Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d70e35ea-1d5d-3838-8240-94091cdfa1c8.roa
File:                     d70e35ea-1d5d-3838-8240-94091cdfa1c8.roa (raw, json)
Hash identifier:          gnb2B8VZ99o8dJATCPAEEJPXO5ZjQymG7WV3hzALPms=
Subject key identifier:   BB:33:F7:E0:02:87:C2:10:49:83:F0:82:91:4D:27:CD:C1:DB:64:4C
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D4FA9021A12B52DCE3F245900
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d70e35ea-1d5d-3838-8240-94091cdfa1c8.roa
Signing time:             Mon 21 Mar 2022 04:00:00 +0000
ROA not before:           Mon 21 Mar 2022 04:00:00 +0000
ROA not after:            Mon 13 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        207.8.224.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:4f:a9:02:1a:12:b5:2d:ce:3f:24:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 21 04:00:00 2022 GMT
            Not After : Mar 13 04:00:00 2028 GMT
        Subject: CN=8645d12d-7815-41fb-8aef-6cb900a0f702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:52:21:b4:54:b5:6e:fd:d3:0a:7e:d7:29:b2:
                    ec:95:f0:ea:20:f6:43:b1:4e:2d:ef:47:ee:00:c8:
                    da:0e:7f:c1:dd:83:a2:41:f4:c6:bd:51:8f:28:af:
                    57:35:e2:65:c8:d1:3d:c3:23:12:be:ff:77:aa:22:
                    a0:36:9c:51:17:70:ef:a7:d2:76:8d:76:16:f6:d0:
                    8a:ca:8f:6c:cb:47:09:e9:99:a7:40:97:8f:3f:24:
                    56:fc:27:3d:bf:94:35:ba:c1:9d:c7:6a:94:52:3d:
                    3b:e5:da:12:b5:de:49:84:23:a9:56:ba:11:65:25:
                    ea:5c:ee:41:e7:72:25:0a:9e:d5:09:cd:30:f8:f2:
                    1f:46:66:f4:fd:0c:60:d1:92:62:ab:27:ba:d7:4d:
                    11:da:9f:e1:ff:53:54:89:27:67:37:80:5b:d6:d8:
                    e2:04:c2:3b:0b:ac:96:37:c7:4a:61:5d:79:c9:53:
                    ee:e0:af:00:ec:ae:b1:d0:e3:43:34:a5:52:9c:6c:
                    5a:21:0b:4c:87:22:0f:9f:a5:7a:1e:10:a8:08:17:
                    ef:40:90:99:7a:04:30:b7:c6:c4:58:a2:c3:56:c7:
                    08:0b:83:63:61:f1:12:0b:e2:3e:2c:28:9a:e0:39:
                    b7:7f:d4:9e:ca:07:83:01:ef:bb:4d:3f:76:37:8c:
                    0e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:33:F7:E0:02:87:C2:10:49:83:F0:82:91:4D:27:CD:C1:DB:64:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d70e35ea-1d5d-3838-8240-94091cdfa1c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.8.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:7e:4e:26:c5:1f:23:7e:a8:2d:97:5d:9c:4d:70:61:4a:a3:
         6c:42:61:46:34:b7:73:be:ad:ef:3f:23:94:a1:07:e0:d6:b7:
         f4:7b:ca:69:ae:4e:16:88:6a:7d:52:c0:9a:e9:0b:e4:5e:72:
         93:55:9a:b9:f0:44:ff:31:71:bc:55:64:72:0a:7d:72:2a:e9:
         b9:37:63:0b:6a:02:b2:1d:fc:a9:e0:d8:93:ba:7d:f7:b5:e7:
         f6:1c:8a:f5:2b:ad:87:ba:24:f0:27:c5:7f:68:be:59:5c:dd:
         21:b9:e0:77:bb:e8:23:42:0c:73:5c:c6:0b:71:5d:39:34:b1:
         22:00:51:8d:d6:c2:13:e7:0e:e9:4d:e8:97:01:2c:1d:65:21:
         a6:93:0c:ff:d9:ab:4f:df:93:bf:31:1d:39:54:de:ce:9e:78:
         71:30:c4:b3:88:2d:4c:49:56:7b:64:fa:c8:38:b2:aa:f1:4d:
         fb:e5:91:e5:98:db:c7:67:1a:bc:b0:9d:65:21:a8:4f:b8:8f:
         d9:5f:03:f2:4a:61:8b:df:05:b5:db:fc:ee:a9:2c:33:29:11:
         8d:7d:4b:a2:77:a2:7d:77:0b:6e:57:d2:2b:25:35:84:1e:f0:
         2f:9f:79:3f:ec:fa:c9:79:01:42:00:74:1e:7a:48:b1:29:b4:
         c0:27:04:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1PqQIaErUtzj8kWQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyMTA0MDAwMFoXDTI4MDMxMzA0MDAwMFowLzEtMCsGA1UEAxMk
ODY0NWQxMmQtNzgxNS00MWZiLThhZWYtNmNiOTAwYTBmNzAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1IhtFS1bv3TCn7XKbLslfDqIPZDsU4t70fu
AMjaDn/B3YOiQfTGvVGPKK9XNeJlyNE9wyMSvv93qiKgNpxRF3Dvp9J2jXYW9tCK
yo9sy0cJ6ZmnQJePPyRW/Cc9v5Q1usGdx2qUUj075doStd5JhCOpVroRZSXqXO5B
53IlCp7VCc0w+PIfRmb0/Qxg0ZJiqye6100R2p/h/1NUiSdnN4Bb1tjiBMI7C6yW
N8dKYV15yVPu4K8A7K6x0ONDNKVSnGxaIQtMhyIPn6V6HhCoCBfvQJCZegQwt8bE
WKLDVscIC4NjYfESC+I+LCia4Dm3f9SeygeDAe+7TT92N4wOQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLsz9+ACh8IQSYPwgpFNJ83B22RMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDcwZTM1ZWEtMWQ1ZC0z
ODM4LTgyNDAtOTQwOTFjZGZhMWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzwjgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABB+TibFHyN+qC2XXZxNcGFKo2xCYUY0t3O+re8/I5ShB+DWt/R7ymmu
ThaIan1SwJrpC+RecpNVmrnwRP8xcbxVZHIKfXIq6bk3YwtqArId/Kng2JO6ffe1
5/YcivUrrYe6JPAnxX9ovllc3SG54He76CNCDHNcxgtxXTk0sSIAUY3WwhPnDulN
6JcBLB1lIaaTDP/Zq0/fk78xHTlU3s6eeHEwxLOILUxJVntk+sg4sqrxTfvlkeWY
28dnGrywnWUhqE+4j9lfA/JKYYvfBbXb/O6pLDMpEY19S6J3on13C25X0islNYQe
8C+feT/s+sl5AUIAdB56SLEptMAnBDQ=
-----END CERTIFICATE-----