Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/288e75bf-3537-3ff9-b981-3266f645eea4.roa
File:                     288e75bf-3537-3ff9-b981-3266f645eea4.roa (raw, json)
Hash identifier:          4weV58/i/tEPnsyVhxQLBJud4x9L9E+U28d4sTPsHsQ=
Subject key identifier:   70:EE:86:7D:E5:4D:1C:9D:BF:25:1F:DF:01:16:00:4F:30:AA:47:60
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583E697B02A4B6F797D056BAC458
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/288e75bf-3537-3ff9-b981-3266f645eea4.roa
Signing time:             Wed 29 Jun 2022 12:00:00 +0000
ROA not before:           Wed 29 Jun 2022 12:00:00 +0000
ROA not after:            Thu 22 Jun 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        64.24.219.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:69:7b:02:a4:b6:f7:97:d0:56:ba:c4:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun 29 12:00:00 2022 GMT
            Not After : Jun 22 04:00:00 2028 GMT
        Subject: CN=d2c9b990-c09b-4848-a485-6f4ca0934177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9f:00:d5:78:d7:d6:55:d5:49:e1:e9:be:1d:
                    fc:7e:db:7e:80:6f:81:5a:29:2c:83:4d:4e:b4:d6:
                    d9:eb:c0:74:6b:d4:36:81:18:47:28:95:6c:2c:83:
                    3d:d8:3f:ee:eb:6c:69:34:cd:dd:e0:6c:63:00:20:
                    9a:bc:d8:a3:48:10:fb:80:df:1b:d6:41:2d:f7:c3:
                    9b:80:6d:6d:e1:89:f5:7c:12:b8:a4:9f:47:c6:10:
                    65:1d:d1:2e:23:bb:32:44:2d:3a:fd:65:c6:3f:25:
                    11:ba:bd:10:ae:03:24:20:68:ce:79:cb:6c:5b:74:
                    63:31:5e:be:34:80:29:e4:aa:fb:72:3f:54:ee:7b:
                    65:ff:6f:a0:ed:e9:49:d1:fe:9a:ce:22:41:6a:19:
                    96:30:67:49:e5:c8:cd:fa:aa:d2:7a:f6:20:f2:cd:
                    00:52:90:55:0d:8a:04:5d:78:40:2d:d5:ec:5d:74:
                    66:5d:91:7d:48:71:b5:7b:20:44:ee:bd:f6:98:c5:
                    b2:30:ac:8d:95:cf:e5:7b:f3:22:fd:79:51:03:38:
                    53:d3:6d:62:12:96:e9:ae:3d:f3:35:0c:f9:57:da:
                    eb:42:b8:30:8e:0a:e4:73:74:35:d4:98:67:a3:94:
                    74:1b:54:e6:6f:9c:f6:ca:02:72:34:3e:36:e0:0a:
                    0c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EE:86:7D:E5:4D:1C:9D:BF:25:1F:DF:01:16:00:4F:30:AA:47:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/288e75bf-3537-3ff9-b981-3266f645eea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.24.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:e9:59:e4:d3:cd:23:8a:07:ec:09:74:8f:9c:47:48:74:df:
         a6:6b:d0:a9:ad:fa:29:f2:5e:36:96:e4:07:b8:9e:bb:cd:b3:
         02:57:bb:22:52:27:e7:d5:b1:6f:1b:b9:a3:4c:9b:a3:dd:37:
         cf:0b:6e:5a:42:f7:21:a4:8b:89:b3:3b:1f:d5:70:a9:7e:b1:
         6a:f5:12:a5:a6:2e:7b:e7:03:b5:1e:39:c8:e7:06:ab:46:7c:
         25:5b:26:9e:b5:0e:a7:83:2d:80:37:5f:91:e0:69:da:96:11:
         e0:10:6d:94:d1:93:4e:9a:88:16:3a:e3:05:70:ea:b6:4e:aa:
         fc:1a:44:6f:c1:18:36:79:0b:3b:58:bf:41:2a:04:9e:b4:ab:
         fc:b0:4f:f6:88:73:9b:d3:7f:e1:cd:ce:31:55:4f:56:af:c2:
         ed:f7:26:5c:d9:af:b6:ad:65:da:fa:f2:cc:cb:23:c4:13:30:
         05:8b:24:c3:68:cf:be:62:03:64:9d:b4:2f:3c:d5:ea:08:b8:
         a5:ff:27:01:e2:ec:4d:16:66:a3:79:36:3f:f8:c9:ac:8a:d7:
         8c:83:7d:b1:be:ba:af:cf:ff:3b:04:9b:a0:e1:57:4b:f3:a6:
         99:c0:3b:fa:af:c7:1c:ba:ea:6f:f1:a5:69:cf:4c:32:01:89:
         c1:85:18:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD5pewKktveX0Fa6xFgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDYyOTEyMDAwMFoXDTI4MDYyMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZDJjOWI5OTAtYzA5Yi00ODQ4LWE0ODUtNmY0Y2EwOTM0MTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy58A1XjX1lXVSeHpvh38ftt+gG+BWiksg01O
tNbZ68B0a9Q2gRhHKJVsLIM92D/u62xpNM3d4GxjACCavNijSBD7gN8b1kEt98Ob
gG1t4Yn1fBK4pJ9HxhBlHdEuI7syRC06/WXGPyURur0QrgMkIGjOectsW3RjMV6+
NIAp5Kr7cj9U7ntl/2+g7elJ0f6aziJBahmWMGdJ5cjN+qrSevYg8s0AUpBVDYoE
XXhALdXsXXRmXZF9SHG1eyBE7r32mMWyMKyNlc/le/Mi/XlRAzhT021iEpbprj3z
NQz5V9rrQrgwjgrkc3Q11Jhno5R0G1Tmb5z2ygJyND424AoMLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHDuhn3lTRydvyUf3wEWAE8wqkdgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjg4ZTc1YmYtMzUzNy0z
ZmY5LWI5ODEtMzI2NmY2NDVlZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBjbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFPpWeTTzSOKB+wJdI+cR0h036Zr0Kmt+inyXjaW5Ae4nrvNswJXuyJS
J+fVsW8buaNMm6PdN88LblpC9yGki4mzOx/VcKl+sWr1EqWmLnvnA7UeOcjnBqtG
fCVbJp61DqeDLYA3X5HgadqWEeAQbZTRk06aiBY64wVw6rZOqvwaRG/BGDZ5CztY
v0EqBJ60q/ywT/aIc5vTf+HNzjFVT1avwu33JlzZr7atZdr68szLI8QTMAWLJMNo
z75iA2SdtC881eoIuKX/JwHi7E0WZqN5Nj/4yayK14yDfbG+uq/P/zsEm6DhV0vz
ppnAO/qvxxy66m/xpWnPTDIBicGFGOQ=
-----END CERTIFICATE-----