Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65a846b6-4932-3411-abc4-eecf7f265c41.roa
File:                     65a846b6-4932-3411-abc4-eecf7f265c41.roa (raw, json)
Hash identifier:          XMVgs77M1JuPDZfh35BYB0HnFLHsEOoiOOKlpcrg2dU=
Subject key identifier:   FC:91:70:8E:0A:97:0D:48:27:4E:84:6F:0D:70:61:0F:4B:EE:14:92
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D4FA98DF971C7ABB9157B8784
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65a846b6-4932-3411-abc4-eecf7f265c41.roa
Signing time:             Mon 21 Mar 2022 04:00:00 +0000
ROA not before:           Mon 21 Mar 2022 04:00:00 +0000
ROA not after:            Mon 13 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        207.95.80.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:4f:a9:8d:f9:71:c7:ab:b9:15:7b:87:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 21 04:00:00 2022 GMT
            Not After : Mar 13 04:00:00 2028 GMT
        Subject: CN=ad42b7ce-4e5c-40a1-b41b-e5b9fbc6c7b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:63:e1:bf:cb:af:e6:df:79:a6:5c:12:cf:ae:
                    29:e8:2e:16:1e:ae:fa:c2:b0:e1:eb:4e:0a:8e:1a:
                    0f:55:06:44:53:98:98:4e:f5:89:f9:3b:a6:92:af:
                    0b:9b:6b:41:f1:7b:02:8c:5e:67:62:59:a8:4d:87:
                    6b:2f:62:29:e9:bf:5a:a6:e1:8a:05:f1:45:5f:6e:
                    a1:24:72:d9:18:93:18:11:98:1a:20:dd:9b:13:37:
                    45:6d:3c:bc:ac:e0:20:ce:50:b8:66:ac:d1:e8:f2:
                    61:ef:4e:d3:3e:f4:f1:18:18:7d:52:bd:e0:9d:45:
                    87:43:69:12:ad:e8:6d:21:d0:dc:f0:fa:1a:f8:3f:
                    2b:bd:c7:a6:aa:0a:77:1d:76:49:db:e8:08:a0:e1:
                    52:1e:e8:16:06:b7:3d:41:42:2a:e7:8b:c4:6e:75:
                    bd:4e:d7:43:36:46:5a:b1:e2:ec:8f:bb:ec:eb:09:
                    96:81:76:0e:df:3c:73:e0:12:db:81:e1:6b:85:70:
                    a9:5f:4f:19:36:e6:0d:b5:59:45:37:d4:49:08:6b:
                    3d:88:7b:bc:0c:01:7b:b0:f0:68:72:36:01:54:9c:
                    f6:69:16:f4:aa:9c:bf:59:19:7f:71:52:61:16:2e:
                    ef:0c:52:63:5e:bf:bf:67:c9:f9:f5:0d:df:17:92:
                    b6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:91:70:8E:0A:97:0D:48:27:4E:84:6F:0D:70:61:0F:4B:EE:14:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65a846b6-4932-3411-abc4-eecf7f265c41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.95.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:5a:cc:e2:05:2d:03:79:ad:d8:f4:80:99:a3:7c:1f:9c:86:
         47:e5:4f:6a:d0:8f:f4:74:db:b7:c3:97:ab:a3:67:5b:73:73:
         15:a7:f2:45:b7:8b:93:c0:1d:32:5f:e5:f5:88:52:f1:3f:79:
         fb:6d:64:41:17:52:1f:db:6a:14:92:bc:d7:b2:70:33:8e:7e:
         ac:e8:78:39:7d:0d:17:f6:f5:3b:99:e6:cf:0c:44:9e:36:fc:
         1b:f1:f9:b9:e2:6a:64:90:b0:9b:53:54:28:c9:23:e2:ee:17:
         8d:25:4b:e5:ec:e9:c4:d7:c2:45:4b:05:bf:79:82:21:75:85:
         79:5c:36:7c:8b:0b:04:be:7d:78:29:e8:b6:fa:e7:5a:26:c0:
         7d:f3:e4:5f:7d:c9:35:c0:41:e1:ff:92:d1:f8:08:c4:63:f2:
         ef:5e:81:0a:c8:93:b8:be:c5:43:1d:2b:95:5c:d8:b2:bc:d5:
         f2:21:91:ab:00:c5:5e:82:aa:a8:0b:a1:bd:e1:2b:8b:e7:a3:
         27:66:ba:dc:94:b8:09:57:b5:6b:fa:1b:cf:3d:c7:f7:23:6b:
         61:ea:e3:01:ed:dd:65:e5:32:3d:6b:03:74:ba:e9:a5:13:4a:
         3a:6a:11:4e:b8:84:f7:92:c3:66:57:72:aa:6c:cf:9b:3c:dd:
         63:fd:47:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----