Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/905b4b59-f12f-3fbe-96da-9c10106687b9.roa
File:                     905b4b59-f12f-3fbe-96da-9c10106687b9.roa (raw, json)
Hash identifier:          Akq8AQGT0wEmhTUl8OjXLjHNEVk4mkYQSGMEMMEAU40=
Subject key identifier:   03:A7:94:04:11:1A:28:F0:F6:80:A1:E3:86:4F:44:92:DC:52:53:20
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D661846439FB9E4FF3D85E0B0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/905b4b59-f12f-3fbe-96da-9c10106687b9.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        71.29.32.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:18:46:43:9f:b9:e4:ff:3d:85:e0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=aaecb6cf-aa61-4f7b-94ea-bf5c251836ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e8:51:5a:98:01:2a:24:d1:1d:71:19:75:0a:
                    0f:bb:df:5e:fb:30:8b:e0:3c:bf:7e:57:f6:b2:e5:
                    0a:df:c4:00:c0:5e:b5:83:18:10:a0:72:4f:2b:3f:
                    48:64:5b:86:3b:f0:ad:10:29:24:47:fa:13:26:97:
                    42:54:84:5a:66:5a:0c:61:9e:bd:2d:81:8b:60:7f:
                    b9:54:4f:f6:a9:8c:d8:9d:0d:de:97:87:f6:b0:51:
                    ba:b1:f1:b4:9e:11:e9:1e:bb:2d:dd:6e:20:c0:d6:
                    81:9f:1d:8e:81:a1:c2:c4:fc:c2:77:c9:63:da:b0:
                    d2:59:87:aa:ea:c1:2e:61:77:92:dd:85:aa:95:93:
                    90:c2:5d:88:24:e2:ea:98:e5:f5:ca:77:fd:d2:4a:
                    8f:62:45:f8:f3:b8:e7:fc:0e:69:4f:c8:72:95:46:
                    bb:3c:f5:7b:51:6c:45:4f:6f:60:b2:57:6d:d4:37:
                    86:fd:e3:a9:3b:ab:07:e0:3f:ac:0d:75:73:28:91:
                    31:dc:7c:0f:5d:fb:f2:db:70:ce:ee:a2:5f:11:ca:
                    ab:2b:e6:96:43:c7:d3:e2:c9:25:3d:a9:89:3c:e4:
                    a8:8c:76:22:bd:64:48:a3:48:25:8e:4f:33:6f:b7:
                    ff:7c:c4:e7:ee:e6:f2:9d:b6:b0:42:99:9d:83:28:
                    19:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A7:94:04:11:1A:28:F0:F6:80:A1:E3:86:4F:44:92:DC:52:53:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/905b4b59-f12f-3fbe-96da-9c10106687b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.29.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:47:c9:fe:b6:83:57:2b:9b:db:0a:23:ee:48:77:16:91:e0:
         60:18:36:83:8c:b5:fd:1b:13:4b:07:13:cd:09:f3:b3:e9:b0:
         cb:7a:69:65:c2:9d:d6:ac:8a:13:21:4a:2f:cb:7d:d2:34:e8:
         67:41:ef:5d:46:f1:4e:44:51:8a:9d:d9:ce:67:2a:b9:05:6e:
         e9:4c:8e:1d:e7:b5:4f:9e:51:50:df:c7:eb:fb:ca:1e:16:b9:
         fe:3a:2b:4b:14:b3:86:dd:de:16:f1:5d:b2:90:20:ce:57:71:
         07:73:59:af:ff:cd:f6:04:4a:d5:99:e7:a5:ab:d8:5a:af:cd:
         67:84:27:12:61:23:2c:3d:1c:5a:51:36:f0:ca:de:a5:9c:eb:
         8f:86:c9:fd:62:1b:f2:df:2f:c5:26:d2:0c:cb:e6:b3:6a:ab:
         81:b3:5a:26:9a:cf:28:d1:64:6a:0c:20:c5:69:51:4a:3a:79:
         8d:fb:bf:a6:a6:33:25:40:48:12:a0:2e:81:72:91:73:70:6b:
         74:fa:ff:13:80:11:19:e7:a6:be:d2:96:4a:af:27:b4:1e:ea:
         39:0e:9d:65:1a:7c:5a:3e:36:a3:30:d2:31:06:c7:53:6f:9c:
         57:79:fa:a9:77:39:ce:27:7c:8d:4f:bf:04:41:25:99:b2:82:
         bd:c7:65:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----