea:97:3d:02:25:
         d9:0b:0d:94:b1:b1:13:77:5c:d8:59:b8:f0:72:75:7b:7e:f5:
         d5:63:00:5d:f2:bb:89:1c:e2:09:f7:3a:26:b6:0d:8e:b5:d6:
         8e:a2:f5:19:59:ad:ef:c6:03:da:f6:b3:6e:f3:23:7f:6f:e2:
         8f:e7:ee:48:12:0b:1f:ab:04:2e:80:85:37:dd:c4:11:f4:74:
         02:98:30:fc:c0:8d:4e:76:92:29:e0:10:1e:cc:6e:b9:4c:70:
         fd:6e:04:28:2e:69:11:da:13:6e:9b:1d:66:77:07:ef:28:d2:
         9e:67:39:a3:46:e6:94:3c:da:15:68:a8:c1:be:f6:d2:e9:0b:
         c8:d7:89:09:9f:94:78:19:f9:a3:0f:ed:d9:1c:19:9b:37:d7:
         c2:56:1b:e4:68:93:35:1c:cc:55:39:69:c0:ab:42:3f:79:fc:
         5e:d8:24:8e:26:45:73:15:9f:bc:7f:85:53:b5:57:bb:e7:f6:
         aa:bd:d8:29
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD1X49zLw3wH9EiLEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyNDA0MDAwMFoXDTI4MDMxNjA0MDAwMFowLzEtMCsGA1UEAxMk
OWM4MWRkOTctYzRiNy00YzJiLTg3NzctMDQ3YWQ3NThjMDViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEm5zuJaqhG7dbdRZZ7NGEDHRDe4WycPmmRR
S9s1omnrQMXoWfGJl8lXCrAByjpDQyX8TfdLTvpdC+8P0eLLI1fblmoW43jE6Hwu
NAy/Hd6sbzWDLX3Oz+c4K7XCTla2ZAVE7WeUyZc2c54tNn8wEzrue04Dgx897RSi
kgNnetM/5MRziEYluYjvKZRaGltpH4Ybk+Qb5U4CzGnV0eKxUO1ZYGFtM44bPou8
paxwF1EMVk5p4ftiUX+rX4Bqc0SgQfgSMbaG695yjHzNBiQyIsAIhKcdH/aGWpdN
WmLlSgdEr9YMzkdjcuxCiftoVewaZXIw9qcGwLnWOeu1JX2/WQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMBxxWX3R1l83Y6dTWRlF/qdD3KAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzY1MWU1ZmMtNmViNC0z
ZWVjLWE5ZmYtNGJmMWFmMDZlODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0ZswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAh7TSU1+j9/kSI+20j/W0AcXRWmjeaFMGPUdSCtCvQ80eGGF38XU5jeyg
KUTk7oMGMjjm7EDUXnA/C6WGZY9H11ORqOqXPQIl2QsNlLGxE3dc2Fm48HJ1e371
1WMAXfK7iRziCfc6JrYNjrXWjqL1GVmt78YD2vazbvMjf2/ij+fuSBILH6sELoCF
N93EEfR0Apgw/MCNTnaSKeAQHsxuuUxw/W4EKC5pEdoTbpsdZncH7yjSnmc5o0bm
lDzaFWiowb720ukLyNeJCZ+UeBn5ow/t2RwZmzfXwlYb5GiTNRzMVTlpwKtCP3n8
XtgkjiZFcxWfvH+FU7VXu+f2qr3YKQ==
-----END CERTIFICATE-----