Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1950f55e-a767-3bee-a86c-2fad70aa1f95.roa
File:                     1950f55e-a767-3bee-a86c-2fad70aa1f95.roa (raw, json)
Hash identifier:          4X2gOxtIxDzRIi8NhzZzu0rYnXXcmReaWJWWdLl7t7k=
Subject key identifier:   BB:01:A9:F7:1A:62:58:74:6C:CD:BA:56:33:0A:F1:F3:5C:73:10:2B
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D551DD794B1FBCA4E87C26280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1950f55e-a767-3bee-a86c-2fad70aa1f95.roa
Signing time:             Wed 23 Mar 2022 04:00:00 +0000
ROA not before:           Wed 23 Mar 2022 04:00:00 +0000
ROA not after:            Wed 15 Mar 2028 04:00:00 +0000
asID:                     7252
IP address blocks:        199.195.243.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:55:1d:d7:94:b1:fb:ca:4e:87:c2:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 23 04:00:00 2022 GMT
            Not After : Mar 15 04:00:00 2028 GMT
        Subject: CN=3fa27963-1995-40e1-b10b-173ae5ce13bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:63:e7:49:2f:21:3d:6f:41:2c:9c:a3:d7:eb:
                    a6:45:9d:8b:ba:09:d0:74:55:26:91:1f:7c:92:c0:
                    98:c9:6e:10:9b:bc:c8:c4:4a:e1:12:11:66:46:8d:
                    37:ff:97:e3:66:85:d8:c9:bc:97:65:0e:9c:d6:da:
                    ad:5a:2a:bc:ad:a3:50:61:1f:47:2c:6c:89:f9:fd:
                    c7:15:49:75:32:32:09:bb:f7:50:6f:cb:cc:1d:c9:
                    97:70:22:23:cf:39:1f:3b:ac:86:30:0c:18:f7:a3:
                    f9:ad:3b:fc:f4:1b:9a:09:8b:88:07:af:c8:63:19:
                    12:a2:d8:04:a3:8d:dd:27:4f:3a:2d:b2:c9:76:8b:
                    6e:c7:f8:b3:7d:f3:77:2c:1d:2e:91:66:d2:e5:67:
                    ff:44:46:c6:1f:d6:2e:64:6d:ef:1c:04:92:fe:83:
                    e3:1d:7a:3a:54:11:6b:20:f6:64:f1:a9:79:18:23:
                    72:d2:fb:6e:52:97:d8:62:56:7b:44:44:57:96:a4:
                    52:8b:35:d8:78:b0:d0:ce:61:5a:70:30:6d:88:46:
                    7a:6b:bf:a1:0e:2d:14:5d:a2:63:6e:42:dd:e2:58:
                    29:f8:de:6d:1b:5c:5b:db:e1:87:ed:fb:b0:c8:b4:
                    99:77:3e:36:4a:1b:3f:b6:61:3b:ef:4f:5d:37:54:
                    52:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:01:A9:F7:1A:62:58:74:6C:CD:BA:56:33:0A:F1:F3:5C:73:10:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1950f55e-a767-3bee-a86c-2fad70aa1f95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.195.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:db:dd:92:6c:ec:88:7d:ce:99:50:47:f5:22:42:7d:a5:48:
         70:da:5d:d6:35:f6:c2:b1:84:7a:5a:1e:fb:78:72:b8:d9:ac:
         fe:3a:a7:5d:42:bf:b4:a6:d8:b6:d6:70:59:61:6c:1e:5d:17:
         ad:1c:b2:67:32:c9:03:e4:eb:d8:e7:df:2f:c2:d8:a1:dd:53:
         3b:1f:bc:1f:6e:bf:cd:2f:03:1c:f3:16:69:cd:d1:9e:31:2a:
         16:3b:de:2b:9f:f4:14:80:4e:0c:1a:4c:e8:5c:d2:7a:b5:9b:
         17:b6:97:b1:05:30:ce:58:51:43:a1:e3:8a:65:e2:a5:e7:d6:
         e9:d3:42:1b:68:d4:c0:8e:ad:0d:b8:d7:93:f1:3c:03:a4:2f:
         f4:52:92:ff:52:01:e2:e1:e9:1f:1d:03:a1:b1:c1:0c:ac:5a:
         b9:d2:d3:99:bf:19:40:71:28:fb:aa:b0:f9:2c:3d:61:ce:10:
         b1:69:c8:41:b0:7d:42:57:ce:47:25:72:29:21:21:30:75:ef:
         e5:82:1a:79:31:00:73:fb:be:f5:24:23:9c:30:c9:65:9c:d0:
         2c:3b:0f:97:12:fc:06:8c:91:c0:17:9a:a4:bc:a4:6c:90:be:
         54:af:b6:5b:7d:b6:2d:c0:c7:83:2e:dd:9b:cf:2d:da:0d:4f:
         a8:99:84:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----