Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7f5e83f-88fc-3037-8dba-ebd536494494.roa
File:                     c7f5e83f-88fc-3037-8dba-ebd536494494.roa (raw, json)
Hash identifier:          lfGGb4acJ4issAsU+OHeKJwd1cSgl+zd53p2+IxNfAE=
Subject key identifier:   CF:1E:C2:EB:F1:16:BC:52:4C:D8:36:FA:14:91:A5:2E:9A:07:F1:88
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D4FBD28AFDC5572476A46E78C
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7f5e83f-88fc-3037-8dba-ebd536494494.roa
Signing time:             Mon 21 Mar 2022 04:00:00 +0000
ROA not before:           Mon 21 Mar 2022 04:00:00 +0000
ROA not after:            Mon 13 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        64.115.0.0/16 maxlen: 16
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 03:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:4f:bd:28:af:dc:55:72:47:6a:46:e7:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 21 04:00:00 2022 GMT
            Not After : Mar 13 04:00:00 2028 GMT
        Subject: CN=408573cf-cb6f-4f7c-b1e5-d8997dd0a309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a4:28:52:b8:32:0f:7e:75:32:04:49:0a:41:
                    2e:5c:9f:d9:a5:2a:dd:66:5a:25:08:87:07:3d:3e:
                    ed:00:9a:a8:47:6a:82:74:a5:2d:e7:6f:6a:35:8b:
                    1c:6b:0c:76:ba:ab:f0:f3:c0:e1:98:72:18:ea:da:
                    fa:aa:ae:96:d8:db:68:b6:34:b9:d9:53:76:7e:bb:
                    7d:37:0a:8a:6e:21:96:fc:f1:d4:42:b3:59:24:6b:
                    37:d0:04:b4:38:83:11:f4:4d:3f:fd:a9:f6:0f:2b:
                    34:39:d9:83:9e:0c:1b:c4:c8:aa:67:ba:69:67:dd:
                    f2:81:3c:d6:e9:81:3e:be:1b:d7:5f:bb:13:bb:76:
                    30:55:0b:09:2b:af:3e:d1:50:1d:64:27:0c:da:a5:
                    d1:f3:8b:24:f6:4d:51:6d:a9:8d:d2:4b:2d:fe:a6:
                    04:a5:ae:04:7b:fb:b3:b1:c5:b4:04:f1:50:f1:28:
                    0c:22:af:ed:8d:fc:75:c8:d1:92:2f:10:83:19:3a:
                    cc:42:4d:97:5a:93:7d:d1:fb:7a:e7:a6:ac:a2:bf:
                    f7:69:0c:7b:b8:bc:6d:3a:0e:73:4a:2b:31:42:1a:
                    f2:0b:d3:72:06:d7:12:2d:e7:39:0d:cd:1a:1f:fd:
                    ff:1f:e5:75:c9:54:6a:9b:a2:a0:3b:86:4a:de:de:
                    0f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1E:C2:EB:F1:16:BC:52:4C:D8:36:FA:14:91:A5:2E:9A:07:F1:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7f5e83f-88fc-3037-8dba-ebd536494494.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.115.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:81:cd:9f:d4:32:f4:d5:9f:a2:14:fc:5d:58:34:ec:ec:2a:
         9c:b9:24:91:ac:25:75:8d:ff:da:0f:48:f4:23:45:64:9d:04:
         51:44:24:d0:d7:8b:34:26:de:93:77:94:ae:98:3d:54:66:0c:
         1e:f0:b2:35:e3:d5:b7:ed:16:cf:c7:6a:a4:bb:70:6a:a4:fe:
         8a:0e:f2:f8:38:05:d2:eb:53:bf:20:2f:f5:f1:52:44:f9:21:
         9e:f0:6d:4b:eb:76:d3:a5:09:96:41:b3:37:69:b0:59:42:1c:
         14:fe:d3:4c:6d:bd:8c:b8:9a:97:bc:89:b0:99:d9:66:b1:5d:
         f1:07:84:fa:ba:ec:eb:93:44:87:2c:40:72:ec:51:ba:4a:f3:
         8b:a5:7d:80:eb:8b:45:6b:19:03:86:e1:d8:25:fe:9a:44:a4:
         0c:85:2a:bc:08:06:a3:e4:27:97:a0:33:ff:c3:bb:0b:73:2c:
         22:c7:4c:2c:3d:6e:0f:cd:fd:f3:26:5b:75:d8:4e:95:05:84:
         6f:16:d0:e7:28:14:43:c5:d0:7b:7e:b6:30:05:5d:a7:22:42:
         55:eb:c5:61:7a:4b:46:73:5a:a5:3f:15:16:03:06:39:4c:4b:
         3c:b1:27:45:04:83:12:6f:19:46:b9:95:bd:5a:82:58:b7:79:
         55:67:ef:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----