Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95b1a413-b1ef-3907-812f-38358b0ce22a.roa
File:                     95b1a413-b1ef-3907-812f-38358b0ce22a.roa (raw, json)
Hash identifier:          9S/lCeLOvLu4y951lsrLHpBRugmPuJTJZymSxg9gYJY=
Subject key identifier:   AB:05:56:6A:F2:3A:AF:68:45:99:6A:44:10:5E:33:76:F4:DF:1F:3C
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D551D5EA8038BA4308036A200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95b1a413-b1ef-3907-812f-38358b0ce22a.roa
Signing time:             Wed 23 Mar 2022 04:00:00 +0000
ROA not before:           Wed 23 Mar 2022 04:00:00 +0000
ROA not after:            Wed 15 Mar 2028 04:00:00 +0000
asID:                     31881
IP address blocks:        198.211.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:55:1d:5e:a8:03:8b:a4:30:80:36:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 23 04:00:00 2022 GMT
            Not After : Mar 15 04:00:00 2028 GMT
        Subject: CN=a3dad402-c20b-4dbc-b097-669be0960755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:87:cf:2b:d8:ea:4b:d0:50:af:c9:21:08:78:
                    db:30:d4:64:01:e1:ba:ab:ab:ec:38:c9:0f:ef:a1:
                    0d:cd:bc:64:cc:2b:52:98:6b:dd:ec:2d:f3:f3:67:
                    62:30:e0:67:fc:0c:59:b1:9f:88:f9:19:ab:af:1a:
                    72:07:8b:39:43:68:e2:89:fe:7f:f0:de:6e:ae:41:
                    60:60:22:5c:79:a0:c7:d9:ff:99:a8:ed:ac:5d:c6:
                    8d:3b:ed:ea:c6:17:5a:e6:fb:97:bc:92:b8:31:ae:
                    b0:2d:96:49:95:1c:9f:d2:6c:b7:d8:be:71:50:f9:
                    c9:2e:9b:87:9c:bb:b3:6d:96:c7:4f:90:e1:97:77:
                    5c:59:04:9f:ce:4e:24:f6:cf:4f:d0:9e:2e:5c:53:
                    70:32:b7:31:46:b9:18:72:c9:fc:d6:20:e9:2b:59:
                    0e:c9:82:80:73:0d:a5:5d:63:be:98:f2:4f:79:c8:
                    ca:25:db:6c:d9:5d:0d:1d:c9:8b:8c:31:26:8d:0d:
                    63:1b:d4:8e:c6:fc:8d:03:30:af:d5:ac:d8:41:c0:
                    08:04:a6:1c:b9:b0:87:86:7f:c4:93:9a:d2:c2:43:
                    63:f1:c8:fb:de:4a:99:7f:cd:84:67:3a:a1:41:16:
                    e4:b6:be:68:59:ec:bc:a5:90:c1:be:62:70:c3:0b:
                    86:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:05:56:6A:F2:3A:AF:68:45:99:6A:44:10:5E:33:76:F4:DF:1F:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95b1a413-b1ef-3907-812f-38358b0ce22a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.211.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:03:2d:fa:75:d0:7e:f6:1e:43:60:0c:9a:68:9d:dd:a5:ae:
         73:37:6e:f0:19:49:67:7a:0d:3c:11:38:e9:33:31:8a:a8:37:
         b0:d9:66:6c:72:a8:83:3b:c8:e1:01:1f:a9:c4:d6:ee:ea:02:
         e4:7f:b2:b1:0c:8d:38:c3:23:b7:75:b5:76:69:f3:5c:fb:4b:
         0a:5f:a2:96:0d:73:20:f9:57:de:16:2f:7d:e4:1f:2a:eb:3e:
         44:96:e6:53:fb:24:e6:63:15:ca:e9:49:b4:9a:21:35:63:da:
         cd:fb:e4:88:8b:f9:22:12:01:55:df:f9:a2:9b:93:76:93:45:
         43:ea:40:d6:f6:52:df:0f:03:2e:cd:ac:71:10:fa:d2:dc:61:
         5a:72:6e:22:8f:9e:a3:29:c2:c8:f0:29:91:13:97:45:ce:d2:
         85:35:90:f4:95:35:e6:d4:7f:b7:e4:ae:04:a8:9a:fb:fe:22:
         69:5b:a3:e9:d2:80:22:e8:f5:b0:73:78:b9:9a:17:4d:8c:4c:
         2e:a9:94:8f:e7:31:2f:5a:6e:b0:26:44:42:4e:96:3e:a2:91:
         51:fb:b1:38:aa:0a:1b:7d:89:cc:21:b1:f2:46:80:84:9a:e9:
         f1:ac:ba:d5:fa:52:1f:48:a9:29:79:91:6c:fa:4c:cc:06:04:
         e8:41:d9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----