Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7ce0c77c-043b-35c4-8f1b-282d7a038125.roa
File:                     7ce0c77c-043b-35c4-8f1b-282d7a038125.roa (raw, json)
Hash identifier:          EVmswiGAbWpJFMA+0ZjJolzuSsB5GSptmaMlkVvkJLY=
Subject key identifier:   A9:1E:9E:72:10:F3:60:74:1E:DA:03:23:44:7E:EF:AE:E9:63:2C:BE
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D551C997F1C4EFFB53EEEBC40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7ce0c77c-043b-35c4-8f1b-282d7a038125.roa
Signing time:             Wed 23 Mar 2022 04:00:00 +0000
ROA not before:           Wed 23 Mar 2022 04:00:00 +0000
ROA not after:            Wed 15 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        162.40.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:55:1c:99:7f:1c:4e:ff:b5:3e:ee:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 23 04:00:00 2022 GMT
            Not After : Mar 15 04:00:00 2028 GMT
        Subject: CN=5eb10dbb-aa75-4cb8-928a-d36f22abf2f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:45:db:35:b6:c2:66:e0:6d:dd:e6:a0:fc:45:
                    a0:ac:bf:58:e8:bd:5f:f3:74:ce:4a:a6:fe:2b:cb:
                    b4:4d:48:26:4a:70:81:c7:0e:a4:a0:e4:a6:f4:14:
                    ac:c7:54:be:70:1b:6f:e0:0e:21:92:73:7f:be:9d:
                    f6:16:2a:bd:d9:a5:21:ae:8c:57:c0:4c:9e:ef:51:
                    6e:da:41:25:a9:ab:89:64:48:02:7c:0c:d7:7f:12:
                    f8:ff:b2:62:01:3f:a7:85:97:f8:4d:a2:27:74:5e:
                    c0:15:05:06:94:9d:3c:e1:21:00:d0:01:44:b8:f4:
                    0a:c1:7d:d3:1b:6a:c2:65:5d:33:11:53:93:1c:65:
                    01:79:31:4d:d9:06:6f:e2:c2:6c:7f:e7:9a:ed:1d:
                    ee:c5:7f:76:b2:19:95:ab:30:ff:9d:e8:07:83:7b:
                    f8:0e:4a:54:79:3f:98:49:c1:0c:0d:25:69:38:ed:
                    68:64:d4:89:25:90:ce:3b:b1:cc:ba:d6:65:32:07:
                    52:32:5b:16:f1:96:65:41:36:15:17:74:32:7a:59:
                    cc:d5:eb:a1:97:c6:29:18:2a:75:cb:23:5d:00:a3:
                    17:e2:8d:03:bb:24:88:fd:5c:4c:13:95:56:b5:1d:
                    cf:39:a6:da:e8:cd:3b:c6:68:1c:e3:dc:87:95:a4:
                    a5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1E:9E:72:10:F3:60:74:1E:DA:03:23:44:7E:EF:AE:E9:63:2C:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7ce0c77c-043b-35c4-8f1b-282d7a038125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.40.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:99:98:c6:52:31:cb:5e:e5:06:09:5a:54:7a:91:f0:1c:30:
         02:b4:4d:dc:33:e8:49:46:45:de:f8:68:86:73:a9:8f:f0:82:
         8e:e4:9f:5a:fa:a2:a6:04:63:79:68:05:b0:96:da:51:6f:6b:
         2d:05:f1:b1:4c:25:77:bc:25:b3:86:69:a7:0f:6d:69:56:61:
         e3:72:7f:3c:bf:8a:c0:7b:c2:af:18:a9:83:1d:2e:da:b9:8b:
         6a:7a:3f:d5:6a:ed:f2:5c:67:2b:45:bf:68:98:79:2b:4a:9a:
         3d:e1:7e:c0:c1:a4:ad:87:a7:ab:e6:28:ab:06:e2:4b:bc:a5:
         7f:4a:1f:ad:34:89:84:b4:f0:00:7a:3a:69:78:02:d0:70:2f:
         f1:13:d5:7c:60:50:1b:d7:ff:84:f9:65:f1:d0:61:09:0b:b1:
         26:96:f7:a7:6c:74:07:70:5a:63:e0:2f:4c:3e:7f:3c:a0:40:
         6c:6a:0f:69:84:65:4b:30:f4:b6:32:8e:fd:97:0d:75:f4:80:
         26:f7:a9:0d:57:d5:b0:5f:1c:07:53:aa:d2:9d:32:c4:59:42:
         24:28:a0:1e:cf:b8:dc:fd:b8:0f:ad:65:9d:8d:31:c6:07:bd:
         74:c0:c2:2c:58:08:0a:74:ac:50:c4:d7:9b:12:f2:f7:7e:cf:
         9f:bd:a4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----