Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36a48586-4673-3239-ab8c-cb2c09d83a7d.roa
File:                     36a48586-4673-3239-ab8c-cb2c09d83a7d.roa (raw, json)
Hash identifier:          K4WngnojPFHCotzM3vnRUm0NlMp5a5jepIhUFXqJ1jc=
Subject key identifier:   FA:A4:36:00:28:C7:2E:05:14:51:C9:12:C5:6B:FF:5F:88:CF:30:40
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D0CBEFA467B6C568A5860F100
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36a48586-4673-3239-ab8c-cb2c09d83a7d.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2028 05:00:00 +0000
asID:                     7029
IP address blocks:        2001:4988::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0c:be:fa:46:7b:6c:56:8a:58:60:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2028 GMT
        Subject: CN=7b8ede3e-64fb-438a-92ad-a5cbd7652e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:02:ce:0b:a5:5d:7f:d4:88:19:21:f5:94:58:
                    46:e5:1c:6f:15:96:71:f5:3b:e4:64:c9:0e:49:9d:
                    bb:e7:41:a6:d8:32:ed:53:eb:08:af:e7:51:a1:b9:
                    75:bd:82:65:41:1d:0a:74:8b:b7:e0:0f:e7:ba:7b:
                    08:31:73:e7:d7:da:d1:0d:7f:3a:d7:da:da:f6:2c:
                    a1:64:29:f5:06:2f:aa:3b:54:82:86:ee:3e:d1:6e:
                    e1:0a:17:a7:33:6e:88:7c:03:ca:6a:a3:21:0d:49:
                    ae:54:62:0f:ef:6a:a2:54:5c:aa:b7:73:6d:9f:bc:
                    02:83:34:ee:ef:9d:6d:60:55:d9:c1:01:d7:fe:96:
                    70:1a:1a:01:9e:fa:99:a6:ce:37:73:cf:93:01:1d:
                    d9:9c:eb:73:48:53:b4:95:05:b5:50:0b:50:68:76:
                    05:9c:57:58:db:57:ae:f7:86:6b:3b:c9:2f:d1:9a:
                    e1:6c:34:74:db:cc:27:84:25:f9:8b:82:f7:5e:e4:
                    8e:dc:8c:db:7a:bb:04:9b:28:3e:6f:ed:c8:b3:af:
                    c6:97:ea:f7:e1:72:06:43:07:43:20:77:21:03:ac:
                    c0:31:14:17:0d:0a:67:4e:a3:0b:41:78:2c:fa:7f:
                    f8:0e:55:a1:30:10:41:5f:b4:95:b9:e9:b7:f2:07:
                    61:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A4:36:00:28:C7:2E:05:14:51:C9:12:C5:6B:FF:5F:88:CF:30:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36a48586-4673-3239-ab8c-cb2c09d83a7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4988::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:6a:40:64:cd:84:0e:81:25:24:ab:48:17:cb:cb:69:47:ab:
         89:f5:d8:1e:8f:85:17:bd:80:7a:4b:81:79:9b:ab:8c:44:43:
         01:5e:62:e4:af:55:a7:cb:1e:ec:a7:b4:e8:bd:2c:1b:12:e1:
         fd:19:e4:b2:03:50:c2:d2:99:57:c1:2d:fa:a7:3f:53:c9:96:
         3c:d1:3a:a4:08:4c:54:33:ae:66:f0:e4:38:68:32:28:a5:5a:
         16:16:2e:19:69:30:6f:5f:ec:cf:ea:5d:de:f3:d6:91:b8:81:
         6e:a8:4b:e5:26:ff:d5:73:e7:d9:96:85:44:58:7b:9e:4f:88:
         11:c5:33:53:da:fd:81:36:97:de:12:74:22:f8:4d:e8:1d:32:
         8c:f2:b1:37:0d:d2:db:14:3c:87:1e:2a:8c:45:57:d4:fd:15:
         77:aa:c6:1f:c5:ac:5c:aa:ed:94:9a:36:41:b0:29:ae:33:23:
         00:63:f5:44:bd:5b:1f:ad:31:b3:de:2e:47:ce:0a:9b:62:e5:
         89:ef:91:fb:fa:80:f5:61:3e:56:61:35:1c:a8:03:2f:c4:29:
         f5:a2:0e:bf:06:8c:a9:eb:6a:4e:1c:6a:03:1d:63:4c:91:94:
         83:f8:fb:0c:ad:6b:03:93:62:82:c9:89:05:59:e8:cb:44:d0:
         4f:d7:fd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----