Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/979cfaa3-89d2-3308-b7e5-4ecf9f0816e4.roa
File:                     979cfaa3-89d2-3308-b7e5-4ecf9f0816e4.roa (raw, json)
Hash identifier:          t4wfxc9jbahdV8D4c2R19bgB4nIpyA7vvpIfkLAMaqk=
Subject key identifier:   8E:7E:E2:C8:20:F2:CD:47:86:2D:C4:44:08:A3:33:6F:D6:01:B7:AE
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D57E6528656975437E326C280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/979cfaa3-89d2-3308-b7e5-4ecf9f0816e4.roa
Signing time:             Thu 24 Mar 2022 04:00:00 +0000
ROA not before:           Thu 24 Mar 2022 04:00:00 +0000
ROA not after:            Thu 16 Mar 2028 04:00:00 +0000
asID:                     11632
IP address blocks:        216.172.29.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:57:e6:52:86:56:97:54:37:e3:26:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 24 04:00:00 2022 GMT
            Not After : Mar 16 04:00:00 2028 GMT
        Subject: CN=5a8bad1c-dbd9-4e44-b33c-29abce92c1cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:20:d1:cb:a9:b5:1f:f3:72:55:9a:55:73:a3:
                    fa:e8:fe:f1:8b:76:af:a8:9e:58:88:d1:42:95:95:
                    25:7a:6e:0f:b3:f8:dd:38:e2:39:93:fd:ce:46:55:
                    05:60:48:80:1d:1e:f4:bd:1c:44:d9:dc:9a:80:29:
                    9f:30:0d:0f:2d:a3:08:0f:7b:7b:65:bc:a0:7c:d7:
                    36:39:f8:5b:61:94:ff:e6:14:bc:1b:88:02:2e:7c:
                    c0:91:22:c7:69:ad:52:0b:23:e5:6b:74:87:e4:c8:
                    31:43:e3:0c:e8:19:73:c9:55:6e:20:5e:83:33:52:
                    6b:5a:7e:50:60:a7:8f:6b:ae:15:6d:55:25:61:77:
                    46:4e:e3:00:9a:4c:e7:93:79:95:a0:92:67:4e:e8:
                    c0:69:ba:1e:e1:0d:29:20:3f:94:91:d6:77:f9:9d:
                    03:46:63:0e:4a:0e:fe:5a:72:a9:7e:90:82:5e:fa:
                    a2:68:a6:42:ae:63:92:16:51:fe:69:0c:42:a6:d5:
                    ce:ea:be:52:ad:d9:6b:8f:0c:a7:53:09:0b:b7:fc:
                    be:be:87:29:a9:05:52:00:d0:39:c6:72:6e:a9:96:
                    f5:68:5e:10:5f:47:6c:19:08:1c:c9:a8:86:9c:60:
                    d4:0b:48:ee:05:ce:25:20:3c:6e:ab:35:f1:95:11:
                    11:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:7E:E2:C8:20:F2:CD:47:86:2D:C4:44:08:A3:33:6F:D6:01:B7:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/979cfaa3-89d2-3308-b7e5-4ecf9f0816e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.172.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:bb:e6:35:54:a8:23:54:7d:62:60:1b:79:c7:b3:bd:4a:66:
         91:75:43:1c:b2:e1:56:d7:96:ef:e5:e7:ba:6d:a7:d8:a5:42:
         98:53:8e:e1:a4:0b:f0:cc:58:9e:10:25:76:99:ae:24:89:09:
         5d:22:98:dd:eb:6d:52:61:2e:68:60:95:88:9c:98:0b:4a:c3:
         a8:01:38:18:1c:fe:c8:3c:ff:35:4b:3b:b3:a1:6a:80:81:80:
         25:1c:39:a3:87:44:27:74:e1:fe:c8:66:ee:70:7b:a0:ee:e9:
         1f:c4:e7:c1:d8:47:34:a3:d4:a5:31:cd:1f:00:d7:25:2b:f0:
         0d:31:0a:70:ca:2f:9a:2b:ad:ce:8f:a6:7d:5e:6b:63:07:b9:
         84:79:f3:0d:79:48:01:cb:44:e2:9f:fe:91:bb:f6:d0:44:02:
         de:6b:25:73:21:03:92:02:d2:7e:5b:d7:40:08:8b:68:96:21:
         ac:a8:59:e5:de:82:b9:d2:f4:4f:80:3d:78:d7:dd:cf:4d:26:
         1c:ca:f9:6f:51:8a:46:0b:53:ed:c1:a9:f1:b9:d9:42:6b:35:
         32:75:1e:fa:24:4b:7c:28:f9:1a:ec:44:28:1d:11:58:d2:60:
         e5:6b:f3:97:42:8d:3b:d6:5c:c0:40:1b:08:c4:67:16:03:25:
         6d:7d:cf:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----