Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37e3221e-139e-36ae-b6b0-ed7e46956429.roa
File:                     37e3221e-139e-36ae-b6b0-ed7e46956429.roa (raw, json)
Hash identifier:          vx2WrDmQzPFXGahFKwyMgPchHN/zEGDQ+IgTbKx4TVs=
Subject key identifier:   43:74:A1:81:8E:78:81:F2:4C:6E:D2:15:38:05:5B:B2:A2:17:74:4B
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D55CAA17432E82F4E7D4F2C40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37e3221e-139e-36ae-b6b0-ed7e46956429.roa
Signing time:             Wed 23 Mar 2022 04:00:00 +0000
ROA not before:           Wed 23 Mar 2022 04:00:00 +0000
ROA not after:            Wed 15 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        2001:4908::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:55:ca:a1:74:32:e8:2f:4e:7d:4f:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 23 04:00:00 2022 GMT
            Not After : Mar 15 04:00:00 2028 GMT
        Subject: CN=f8b9e23d-7d92-4522-a8e0-4aa461bdd1bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e5:57:22:2c:be:95:80:06:28:af:9a:0c:fb:
                    e5:92:24:73:02:06:86:68:5e:01:40:b4:c5:1c:a2:
                    6b:17:92:37:31:a0:de:54:26:a6:16:1e:6b:b6:ea:
                    f9:84:72:8e:f1:70:bb:06:b8:23:06:03:c6:e9:ea:
                    39:b8:15:b4:f6:c5:ee:85:a1:65:4f:ea:2f:2c:db:
                    36:62:7c:fc:f1:96:50:c7:be:79:01:da:7e:3d:7c:
                    05:aa:6d:9a:a9:69:3c:fb:af:f8:76:31:47:80:59:
                    32:fc:03:86:ac:8e:d9:33:92:b8:0b:69:64:d7:34:
                    f2:8a:46:37:cb:74:4d:69:e5:96:c3:aa:66:ad:57:
                    2d:78:b9:e7:47:12:ad:43:da:49:9e:9a:7c:b5:58:
                    9a:76:02:6e:e7:2c:53:f5:21:2f:63:3c:2a:a6:2e:
                    a4:f4:c9:39:d3:70:34:1d:42:eb:5d:22:df:1d:8c:
                    25:67:21:21:c7:02:cc:79:5b:48:6d:6f:b9:a8:e1:
                    95:a9:fe:e6:65:20:a0:3a:1e:9d:25:e4:df:03:07:
                    93:a8:11:04:bf:7b:83:8c:9f:b6:75:fc:81:de:33:
                    6a:09:82:13:1f:62:85:15:fb:b6:e2:1f:28:b5:a9:
                    5f:8a:6c:48:36:e3:f8:6c:a2:13:76:9c:e6:4f:90:
                    17:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:74:A1:81:8E:78:81:F2:4C:6E:D2:15:38:05:5B:B2:A2:17:74:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37e3221e-139e-36ae-b6b0-ed7e46956429.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4908::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:2a:f4:9f:81:9a:5e:4b:9f:d5:0d:85:8f:45:ae:61:56:9f:
         ab:91:e1:7d:14:68:47:25:2e:7e:fe:f6:58:0c:2d:83:76:45:
         1e:35:0f:b1:d7:fd:e8:ec:91:fd:b3:c8:05:99:b8:d2:ac:7a:
         e5:05:e1:a4:f6:af:60:63:c1:8f:17:0d:a6:f5:d1:c0:68:c9:
         59:3b:e1:d8:aa:5f:1a:8c:40:7c:2c:28:c8:b9:91:66:1a:77:
         37:82:29:53:47:64:1f:6c:18:b6:7c:b4:7b:c2:92:2e:67:6b:
         2e:6e:4f:ce:f6:13:35:d0:8a:3e:eb:c0:eb:69:72:37:16:ba:
         ef:da:d1:28:99:7d:a9:5c:e9:15:52:a7:1d:b7:64:02:cc:31:
         23:13:d7:e6:5f:6a:dd:76:07:8b:c9:a3:5d:7a:bf:11:03:ca:
         05:cf:b8:9c:b7:52:60:e9:17:d9:97:4a:b6:b7:a5:c7:8f:41:
         e1:cb:70:ea:cf:d7:ee:83:97:f0:3d:a0:03:5c:e7:07:21:28:
         d9:71:23:f5:69:17:3e:66:fa:b6:36:94:9b:b3:79:94:1a:7f:
         b7:0a:09:0b:64:2f:3b:7c:93:c0:ce:d0:2a:69:e6:3c:71:39:
         7d:28:8e:9b:15:05:1f:87:d8:1b:12:82:93:a3:c0:9f:10:95:
         74:4f:5c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----