Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3d02c1d-0b1a-3ab4-a116-0147772de293.roa
File:                     e3d02c1d-0b1a-3ab4-a116-0147772de293.roa (raw, json)
Hash identifier:          qSeOpNIxy6fhrtKx/eo0PCSY0qpudXp2Qop63Jw5b+k=
Subject key identifier:   B2:9E:B1:87:AC:F7:C9:7B:6C:E5:E7:71:AD:A5:9F:6F:9B:B8:FE:60
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D57E36A3EC8C02EC9D3091180
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3d02c1d-0b1a-3ab4-a116-0147772de293.roa
Signing time:             Thu 24 Mar 2022 04:00:00 +0000
ROA not before:           Thu 24 Mar 2022 04:00:00 +0000
ROA not after:            Thu 16 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        209.60.76.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:57:e3:6a:3e:c8:c0:2e:c9:d3:09:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 24 04:00:00 2022 GMT
            Not After : Mar 16 04:00:00 2028 GMT
        Subject: CN=62551e03-f300-4033-b4fb-5fa0fa8925d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6a:38:37:44:29:4a:71:94:02:2e:15:65:b2:
                    1a:85:93:b0:76:a6:0b:cd:af:c9:c4:ea:00:5e:d2:
                    72:26:24:b5:7c:72:04:60:ff:77:33:86:07:ab:4f:
                    fc:70:a3:38:36:7f:c7:51:99:cb:9a:cf:b1:e2:3b:
                    2a:fa:2d:18:4c:6c:f2:97:b5:56:d5:a8:ea:71:fa:
                    76:06:0c:21:3c:94:6b:e0:05:24:64:06:a0:ed:c0:
                    cb:be:b0:46:47:68:43:6f:c2:12:d5:b2:d7:1c:d2:
                    33:56:69:c8:ee:38:00:d2:94:f3:cf:e5:62:a7:3a:
                    72:cb:70:5d:bf:f4:a8:76:52:c1:61:11:84:3b:ac:
                    2e:49:24:de:0a:4e:5d:e2:d3:35:79:28:33:66:0f:
                    10:80:a1:56:d1:ce:ec:19:3e:86:b0:6f:b2:d2:c6:
                    cf:a3:e8:2b:13:40:3d:2b:0b:71:4b:92:7c:5f:50:
                    7e:16:38:26:1c:ee:a3:cd:1c:81:be:08:31:99:1a:
                    1d:aa:ef:48:8f:67:ac:af:06:4e:cb:cd:69:62:08:
                    16:79:93:f3:b0:37:d3:ff:ef:fa:81:61:8a:e0:66:
                    95:73:f0:07:d9:1c:87:3e:d6:2b:a5:af:bb:73:aa:
                    de:88:b1:57:29:52:a5:b3:fc:8f:c0:54:37:52:55:
                    de:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9E:B1:87:AC:F7:C9:7B:6C:E5:E7:71:AD:A5:9F:6F:9B:B8:FE:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3d02c1d-0b1a-3ab4-a116-0147772de293.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.60.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:15:d8:fe:24:77:ef:7e:64:12:5a:50:e4:84:7e:03:79:f7:
         c8:74:11:e6:0d:8d:3e:c0:94:3e:5b:97:ef:78:bc:97:d0:5b:
         27:5c:f8:6e:bb:05:0c:3f:7e:be:94:69:0f:63:b1:17:38:04:
         6f:4b:f6:fe:0c:c4:6e:d5:2a:7e:ce:e0:b2:70:20:b7:e3:dd:
         97:d9:66:34:2e:f4:57:0d:07:21:27:86:6e:1d:2f:f7:9f:28:
         58:1b:d7:bb:1c:1c:e0:12:53:4e:da:4d:3e:31:35:4f:52:1f:
         00:2d:66:ee:d6:06:c8:63:27:a2:cb:67:3f:17:a6:9c:33:38:
         45:9d:37:8d:e6:7d:d1:0d:c3:f8:16:11:d0:5e:64:17:ef:c4:
         3f:a3:4b:82:b0:f0:31:e3:a8:9d:7b:7c:ac:34:99:5a:c2:e8:
         92:99:5c:ac:10:8b:7a:1c:d9:1c:10:dd:e1:3a:c7:6d:0b:dc:
         ac:22:6f:ea:77:53:3a:6a:56:da:d4:4b:d7:b8:84:83:e9:5c:
         dc:79:53:3f:8d:14:56:bc:24:22:c8:36:95:bb:8a:1b:56:8f:
         84:11:ef:f2:bd:c4:6a:c6:65:70:9b:1b:e5:17:f7:78:42:f6:
         65:df:b7:79:4b:79:0e:83:a0:c0:1c:7c:f9:78:fe:23:e7:1f:
         61:84:d0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----