Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d3ff5cab-83da-3ebd-b599-a98d8f1aade5.roa
File:                     d3ff5cab-83da-3ebd-b599-a98d8f1aade5.roa (raw, json)
Hash identifier:          MK8uRPOcgcXj38dekNuWZF7/JrBkcAxS6X1G7EN6t5o=
Subject key identifier:   57:BC:3B:DB:79:C5:39:8D:85:BA:6B:87:F7:0B:41:DC:CD:3D:89:E0
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D661ED15F19683297BC621F00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d3ff5cab-83da-3ebd-b599-a98d8f1aade5.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        151.213.88.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:1e:d1:5f:19:68:32:97:bc:62:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=fc486144-2a57-4252-80f7-3c8b4393a450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:35:5d:a9:6e:5e:54:4c:37:f6:8d:16:d7:b1:
                    4d:f3:40:11:74:ff:b4:c4:2a:8c:1f:36:5d:06:c6:
                    d9:94:33:35:f6:0e:e1:17:dc:0a:36:de:1a:9a:c5:
                    68:86:00:02:f8:46:3b:1b:3e:6c:a1:d8:91:7e:df:
                    2e:90:b1:c4:9e:1b:c3:5b:1c:28:cb:b3:62:e2:95:
                    e2:9f:6c:47:79:40:23:42:93:bf:81:93:2a:30:a5:
                    bd:97:06:ef:15:46:85:9f:f3:9c:d0:3d:70:ec:3b:
                    6f:a8:0f:9f:18:5d:64:c0:9d:45:3e:79:f1:5c:bf:
                    fc:05:41:18:a4:ff:d3:64:58:12:d6:24:d1:4e:fa:
                    0d:6d:78:b8:8c:68:26:77:54:93:96:72:b9:63:f8:
                    81:bc:f6:1d:55:52:9c:bb:d6:1c:4d:fd:cc:ea:5a:
                    df:3b:3f:f7:24:00:f2:71:32:44:57:7c:a3:d6:8c:
                    2c:5c:e7:d0:05:3b:08:43:30:cc:4b:99:95:11:80:
                    e6:b6:b1:60:0f:49:27:53:4e:43:a8:dd:bc:b2:c8:
                    dc:61:ab:23:32:cb:5b:f8:ca:01:97:98:3b:65:95:
                    f7:4d:4d:47:c4:16:2c:2c:67:7c:81:e1:5f:d8:92:
                    f3:d7:9f:e4:0e:ac:72:80:41:2f:9d:89:51:1c:46:
                    60:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BC:3B:DB:79:C5:39:8D:85:BA:6B:87:F7:0B:41:DC:CD:3D:89:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d3ff5cab-83da-3ebd-b599-a98d8f1aade5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.213.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:95:7f:c5:58:fc:e9:f1:2f:33:25:7c:fe:77:41:aa:1b:37:
         40:d9:f4:45:ce:8b:a7:cc:6f:34:37:23:97:95:7d:7d:6b:89:
         85:ba:e3:7a:b5:81:70:cb:f9:a6:6f:45:7a:ba:c6:63:fa:03:
         fe:ca:7c:c9:81:1e:69:44:c9:1a:21:93:4a:b9:27:29:e7:55:
         67:6f:61:4f:ce:3c:79:46:30:a0:17:26:ce:86:33:35:11:03:
         ef:bd:fa:49:f2:fe:60:8a:93:4e:6e:d8:6a:61:57:3d:f2:a3:
         99:0f:0d:a7:8b:91:73:a0:95:54:2e:84:f0:e2:a5:91:9c:45:
         02:d7:b8:4c:2b:79:a5:a6:5c:99:40:0e:87:97:35:f9:95:81:
         64:2a:c1:22:02:da:52:bb:67:d1:f3:9a:14:c7:7c:c2:7b:b8:
         42:6b:35:18:c1:73:fe:2e:9a:a6:56:41:d3:cc:79:8d:95:df:
         f4:ef:9c:af:56:0d:0c:c4:5d:a1:93:b6:a8:11:5a:72:01:dc:
         6d:3e:0a:16:70:e1:36:77:34:c2:f5:a3:20:ef:d2:3a:cb:c8:
         72:0f:c5:13:15:f2:1e:2b:1a:32:3c:8c:35:7e:ae:fa:7d:e7:
         c7:00:80:fe:47:24:39:bd:ff:47:46:63:af:7d:06:d9:91:bb:
         2f:d5:d4:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mHtFfGWgyl7xiHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZmM0ODYxNDQtMmE1Ny00MjUyLTgwZjctM2M4YjQzOTNhNDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTVdqW5eVEw39o0W17FN80ARdP+0xCqMHzZd
BsbZlDM19g7hF9wKNt4amsVohgAC+EY7Gz5sodiRft8ukLHEnhvDWxwoy7Ni4pXi
n2xHeUAjQpO/gZMqMKW9lwbvFUaFn/Oc0D1w7DtvqA+fGF1kwJ1FPnnxXL/8BUEY
pP/TZFgS1iTRTvoNbXi4jGgmd1STlnK5Y/iBvPYdVVKcu9YcTf3M6lrfOz/3JADy
cTJEV3yj1owsXOfQBTsIQzDMS5mVEYDmtrFgD0knU05DqN28ssjcYasjMstb+MoB
l5g7ZZX3TU1HxBYsLGd8geFf2JLz15/kDqxygEEvnYlRHEZgkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFe8O9t5xTmNhbprh/cLQdzNPYngMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDNmZjVjYWItODNkYS0z
ZWJkLWI1OTktYTk4ZDhmMWFhZGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl9VYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADGVf8VY/OnxLzMlfP53QaobN0DZ9EXOi6fMbzQ3I5eVfX1riYW643q1
gXDL+aZvRXq6xmP6A/7KfMmBHmlEyRohk0q5JynnVWdvYU/OPHlGMKAXJs6GMzUR
A++9+kny/mCKk05u2GphVz3yo5kPDaeLkXOglVQuhPDipZGcRQLXuEwreaWmXJlA
DoeXNfmVgWQqwSIC2lK7Z9HzmhTHfMJ7uEJrNRjBc/4umqZWQdPMeY2V3/TvnK9W
DQzEXaGTtqgRWnIB3G0+ChZw4TZ3NML1oyDv0jrLyHIPxRMV8h4rGjI8jDV+rvp9
58cAgP5HJDm9/0dGY699BtmRuy/V1FY=
-----END CERTIFICATE-----