Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/69e4938c-2290-377f-bd5c-f79d52ca76a2.roa
File:                     69e4938c-2290-377f-bd5c-f79d52ca76a2.roa (raw, json)
Hash identifier:          OcDmexHIVC6q3PbBBFuiN0ivmdbnBoQlzIc8sJunluM=
Subject key identifier:   09:7A:A0:A1:83:39:87:D5:65:7E:86:73:6B:35:C1:3F:45:4D:FC:7F
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D6618333BCEF7A16E1EFF7B00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/69e4938c-2290-377f-bd5c-f79d52ca76a2.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        71.28.180.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:18:33:3b:ce:f7:a1:6e:1e:ff:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=5a54a79b-1460-4b0d-83d6-46d7922b6809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:50:97:d5:1e:5f:17:42:10:db:22:cb:ba:91:
                    d8:ef:1e:72:0b:3a:df:12:92:b2:89:ac:f5:58:ea:
                    c5:4e:da:66:9c:ba:48:b0:69:aa:32:4d:ae:21:26:
                    23:40:cd:8f:d4:65:08:fa:c8:37:4c:15:ce:0e:fd:
                    5b:e4:de:e0:6a:89:03:92:48:27:92:e9:a2:64:d8:
                    50:96:d8:67:a5:a6:82:a3:ad:a8:e3:8a:21:32:63:
                    dd:7a:6b:ee:c9:1b:aa:1f:e1:84:15:6e:b1:3c:43:
                    cd:60:41:2b:3b:ef:9c:7e:d7:9c:d3:ea:2e:15:35:
                    9f:48:f9:2c:ea:c3:86:4a:55:57:ef:2a:9c:57:4d:
                    d0:ea:81:ae:b3:04:ea:94:b6:54:65:da:b1:78:b6:
                    d2:9c:76:15:bc:e9:7d:6f:3c:2e:e6:d4:9d:d5:17:
                    70:63:0f:3f:7d:1a:72:80:8c:9a:cb:d9:de:bc:76:
                    52:6a:95:dc:c1:c4:d2:9d:f5:82:45:60:be:97:bf:
                    1e:39:51:46:5b:74:78:81:d9:12:78:f8:21:e2:5d:
                    6a:ac:d9:9d:84:ec:b1:ba:2f:50:3e:e2:aa:9b:01:
                    35:ad:9a:27:a6:ac:76:b0:a8:7d:14:8b:b0:19:b7:
                    bb:d3:13:75:7d:84:a8:e4:02:c6:7a:53:d4:23:35:
                    6e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7A:A0:A1:83:39:87:D5:65:7E:86:73:6B:35:C1:3F:45:4D:FC:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/69e4938c-2290-377f-bd5c-f79d52ca76a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.28.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:74:63:37:1e:d7:97:13:6b:bf:cd:cd:c0:c4:30:7f:b5:f8:
         3e:67:ea:b0:de:de:d6:62:d5:b9:91:6a:c9:9b:88:ed:28:06:
         e6:2c:25:a5:4a:49:55:83:9e:21:3f:e6:ba:cd:44:3f:0d:7b:
         7e:89:e5:d4:af:33:14:1e:84:f7:89:79:ed:ed:7e:89:ec:d5:
         90:b5:91:55:2c:f4:01:8b:0a:43:f1:d7:15:b0:54:81:e6:26:
         10:ee:75:a0:54:4d:f6:ab:6c:20:7a:00:4e:8e:fe:2c:59:71:
         62:35:e5:31:91:7b:74:6a:45:9a:c9:f5:3c:79:85:28:c9:29:
         77:76:ac:c1:50:b6:a5:fd:9b:6a:18:88:db:10:94:66:11:bc:
         e4:c3:05:79:a2:22:a1:60:d2:e0:97:fb:b9:f4:3f:6e:1d:dc:
         ef:4c:c5:36:16:ac:59:4d:f0:fd:92:b0:48:b2:74:ca:62:64:
         5c:f6:5f:3f:c3:a4:c7:b8:65:a7:34:8f:32:27:96:95:01:e0:
         30:30:b3:0e:7a:28:26:7a:c8:eb:96:d4:f3:6b:3c:bc:61:2f:
         e1:6a:71:d5:7c:81:e7:54:cb:5e:c8:e9:f3:9d:b8:bb:6a:67:
         8f:8b:fd:6a:f6:2b:fd:01:10:ff:af:9a:ec:13:e0:0e:ed:f6:
         a9:a4:46:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----