Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f37187e0-150a-3b7d-916c-dc67334c9ce9.roa
File:                     f37187e0-150a-3b7d-916c-dc67334c9ce9.roa (raw, json)
Hash identifier:          IeD8IeGjKcl0K12FSZbWbvi+/QLgnTt4NsxZZefxWqA=
Subject key identifier:   30:A5:3F:1E:9F:85:91:8A:86:82:78:56:F4:FF:F0:0D:36:01:55:4C
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D57E3A37071A357D285F37600
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f37187e0-150a-3b7d-916c-dc67334c9ce9.roa
Signing time:             Thu 24 Mar 2022 04:00:00 +0000
ROA not before:           Thu 24 Mar 2022 04:00:00 +0000
ROA not after:            Thu 16 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        209.96.128.0/17 maxlen: 17

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:57:e3:a3:70:71:a3:57:d2:85:f3:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 24 04:00:00 2022 GMT
            Not After : Mar 16 04:00:00 2028 GMT
        Subject: CN=aad1f2cb-b574-45d4-a2e3-3b05d581f655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a1:a1:b0:ff:44:8a:4f:17:cd:d3:2b:c9:72:
                    b3:98:4b:67:a2:b8:ab:59:6a:30:5f:70:fe:8e:2f:
                    d2:c9:8b:e5:9e:d5:52:ec:ad:56:b4:5b:bc:b4:bb:
                    0b:19:a4:80:cc:c6:1f:6d:6f:6b:2e:bc:86:9c:83:
                    b0:03:ca:fc:f0:d4:4e:51:3d:f4:2d:35:af:15:4f:
                    77:37:4e:0b:2d:0b:0c:d5:6e:ed:74:3f:a2:19:14:
                    e5:24:8e:36:85:40:11:8c:53:ef:65:52:2b:e0:5d:
                    40:21:b1:4a:74:17:b7:c1:aa:95:34:f1:33:2f:9c:
                    29:41:40:94:76:c8:05:2a:66:42:20:91:47:15:0f:
                    f8:c3:44:78:5c:0d:31:18:bf:58:2f:9a:d1:4e:29:
                    31:70:4c:3e:05:fe:5f:5c:9e:8c:98:73:7b:18:02:
                    c9:a1:09:59:37:90:b3:62:8a:63:54:fe:87:a5:53:
                    9c:fd:34:52:18:c5:91:2b:91:c6:f2:8c:4f:06:09:
                    b4:c0:c3:4c:d7:7c:7d:27:d5:fc:6c:56:9b:f7:b3:
                    3f:59:72:37:6b:b0:f2:db:30:1e:a9:f3:78:1f:5a:
                    80:59:ff:03:14:cc:f5:10:0d:fc:f4:bf:59:c0:a5:
                    70:aa:7d:36:27:f6:ae:f5:48:bd:9a:cb:43:a9:fd:
                    96:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A5:3F:1E:9F:85:91:8A:86:82:78:56:F4:FF:F0:0D:36:01:55:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f37187e0-150a-3b7d-916c-dc67334c9ce9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.96.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:b8:e8:72:ba:91:f8:82:73:02:0e:bd:f2:9c:e0:ca:55:91:
         7d:43:6f:82:d9:d6:17:42:a9:db:c7:11:8b:79:17:55:79:2b:
         69:7a:bc:a3:45:a4:f6:27:7d:1a:18:0f:5d:24:cd:7e:05:ab:
         9b:bb:76:54:1c:1c:3e:c5:f5:df:91:93:14:b9:6b:94:6f:a2:
         6c:5e:ff:96:1e:78:b8:1e:de:5b:ca:d7:4b:d6:d0:35:c2:ae:
         34:1b:13:46:b6:0f:60:de:2e:23:7e:b5:07:47:f1:0e:be:b8:
         0a:d5:82:23:73:cb:ba:17:b7:4d:07:fc:25:5e:86:64:02:08:
         61:6c:a7:9a:c9:83:52:a1:c5:84:d5:2d:88:68:34:f0:16:e1:
         df:64:17:44:22:16:d3:c3:71:fb:7b:94:1c:d1:c0:f4:47:2a:
         3d:93:53:4b:b2:7d:35:3b:b5:e4:b9:14:52:f6:e5:3b:2f:fb:
         85:4d:76:b5:d5:ff:bf:2b:ff:42:e1:ed:82:0b:aa:ac:95:bb:
         4b:07:e7:73:d3:7a:c3:3c:db:bf:7b:59:d6:ea:1e:29:a8:29:
         f3:12:a2:bf:dc:ea:5e:ab:e0:48:81:1c:38:e4:1f:35:8e:59:
         ec:e2:f7:a6:aa:2a:d7:39:06:38:aa:5f:b2:76:42:df:85:2d:
         9e:85:c3:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1X46NwcaNX0oXzdgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyNDA0MDAwMFoXDTI4MDMxNjA0MDAwMFowLzEtMCsGA1UEAxMk
YWFkMWYyY2ItYjU3NC00NWQ0LWEyZTMtM2IwNWQ1ODFmNjU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqGhsP9Eik8XzdMryXKzmEtnorirWWowX3D+
ji/SyYvlntVS7K1WtFu8tLsLGaSAzMYfbW9rLryGnIOwA8r88NROUT30LTWvFU93
N04LLQsM1W7tdD+iGRTlJI42hUARjFPvZVIr4F1AIbFKdBe3waqVNPEzL5wpQUCU
dsgFKmZCIJFHFQ/4w0R4XA0xGL9YL5rRTikxcEw+Bf5fXJ6MmHN7GALJoQlZN5Cz
YopjVP6HpVOc/TRSGMWRK5HG8oxPBgm0wMNM13x9J9X8bFab97M/WXI3a7Dy2zAe
qfN4H1qAWf8DFMz1EA389L9ZwKVwqn02J/au9Ui9mstDqf2W0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDClPx6fhZGKhoJ4VvT/8A02AVVMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjM3MTg3ZTAtMTUwYS0z
YjdkLTkxNmMtZGM2NzMzNGM5Y2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0WCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGq46HK6kfiCcwIOvfKc4MpVkX1Db4LZ1hdCqdvHEYt5F1V5K2l6vKNF
pPYnfRoYD10kzX4Fq5u7dlQcHD7F9d+RkxS5a5Rvomxe/5YeeLge3lvK10vW0DXC
rjQbE0a2D2DeLiN+tQdH8Q6+uArVgiNzy7oXt00H/CVehmQCCGFsp5rJg1KhxYTV
LYhoNPAW4d9kF0QiFtPDcft7lBzRwPRHKj2TU0uyfTU7teS5FFL25Tsv+4VNdrXV
/78r/0Lh7YILqqyVu0sH53PTesM82797WdbqHimoKfMSor/c6l6r4EiBHDjkHzWO
Wezi96aqKtc5BjiqX7J2Qt+FLZ6Fw0E=
-----END CERTIFICATE-----