Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c6558a52-54eb-3949-89b8-cb8213d0ac62.roa
File:                     c6558a52-54eb-3949-89b8-cb8213d0ac62.roa (raw, json)
Hash identifier:          IxC8tsTLMkhIJC/eXUcLTwCjU3VMQCHesxu4uLw7i+8=
Subject key identifier:   67:14:42:92:5D:4A:32:9C:B3:5E:AC:C1:84:EA:9C:63:4B:3F:31:44
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D4FAD0214FED5B6158216F880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c6558a52-54eb-3949-89b8-cb8213d0ac62.roa
Signing time:             Mon 21 Mar 2022 04:00:00 +0000
ROA not before:           Mon 21 Mar 2022 04:00:00 +0000
ROA not after:            Mon 13 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        209.92.76.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:4f:ad:02:14:fe:d5:b6:15:82:16:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 21 04:00:00 2022 GMT
            Not After : Mar 13 04:00:00 2028 GMT
        Subject: CN=16aa46af-3c77-4de8-88d4-09b805507921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:25:66:e2:d6:d5:d8:dd:73:6c:2a:2e:33:fe:
                    98:13:05:e2:e3:35:d5:f4:21:fe:33:f1:e8:f7:43:
                    47:59:fe:dc:1a:a7:4e:94:b8:ad:7e:4a:e8:0f:46:
                    6e:75:42:7f:9e:61:fd:7e:b8:19:2b:b6:ef:19:e6:
                    e5:49:8b:2d:39:af:b0:18:00:f9:0a:d2:e2:45:32:
                    b6:25:9b:26:8e:5f:7f:01:31:56:00:68:1e:35:59:
                    1f:6f:6b:3a:01:98:a7:3f:9a:08:6f:40:b3:b8:36:
                    49:fd:fa:31:d2:7c:fd:a3:92:5d:f7:ae:aa:fc:2c:
                    a3:56:97:e8:7f:61:71:8d:64:c9:eb:97:c9:ca:79:
                    4b:01:2b:3f:43:28:3c:c4:22:29:ee:b3:ea:d2:88:
                    ed:3a:c9:ff:ae:34:7a:1b:8e:89:44:30:fe:c1:a3:
                    5e:f0:7e:e8:57:68:b5:3a:d8:aa:e9:79:96:25:78:
                    12:5a:93:15:84:29:ec:57:a2:1f:6b:48:d5:34:b9:
                    92:69:37:cb:22:18:02:4a:ba:be:32:41:81:c3:3b:
                    50:67:c4:a8:45:ba:28:56:25:aa:46:01:2e:4a:5b:
                    31:b9:f6:5f:e9:a2:10:dc:98:c0:c6:91:02:9c:0c:
                    db:13:7b:c2:ce:ba:85:be:75:39:7f:28:77:c5:7d:
                    86:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:14:42:92:5D:4A:32:9C:B3:5E:AC:C1:84:EA:9C:63:4B:3F:31:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c6558a52-54eb-3949-89b8-cb8213d0ac62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:0f:6d:ad:01:77:5b:cf:ec:fd:5d:d8:ea:75:2d:69:7b:5d:
         3e:ef:60:1c:0d:9b:ac:aa:f6:6f:04:a5:a1:54:d9:d9:3d:4e:
         3c:3e:be:1e:84:9f:2d:25:77:0e:44:3e:c0:5d:ec:d5:d8:26:
         3e:0d:b1:7e:5b:d5:5c:34:8e:f8:ca:ad:73:4f:f0:02:c7:62:
         72:dd:f8:16:7a:b3:a0:d1:4b:a4:0d:96:10:44:3a:8f:42:ad:
         8c:79:6d:2e:ca:45:96:27:49:7f:41:67:75:a3:93:a4:bf:d5:
         4b:d4:71:d7:9d:87:bd:ad:be:ba:6b:3c:bc:27:41:a2:87:7f:
         51:4e:7a:36:0f:dd:bc:9a:6b:88:3e:97:90:0b:4e:fc:3a:87:
         37:5b:84:73:20:50:36:48:a9:7c:63:07:97:ac:7c:0b:d8:aa:
         5a:cc:bf:ca:c6:9c:0a:2c:ef:9b:e6:25:e8:3b:52:85:33:1d:
         24:18:8e:85:a7:36:bc:18:a4:2f:85:02:31:65:e4:7f:6e:77:
         ec:af:be:18:67:2f:9f:33:98:65:96:0d:15:e9:fd:9b:0b:0d:
         b8:b0:78:f2:89:af:dd:f8:f3:c0:35:7d:1b:0b:24:71:f6:e7:
         43:e4:4f:fe:8f:4a:00:38:47:fd:75:80:79:98:70:0f:68:91:
         5c:28:60:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1PrQIU/tW2FYIW+IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyMTA0MDAwMFoXDTI4MDMxMzA0MDAwMFowLzEtMCsGA1UEAxMk
MTZhYTQ2YWYtM2M3Ny00ZGU4LTg4ZDQtMDliODA1NTA3OTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyVm4tbV2N1zbCouM/6YEwXi4zXV9CH+M/Ho
90NHWf7cGqdOlLitfkroD0ZudUJ/nmH9frgZK7bvGeblSYstOa+wGAD5CtLiRTK2
JZsmjl9/ATFWAGgeNVkfb2s6AZinP5oIb0CzuDZJ/fox0nz9o5Jd966q/CyjVpfo
f2FxjWTJ65fJynlLASs/Qyg8xCIp7rPq0ojtOsn/rjR6G46JRDD+waNe8H7oV2i1
Otiq6XmWJXgSWpMVhCnsV6Ifa0jVNLmSaTfLIhgCSrq+MkGBwztQZ8SoRbooViWq
RgEuSlsxufZf6aIQ3JjAxpECnAzbE3vCzrqFvnU5fyh3xX2GyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGcUQpJdSjKcs16swYTqnGNLPzFEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzY1NThhNTItNTRlYi0z
OTQ5LTg5YjgtY2I4MjEzZDBhYzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0VxMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHkPba0Bd1vP7P1d2Op1LWl7XT7vYBwNm6yq9m8EpaFU2dk9Tjw+vh6E
ny0ldw5EPsBd7NXYJj4NsX5b1Vw0jvjKrXNP8ALHYnLd+BZ6s6DRS6QNlhBEOo9C
rYx5bS7KRZYnSX9BZ3Wjk6S/1UvUcdedh72tvrprPLwnQaKHf1FOejYP3byaa4g+
l5ALTvw6hzdbhHMgUDZIqXxjB5esfAvYqlrMv8rGnAos75vmJeg7UoUzHSQYjoWn
NrwYpC+FAjFl5H9ud+yvvhhnL58zmGWWDRXp/ZsLDbiwePKJr93488A1fRsLJHH2
50PkT/6PSgA4R/11gHmYcA9okVwoYNQ=
-----END CERTIFICATE-----