Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6365ae3e-92bd-3452-ac19-d433523262d0.roa
File:                     6365ae3e-92bd-3452-ac19-d433523262d0.roa (raw, json)
Hash identifier:          xJmPGqum7Vwp3kSQgS+VqCfnINXNRUPE3Vx3WvxV0/U=
Subject key identifier:   03:7E:CD:53:EC:1E:A8:3B:16:42:1E:D4:F1:48:C1:57:77:55:6D:7E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D4FB2339E73D8CD1CF2EC9D80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6365ae3e-92bd-3452-ac19-d433523262d0.roa
Signing time:             Mon 21 Mar 2022 04:00:00 +0000
ROA not before:           Mon 21 Mar 2022 04:00:00 +0000
ROA not after:            Mon 13 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        216.97.160.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:4f:b2:33:9e:73:d8:cd:1c:f2:ec:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 21 04:00:00 2022 GMT
            Not After : Mar 13 04:00:00 2028 GMT
        Subject: CN=b7899a08-1443-4155-9958-1dfd35a378a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6a:29:33:46:bf:67:0b:36:6b:06:18:68:e8:
                    42:0d:1c:ce:00:13:62:9d:ae:dd:7b:61:be:93:80:
                    54:c5:d4:ea:cd:d8:83:ea:fc:08:3a:f4:1e:28:7e:
                    d3:4b:e9:e3:03:08:d6:37:1a:7c:82:bd:7f:01:73:
                    9a:77:cc:8f:85:3c:69:44:3c:ab:15:b2:81:73:f6:
                    38:2b:23:db:fb:f4:fc:9b:97:d0:64:3f:2b:96:85:
                    0f:0c:75:61:e1:6e:4f:08:b8:34:33:99:9b:29:7d:
                    79:aa:df:44:16:21:34:62:e4:23:ea:7b:42:6e:2a:
                    7a:b8:c2:56:7e:d4:2c:42:c9:e3:bc:8a:f9:b0:04:
                    5b:b0:59:f0:28:ea:65:54:83:a3:17:bb:ce:a9:01:
                    cb:90:d4:9d:c5:d3:91:0c:e8:c8:c7:2d:ab:b7:72:
                    8b:fe:3f:2f:7a:e7:18:7b:cc:60:b4:af:b6:c1:f6:
                    43:28:fb:c4:bf:e6:f4:c2:c4:0a:77:91:b2:e5:2e:
                    b9:03:43:e3:5e:a8:5a:3b:26:50:70:93:a9:59:53:
                    a8:62:25:49:3e:7e:55:a6:5d:c1:b6:fb:13:28:9e:
                    df:5b:b0:a5:95:42:c1:be:dc:05:68:09:21:96:1e:
                    d6:55:f8:7b:74:66:8b:5f:4f:da:df:be:96:aa:57:
                    00:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7E:CD:53:EC:1E:A8:3B:16:42:1E:D4:F1:48:C1:57:77:55:6D:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6365ae3e-92bd-3452-ac19-d433523262d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:61:6f:d2:6a:28:8a:da:73:70:38:58:63:5f:b1:d3:28:b1:
         88:41:43:bb:2a:3c:5c:d9:b3:50:86:cd:45:72:3e:84:8f:9d:
         73:3f:bc:d5:d7:dc:03:0b:d1:5b:d8:3c:6e:eb:27:cc:bb:70:
         ca:1f:b6:35:ff:5e:b2:b9:b8:9b:d1:e4:37:47:00:94:ce:5b:
         51:13:cc:49:d0:bd:d9:b2:4d:e7:2c:08:8f:0a:2f:0e:4b:53:
         4c:01:1a:fe:85:2f:6b:af:b0:a7:a1:ed:e5:a9:d9:1e:c0:9a:
         8a:bb:cb:6a:58:6b:59:4b:16:a7:68:be:71:68:67:9d:11:3f:
         36:5a:a7:ea:94:a4:77:63:13:65:87:35:5d:e4:0a:5e:ef:5a:
         88:fe:69:1e:09:14:94:c4:1a:54:52:77:aa:75:31:55:9c:d9:
         b0:d7:cc:ee:f3:c1:68:4e:5b:7c:e1:a5:e2:d8:bc:de:be:cf:
         e0:20:aa:d9:74:3a:11:9a:30:a2:ea:c9:82:8e:5a:82:58:79:
         b0:3a:a2:f5:ac:66:7e:e5:e8:72:80:ea:e8:e5:26:10:3e:4b:
         70:6f:87:62:27:ee:ff:e8:c2:57:44:a8:e2:ed:af:a1:33:3d:
         a5:d7:99:05:b2:45:a2:48:95:da:b8:09:96:fe:f3:5e:99:e5:
         60:96:34:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----