Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/118d3435-ac7a-36ee-9878-9bc50b1bd46b.roa
File:                     118d3435-ac7a-36ee-9878-9bc50b1bd46b.roa (raw, json)
Hash identifier:          0aJ8NlVvz9Sfn6uvJkU53LGmRVuDinIWPcFTXXbDLZs=
Subject key identifier:   15:DD:BA:1B:C4:1F:A6:73:BC:2D:BC:69:1D:A8:DF:B0:33:62:A1:D2
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583CE0C6D7605FF82BC6BC53C650
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/118d3435-ac7a-36ee-9878-9bc50b1bd46b.roa
Signing time:             Wed 09 Feb 2022 05:00:00 +0000
ROA not before:           Wed 09 Feb 2022 05:00:00 +0000
ROA not after:            Tue 14 May 2024 04:00:00 +0000
asID:                     7029
IP address blocks:        2001:4908::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e0:c6:d7:60:5f:f8:2b:c6:bc:53:c6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb  9 05:00:00 2022 GMT
            Not After : May 14 04:00:00 2024 GMT
        Subject: CN=3f7d29ac-f01c-475f-95e2-9d9f6445b995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e8:1f:f8:d2:3c:78:80:d9:fa:46:6d:bd:4c:
                    15:fb:70:fa:15:4b:32:40:93:52:4b:90:1a:81:ec:
                    9a:b7:fb:67:f4:c3:4e:92:65:80:54:03:ff:38:44:
                    d0:e1:7e:1c:7e:f9:ef:f2:d3:8a:b7:1b:26:75:be:
                    e0:7b:98:58:d5:65:51:65:15:30:0c:be:df:af:fd:
                    2a:dc:03:ec:a8:34:e1:74:92:a8:83:52:2f:6f:75:
                    0b:78:e8:25:3f:52:a8:a8:60:3d:0f:f7:ca:a9:bf:
                    f9:0b:b3:3b:f8:87:8a:38:b6:32:73:62:4a:8a:0c:
                    46:26:a7:3e:23:55:d4:68:f2:62:ad:c4:b8:cd:f2:
                    08:42:40:64:b4:c6:79:ff:0a:b6:08:a0:82:bd:2d:
                    c2:c3:e9:a1:4f:1f:7c:73:de:60:9b:68:ed:cf:d7:
                    72:25:46:f7:31:16:fd:d5:1a:3e:35:d1:d3:28:c6:
                    af:d3:60:37:f2:bb:d2:22:bc:bb:c0:1f:df:e4:76:
                    64:f3:aa:6e:1e:72:a0:31:39:1c:a2:66:ed:e5:9d:
                    fa:16:f1:82:9c:90:06:5b:f4:67:64:4d:9b:e3:1e:
                    3f:e5:5e:30:4b:74:44:82:6b:07:25:f9:d5:73:a3:
                    ac:5b:48:c9:18:bf:e8:92:d5:6c:b8:8f:af:cb:9c:
                    63:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DD:BA:1B:C4:1F:A6:73:BC:2D:BC:69:1D:A8:DF:B0:33:62:A1:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/118d3435-ac7a-36ee-9878-9bc50b1bd46b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4908::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:83:c8:4f:9a:39:a2:7c:d0:14:91:1d:a8:2d:54:fa:96:ba:
         73:d0:f5:5d:c1:1d:07:b5:21:70:99:86:20:2d:92:7b:50:7d:
         66:05:3b:a8:ef:bb:f2:54:a4:96:9b:38:4d:13:2f:29:2a:b9:
         8b:5e:58:d1:87:c9:25:51:87:dc:e3:fb:a3:52:e5:6c:cd:62:
         00:22:97:09:ef:e8:ad:ca:ce:cd:b6:b6:bc:c6:18:d6:48:2b:
         1a:bb:9f:fd:ef:d1:9a:91:b3:b6:84:24:1a:06:94:9b:a6:99:
         07:dd:18:b2:13:cb:be:bd:a3:35:2a:19:00:48:01:b8:61:50:
         93:b8:6b:4f:76:22:f1:4d:34:8e:8c:83:f6:3d:11:ff:2d:36:
         eb:75:a3:2d:36:13:82:56:61:82:46:26:8d:4a:ab:96:28:34:
         e6:ed:c0:26:ca:38:e4:ff:dc:9d:ba:ed:23:7a:a5:9d:3b:dc:
         36:f2:86:e8:aa:62:b4:2b:16:56:1b:5b:ca:43:f3:17:77:87:
         f0:5a:3b:3c:e4:2a:b4:0a:df:8b:20:e2:f0:50:d0:be:15:73:
         e9:6a:03:77:cf:8b:91:d3:8c:72:22:0f:2b:ca:a9:02:d2:56:
         3f:96:40:e1:70:1f:df:ff:22:a4:fc:da:62:00:b5:f4:99:aa:
         f6:54:d3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----