Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/66fb1a73-1909-351c-b6fd-21bc9b1a56e0.roa
File:                     66fb1a73-1909-351c-b6fd-21bc9b1a56e0.roa (raw, json)
Hash identifier:          l60cvQl7LBkxSBt8tFKLy5mJYTvygNEeySjMLe4rnog=
Subject key identifier:   E1:C7:43:0C:AD:28:73:90:37:60:43:EB:64:67:95:49:39:77:6D:05
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D661FFB8AB4847831214F94C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/66fb1a73-1909-351c-b6fd-21bc9b1a56e0.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        173.187.172.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 04:54:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:1f:fb:8a:b4:84:78:31:21:4f:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=12980961-e0c1-4d02-9e60-b1a16a157f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dd:a0:7b:fb:8b:19:62:5e:6c:f3:68:39:6b:
                    0f:bd:99:b7:a6:6f:13:6c:1a:f2:88:8e:2a:68:f5:
                    38:79:f3:5d:16:ce:b5:29:5a:d7:95:7a:18:8c:5d:
                    6b:58:81:fc:ac:4f:b0:3f:b5:8a:3e:40:74:fc:2a:
                    84:1d:09:11:44:6e:2c:de:f7:6d:bd:83:b7:cc:3c:
                    f8:86:b5:ad:d6:07:f2:8e:08:ea:c2:15:41:6e:85:
                    c8:2c:a6:5b:5c:04:f1:17:96:74:4a:a4:4a:fd:01:
                    d9:74:27:eb:e1:85:e6:ab:b8:b5:d6:5f:e3:ae:cd:
                    2e:c6:ca:4b:ba:0e:bf:95:52:98:34:41:15:f8:df:
                    15:d4:35:b1:56:4b:c4:38:3e:d3:26:54:5b:29:8b:
                    fd:d6:60:dc:b7:38:3c:66:4c:54:f3:78:35:aa:82:
                    81:b3:44:de:db:97:5e:94:c9:bd:55:48:d4:7e:cc:
                    32:f0:90:74:48:a5:a0:90:9b:04:9b:2c:06:c8:06:
                    56:3a:58:5b:5c:7b:2c:40:d9:49:6e:d8:ed:fe:89:
                    d7:1c:97:e2:fc:6d:ba:d2:90:91:70:ca:71:1c:d9:
                    2d:90:cf:a6:27:0f:8c:bb:6c:b3:39:46:21:42:14:
                    26:c7:85:f7:8a:0a:84:9a:03:f4:d9:28:12:7a:95:
                    dc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C7:43:0C:AD:28:73:90:37:60:43:EB:64:67:95:49:39:77:6D:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/66fb1a73-1909-351c-b6fd-21bc9b1a56e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.187.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:63:da:87:00:b5:57:86:68:7c:12:a9:fb:3b:a1:46:a3:19:
         e1:77:b1:92:98:6f:9f:08:08:44:ae:3c:d8:6d:e8:32:67:c9:
         5e:86:0c:51:42:c0:3f:24:06:c0:7f:51:bf:33:6b:92:67:05:
         be:bb:ed:93:08:00:f2:81:52:dd:70:a0:57:65:5e:24:b5:3f:
         9c:ba:97:9d:e1:65:b8:ed:38:4c:25:9b:8a:74:c7:8d:39:d2:
         81:6b:67:1e:b6:c2:64:f4:9b:71:a2:8f:01:bc:41:4e:07:f7:
         1c:d6:ea:97:73:08:da:bb:14:0f:bc:93:10:d5:56:9e:d3:86:
         67:7d:6b:de:82:b6:d3:f6:8f:f6:4a:a6:87:8d:8c:f5:8f:b4:
         ea:7d:4b:7f:be:22:b8:b0:af:43:f0:84:ff:a3:1f:95:15:08:
         8d:61:1c:3a:fa:7a:f0:ad:c5:09:2d:c8:71:2d:48:d6:33:6b:
         96:0f:18:cf:ca:05:7c:c1:54:2d:d7:2c:74:de:e7:14:77:ee:
         28:05:c1:48:97:fa:d0:7f:9c:64:f9:e6:b7:59:78:3e:99:b2:
         a5:35:6e:22:cf:a0:a3:e0:ea:cd:69:1f:e4:82:3c:cd:87:bc:
         e9:01:b8:43:25:31:24:15:b3:8b:03:67:db:8f:a1:1a:e4:16:
         18:ce:12:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----