Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc95a315-1a88-3b6c-947f-06408763e705.roa
File:                     bc95a315-1a88-3b6c-947f-06408763e705.roa (raw, json)
Hash identifier:          V/SavHiRt/sKiaOF46w/RuLphKlIeOJXdYkPI9wxe8k=
Subject key identifier:   2B:20:4F:09:68:01:9F:88:C9:C3:C8:9A:2B:25:7E:C1:AE:3E:EB:65
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D57E4FB1E56B5BDEA22DAE5C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc95a315-1a88-3b6c-947f-06408763e705.roa
Signing time:             Thu 24 Mar 2022 04:00:00 +0000
ROA not before:           Thu 24 Mar 2022 04:00:00 +0000
ROA not after:            Thu 16 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        209.236.128.0/18 maxlen: 18
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 05:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:57:e4:fb:1e:56:b5:bd:ea:22:da:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 24 04:00:00 2022 GMT
            Not After : Mar 16 04:00:00 2028 GMT
        Subject: CN=f70fad33-b88b-4bb7-86df-e2787a7aea19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:67:60:7a:dd:dd:23:71:d6:15:bf:d8:48:09:
                    32:f2:d1:ab:65:91:6e:28:59:99:a9:89:d5:69:cf:
                    5c:e0:12:ad:13:8a:df:a8:dd:f3:f8:8b:87:73:42:
                    4e:7f:91:ed:38:a5:d8:03:cf:a9:63:0b:42:15:a4:
                    a3:61:dc:d5:1a:e3:23:68:4c:db:9a:75:8d:58:77:
                    40:ee:d0:37:5f:34:47:fc:16:8a:7e:0b:eb:18:33:
                    0e:67:7a:a6:44:6f:3d:c2:4d:3c:69:a8:23:82:79:
                    ad:06:c0:7a:06:93:b0:40:f7:da:87:98:b5:29:d0:
                    bc:2f:ab:b4:2a:c8:df:ba:95:0e:ee:88:2b:eb:8d:
                    ca:44:46:97:18:48:41:86:9f:87:d2:cd:87:b8:78:
                    a0:af:b0:20:2c:d7:7e:af:74:f5:19:65:07:58:af:
                    0c:9e:06:83:d4:00:9c:3e:2e:3a:0e:19:cc:46:39:
                    8a:86:97:d5:a3:3e:e7:65:1f:91:95:b8:65:4d:68:
                    07:59:0d:3f:f3:f8:1c:d6:f5:d2:f9:25:e3:22:68:
                    d5:28:6d:43:3e:ae:dd:55:87:e8:48:56:c8:f4:54:
                    54:26:9d:b5:d3:58:8a:08:5a:4d:ad:3c:20:2d:a4:
                    0a:b4:99:63:a6:e5:56:ef:3d:50:bc:34:4c:b5:9e:
                    5d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:20:4F:09:68:01:9F:88:C9:C3:C8:9A:2B:25:7E:C1:AE:3E:EB:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc95a315-1a88-3b6c-947f-06408763e705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:cd:0f:c6:35:b0:a6:3a:45:83:98:0e:88:26:20:02:54:3b:
         4d:00:b3:17:e5:dc:72:ef:83:db:49:d8:6a:53:5d:8a:1f:b5:
         35:54:e4:f8:13:b6:dd:6e:a9:51:e0:b2:99:91:f5:e1:b2:6c:
         1c:58:b8:54:18:e4:38:b9:94:39:99:ce:33:30:80:ab:8d:5c:
         1b:bd:ea:bd:08:50:dd:02:00:00:7e:a2:f8:5b:b3:83:a9:00:
         8e:5e:1c:8c:d9:18:61:9a:93:14:79:31:ad:9a:7d:d0:ed:34:
         c4:48:e8:4e:09:0b:c9:88:06:b4:79:b5:e4:48:11:09:c4:94:
         1b:0f:37:d7:47:f0:38:0d:f5:0c:6e:86:cf:b7:06:61:79:58:
         13:ce:fb:89:41:08:99:39:65:37:a7:17:9d:54:cf:e1:91:70:
         cf:ec:68:de:aa:24:52:9e:8c:a1:b3:a5:9b:7e:6e:26:d7:10:
         70:60:55:88:bc:ae:f7:cd:d3:5c:1c:fb:59:ee:72:ca:9e:ea:
         15:2e:ec:1d:fc:e0:a7:41:bc:2f:1f:31:83:2b:2d:8d:2c:83:
         04:a7:60:0d:f7:10:b2:33:c8:72:54:8a:1f:b4:49:4c:66:4f:
         17:d1:c4:c1:82:66:9a:2f:5f:0b:41:c2:08:c5:9e:0e:2b:b6:
         3b:b5:85:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----