Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6112ad60-ff63-36e1-9307-d66733d04444.roa
File:                     6112ad60-ff63-36e1-9307-d66733d04444.roa (raw, json)
Hash identifier:          uY6dxIeROhz1nzR48NtAbHbebnt6F8LvaPqS1qqf9MQ=
Subject key identifier:   87:3F:A0:F8:11:CD:0E:FD:1E:DE:36:97:5B:A4:09:F4:E4:69:83:90
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D55195126A84BA93A2BC3A200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6112ad60-ff63-36e1-9307-d66733d04444.roa
Signing time:             Wed 23 Mar 2022 04:00:00 +0000
ROA not before:           Wed 23 Mar 2022 04:00:00 +0000
ROA not after:            Wed 15 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        67.151.52.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:55:19:51:26:a8:4b:a9:3a:2b:c3:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 23 04:00:00 2022 GMT
            Not After : Mar 15 04:00:00 2028 GMT
        Subject: CN=c0fbec10-4aee-41ea-8eac-bd3d179fe21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:62:73:38:ca:c0:a9:da:36:db:22:63:24:51:
                    45:16:a6:5b:e5:62:f0:ef:17:69:e3:f0:f1:c6:83:
                    28:c9:69:59:39:14:7a:55:75:b8:e5:a9:7a:87:88:
                    d1:70:94:99:50:1b:11:ee:c2:c5:0f:3a:c5:93:e2:
                    c8:d2:3a:50:7a:f3:24:af:98:74:6b:25:f7:0e:b5:
                    98:6e:55:c4:c1:10:f2:68:a5:66:c2:6c:f6:0a:c6:
                    6c:c8:b8:7f:d4:d6:08:36:94:2c:f7:e3:a9:35:32:
                    6c:d3:a3:a4:20:bf:d4:bb:a3:96:c9:3c:fc:57:bc:
                    d4:22:94:56:a8:91:ee:41:57:c6:f2:b1:90:60:b3:
                    d2:b2:2b:46:92:e9:83:6b:00:2c:c2:b0:db:fc:a7:
                    14:9b:ca:86:f9:2b:c7:b7:68:97:1d:d5:c3:32:3a:
                    6b:e0:e4:6f:f1:91:92:d8:75:5a:93:5b:49:f3:9c:
                    74:78:65:f2:61:28:cd:d2:97:1f:fe:e7:bd:71:10:
                    bf:37:04:25:33:f2:4a:32:63:bd:3f:58:6b:4a:da:
                    58:da:7c:05:d9:a6:ea:13:e9:3b:ab:1c:65:b0:b5:
                    fb:ed:b5:fb:0e:bc:1f:46:e9:23:37:33:5a:c8:bf:
                    a1:7f:d3:62:59:3c:82:88:cb:81:a2:0b:40:5c:78:
                    6f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3F:A0:F8:11:CD:0E:FD:1E:DE:36:97:5B:A4:09:F4:E4:69:83:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6112ad60-ff63-36e1-9307-d66733d04444.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.151.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:49:5b:80:fc:69:80:50:d6:6b:55:9b:17:f1:cf:77:88:6f:
         12:56:54:70:6f:b0:9e:8a:64:bb:94:a9:20:ef:23:aa:cf:07:
         cb:37:48:c9:07:93:27:aa:e2:8f:1b:ee:e2:31:cb:5f:2a:a4:
         0d:38:70:a7:33:ed:1f:15:a4:f7:2c:a1:3a:a8:ae:31:2e:4c:
         a7:3a:df:35:81:43:f6:be:e2:a4:95:f6:62:6e:ae:89:2d:ef:
         98:c1:a2:9a:2d:2c:a8:29:e9:c3:94:d9:5a:a0:82:1c:db:ac:
         fe:59:ab:6a:e6:06:77:3e:d1:1c:00:a8:b6:92:97:04:1b:87:
         b5:5b:57:bf:29:cf:94:f6:d3:1b:4d:39:03:d4:92:ca:4d:be:
         c9:1a:d7:19:8b:1d:07:ef:5b:bf:ba:79:26:42:6a:91:92:5c:
         41:77:a3:54:cc:b6:4d:81:fa:bb:b2:96:2f:eb:ea:0d:55:34:
         27:61:71:57:a3:75:71:56:00:0c:e7:8e:21:26:47:cf:6f:3e:
         fc:07:e5:a0:7b:5c:d8:a8:4a:21:0e:60:b0:33:00:31:bd:d9:
         23:13:5d:f5:06:ec:94:00:e1:4f:47:0e:39:e7:e9:9e:58:df:
         2b:88:ad:66:36:b1:64:4d:7d:b2:b5:3b:1a:35:af:aa:25:85:
         47:47:b5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----