Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5038e719-2a96-3a8d-9ac7-8f6314cf887e.roa
File:                     5038e719-2a96-3a8d-9ac7-8f6314cf887e.roa (raw, json)
Hash identifier:          26JAxpOCN797kzTaXw5cT2bzuGw419Qj/bFwTJmiaKw=
Subject key identifier:   95:1B:42:6C:E2:FA:DC:99:08:75:17:CA:C2:1B:83:B9:5E:5C:13:57
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D3F5822FD55ADBFD91A0FC6B8
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5038e719-2a96-3a8d-9ac7-8f6314cf887e.roa
Signing time:             Tue 15 Mar 2022 04:00:00 +0000
ROA not before:           Tue 15 Mar 2022 04:00:00 +0000
ROA not after:            Tue 07 Mar 2028 05:00:00 +0000
asID:                     7029
IP address blocks:        198.211.224.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:3f:58:22:fd:55:ad:bf:d9:1a:0f:c6:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 15 04:00:00 2022 GMT
            Not After : Mar  7 05:00:00 2028 GMT
        Subject: CN=bd6da80c-00de-41e2-b901-67dcbcdb3835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:49:9e:11:3d:da:07:9e:6e:bb:08:a1:b6:87:
                    1f:87:df:c0:1f:99:42:38:27:ff:cb:a5:9b:bb:d6:
                    83:c6:5f:ff:1c:8a:c4:55:c6:e2:c9:69:7e:68:ae:
                    66:c7:f0:2c:6e:e9:b0:d3:32:5c:69:50:bd:34:37:
                    85:7e:84:26:bb:2d:a3:26:e3:ea:b4:0c:f7:9e:26:
                    c8:d6:3e:49:6d:3c:54:d3:30:55:5b:74:d5:a4:1b:
                    21:df:cf:14:64:d8:02:85:4f:06:df:d2:c8:57:25:
                    41:36:1f:ea:0d:7b:30:b4:43:ee:9b:13:32:97:7f:
                    c9:16:76:33:d8:d0:b0:27:ab:1e:40:e9:7e:76:d9:
                    df:ff:61:43:23:4a:0a:00:c1:3c:ea:83:75:83:03:
                    bc:d4:49:6a:d0:14:0c:2f:16:7a:a6:6b:e0:c8:7a:
                    5d:1a:01:ed:e8:7a:e9:e1:59:5d:16:85:06:45:f0:
                    31:ff:dd:98:3d:b7:11:5b:4a:cd:2e:af:c0:ae:01:
                    19:c8:d5:92:79:24:32:2e:23:2e:ef:5d:e9:32:3c:
                    27:aa:1d:c6:8c:69:a9:5f:6d:56:01:55:88:23:84:
                    a7:0c:86:6d:59:50:77:01:88:ca:51:7e:fd:10:e3:
                    b6:0a:a0:6d:9c:12:98:df:c6:de:6e:41:38:7e:46:
                    ac:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1B:42:6C:E2:FA:DC:99:08:75:17:CA:C2:1B:83:B9:5E:5C:13:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5038e719-2a96-3a8d-9ac7-8f6314cf887e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.211.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:55:48:7d:4c:76:24:3a:36:5b:e6:31:8e:60:7c:7e:53:56:
         42:64:e9:f4:7d:4e:6c:02:2c:e4:fc:38:d0:28:64:fe:42:5c:
         9c:1a:1b:a1:6f:e6:ea:45:cf:cc:08:ad:a3:57:6a:a9:64:2e:
         db:c1:34:08:39:7b:f1:95:f0:77:de:be:68:b7:6b:b1:2e:50:
         9a:92:36:4d:5b:bc:4f:af:ef:91:f7:a9:8c:d8:54:c4:a0:68:
         4f:8d:36:f2:1d:e0:cd:cf:1e:3b:89:8b:92:da:f1:70:ba:c6:
         0b:68:cf:f9:60:3e:32:65:9c:cb:60:21:cf:98:f0:03:0a:46:
         18:1f:3f:1a:0d:25:cc:bd:33:aa:2a:a2:b0:06:c4:7d:44:4f:
         16:89:1a:c0:1d:4a:32:b7:cb:9b:ea:d7:0e:49:cc:e3:a7:3b:
         a6:12:b7:37:03:ea:1d:b9:bb:d4:b6:22:5f:6f:e9:71:47:28:
         82:fc:4e:ff:83:ec:09:fc:09:8e:ed:52:ff:75:ff:a9:92:10:
         9b:7d:fa:47:29:d2:b5:05:69:44:4f:17:43:07:f8:bd:ae:5e:
         57:36:22:b9:8f:2a:05:e9:46:81:ed:ba:7b:9a:4e:d2:4f:58:
         bc:18:c9:05:0e:a9:5b:99:49:10:50:ae:09:30:13:1d:f7:3c:
         17:97:37:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----