Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0493b0b0-e25f-36bd-84c7-2e63d8d065fb.roa
File:                     0493b0b0-e25f-36bd-84c7-2e63d8d065fb.roa (raw, json)
Hash identifier:          GimNKe2wHkV4YOHEBQOD7So6EKZhOiaQ8TgvmBujg4w=
Subject key identifier:   23:5A:07:29:C2:D0:40:46:4C:1D:76:B3:2A:A9:05:2D:E7:EC:CE:BD
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D4FABFD403E784B051D7F7B00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0493b0b0-e25f-36bd-84c7-2e63d8d065fb.roa
Signing time:             Mon 21 Mar 2022 04:00:00 +0000
ROA not before:           Mon 21 Mar 2022 04:00:00 +0000
ROA not after:            Mon 13 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        207.244.128.0/21 maxlen: 21
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 05:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:4f:ab:fd:40:3e:78:4b:05:1d:7f:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 21 04:00:00 2022 GMT
            Not After : Mar 13 04:00:00 2028 GMT
        Subject: CN=4266b955-8b2c-477b-9bc6-31394053aebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:76:48:bf:d0:9e:75:c3:3f:03:75:de:04:5d:
                    ee:a9:52:d4:0f:04:0e:1a:e3:77:d2:0b:27:bd:a2:
                    e2:e0:1c:d6:7a:f9:f6:b5:38:48:9d:fa:1f:25:e3:
                    2c:81:af:64:58:9a:b7:65:2b:11:c7:2a:ad:cd:5e:
                    6f:bc:07:98:ea:a8:11:b2:c5:c5:ff:79:6f:29:d0:
                    7b:bf:ea:5d:db:09:2f:1a:a0:a9:cd:f2:38:41:fe:
                    80:cd:03:22:43:75:08:86:3f:38:72:b9:47:42:70:
                    90:53:77:ae:07:72:cd:84:b2:1e:98:99:16:80:75:
                    7d:e0:c7:30:ea:54:18:d9:b8:db:13:7a:26:62:2b:
                    d1:ff:63:d2:aa:79:e7:5b:e0:83:38:3b:98:dd:96:
                    a1:11:16:6e:22:da:6d:c1:72:b9:52:d7:14:22:5c:
                    9e:17:11:25:c1:29:62:e8:d5:f2:23:ef:25:96:6a:
                    c7:42:03:40:51:5a:43:e4:34:ca:b5:96:4a:cd:3e:
                    3c:1e:60:e0:2a:ca:25:30:b8:1c:17:fe:42:a9:b7:
                    07:da:ce:1e:4a:99:3c:12:2e:0f:e3:f2:f6:c9:a2:
                    e2:95:0f:f9:1d:0d:22:98:66:19:48:b2:46:8e:dc:
                    e9:7c:7a:48:24:5e:3a:6f:0e:18:1a:3a:fe:5d:16:
                    4c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5A:07:29:C2:D0:40:46:4C:1D:76:B3:2A:A9:05:2D:E7:EC:CE:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0493b0b0-e25f-36bd-84c7-2e63d8d065fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.244.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:62:eb:2b:c0:3e:63:5e:f7:21:e6:f1:b3:96:5e:6e:d1:66:
         e0:82:58:c8:c4:47:f8:4f:09:36:9a:d9:b6:75:3d:19:45:82:
         64:76:2b:e6:c4:f0:b4:f8:09:d3:16:eb:c8:89:ac:94:52:73:
         e0:f0:6d:77:cb:12:78:33:1d:16:43:38:02:cd:77:66:41:c6:
         a3:f8:86:e9:cc:fb:c9:17:12:6f:75:de:30:0f:45:ae:9b:45:
         05:fc:c4:8d:e2:57:0f:17:17:d5:79:f5:23:2e:2a:8a:08:92:
         bd:a6:5d:45:5a:70:4b:7c:cb:62:f0:fc:35:9f:c0:e4:ba:6c:
         0f:f2:5b:c4:a1:68:68:ae:11:f9:b0:e4:82:85:d9:19:ee:ce:
         65:ee:10:bd:0a:52:95:b0:21:4a:87:f6:f3:4b:f5:5a:fc:af:
         8d:b3:c7:d3:85:85:2a:c4:b9:98:c0:30:cb:d1:58:6a:b9:c0:
         0c:c1:b8:b6:a6:db:23:ae:a0:27:22:a4:3d:e9:99:fe:99:7f:
         30:53:04:0a:cd:5a:26:9d:75:d2:5d:73:2c:4d:00:4f:8f:72:
         5d:cd:6d:74:b8:86:3a:7a:a3:44:fe:ee:1c:4e:6f:af:9f:f5:
         2d:99:a2:74:75:ca:e1:6d:84:db:98:34:f2:f3:f0:22:8c:fa:
         b9:d2:ec:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1Pq/1APnhLBR1/ewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyMTA0MDAwMFoXDTI4MDMxMzA0MDAwMFowLzEtMCsGA1UEAxMk
NDI2NmI5NTUtOGIyYy00NzdiLTliYzYtMzEzOTQwNTNhZWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53ZIv9CedcM/A3XeBF3uqVLUDwQOGuN30gsn
vaLi4BzWevn2tThInfofJeMsga9kWJq3ZSsRxyqtzV5vvAeY6qgRssXF/3lvKdB7
v+pd2wkvGqCpzfI4Qf6AzQMiQ3UIhj84crlHQnCQU3euB3LNhLIemJkWgHV94Mcw
6lQY2bjbE3omYivR/2PSqnnnW+CDODuY3ZahERZuItptwXK5UtcUIlyeFxElwSli
6NXyI+8llmrHQgNAUVpD5DTKtZZKzT48HmDgKsolMLgcF/5CqbcH2s4eSpk8Ei4P
4/L2yaLilQ/5HQ0imGYZSLJGjtzpfHpIJF46bw4YGjr+XRZMJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCNaBynC0EBGTB12syqpBS3n7M69MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDQ5M2IwYjAtZTI1Zi0z
NmJkLTg0YzctMmU2M2Q4ZDA2NWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz/SAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHti6yvAPmNe9yHm8bOWXm7RZuCCWMjER/hPCTaa2bZ1PRlFgmR2K+bE
8LT4CdMW68iJrJRSc+DwbXfLEngzHRZDOALNd2ZBxqP4hunM+8kXEm913jAPRa6b
RQX8xI3iVw8XF9V59SMuKooIkr2mXUVacEt8y2Lw/DWfwOS6bA/yW8ShaGiuEfmw
5IKF2RnuzmXuEL0KUpWwIUqH9vNL9Vr8r42zx9OFhSrEuZjAMMvRWGq5wAzBuLam
2yOuoCcipD3pmf6ZfzBTBArNWiadddJdcyxNAE+Pcl3NbXS4hjp6o0T+7hxOb6+f
9S2ZonR1yuFthNuYNPLz8CKM+rnS7Cg=
-----END CERTIFICATE-----