Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1938f2ba-d828-331b-b189-1e38029e370c.roa
File:                     1938f2ba-d828-331b-b189-1e38029e370c.roa (raw, json)
Hash identifier:          56yy3kmxEFpicM2NltB1TSoc64Y4Vg8XrReQJ35q9m0=
Subject key identifier:   B4:46:EE:85:12:AB:D9:8B:46:23:36:C4:5A:34:92:3A:E3:75:43:60
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D57E252A4E28FE3D6A51EF400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1938f2ba-d828-331b-b189-1e38029e370c.roa
Signing time:             Thu 24 Mar 2022 04:00:00 +0000
ROA not before:           Thu 24 Mar 2022 04:00:00 +0000
ROA not after:            Thu 16 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        207.106.158.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:57:e2:52:a4:e2:8f:e3:d6:a5:1e:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 24 04:00:00 2022 GMT
            Not After : Mar 16 04:00:00 2028 GMT
        Subject: CN=fb7dbc8d-a775-48c5-82b4-b5f873be83b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9b:fc:d3:21:14:90:d6:fc:6b:03:15:c7:5b:
                    85:65:d3:ac:a4:b3:3e:73:6e:04:30:54:8d:c0:9a:
                    f5:d9:42:1f:36:26:81:de:b6:76:fa:da:32:63:ea:
                    f8:63:06:8c:8d:22:4d:18:cc:9c:dc:ae:f7:8d:14:
                    09:1b:a0:ed:6d:cf:f4:52:a4:f3:ac:7c:33:d1:aa:
                    aa:ec:f4:00:26:7c:21:95:f5:00:de:2f:47:b2:fe:
                    1c:d0:af:22:cf:f0:55:1b:d2:04:44:e7:b9:79:b1:
                    df:3e:ac:40:5f:7e:34:a0:55:86:64:9f:ec:b6:b8:
                    e2:b4:95:9b:ab:a6:a5:78:ca:24:d5:9f:bd:2d:98:
                    56:86:c5:d3:3d:25:79:20:7d:b6:33:46:85:ac:53:
                    9e:5c:d7:00:39:68:fb:f9:53:28:7d:c1:b6:33:88:
                    e9:9c:eb:ba:3f:33:7c:d4:72:8a:ff:5e:1a:6c:32:
                    f2:84:5e:c3:c1:ed:0e:5d:84:5d:b3:ee:ca:3c:d2:
                    bc:25:f8:2d:0c:b2:34:3c:0a:bd:6b:72:a4:b0:ea:
                    0e:ec:73:cb:6c:8b:87:7f:5e:33:28:cf:08:89:07:
                    5f:3b:95:2d:15:26:d7:ca:f5:17:9a:a6:17:d5:f4:
                    26:9c:37:ba:c5:91:01:1b:84:a5:0e:5f:5c:b3:f6:
                    fb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:46:EE:85:12:AB:D9:8B:46:23:36:C4:5A:34:92:3A:E3:75:43:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1938f2ba-d828-331b-b189-1e38029e370c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.106.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:79:f6:1d:1a:23:f8:08:da:33:ab:1b:58:8e:17:11:24:5d:
         d7:f5:00:15:0c:b8:45:d0:00:87:29:55:39:88:ce:50:d7:e1:
         32:95:b9:38:b1:05:d1:51:58:9c:88:61:df:cd:a8:04:9f:0a:
         b1:cd:1d:ac:29:56:5d:ce:94:23:04:13:1e:44:d4:d0:2e:04:
         34:48:ce:c8:52:4e:87:38:02:f3:16:2e:35:65:43:6f:fd:c3:
         64:ff:c8:1a:d6:ed:7e:77:99:b3:3e:9d:4e:69:f9:e1:98:9c:
         9f:1a:bc:0f:f4:29:31:f4:61:0f:61:22:44:38:09:c9:dc:d2:
         6b:97:c4:6e:db:3d:eb:e7:09:6e:9c:21:45:9c:38:1e:e4:3b:
         13:5a:f0:00:47:3d:2c:e2:95:34:33:72:cd:95:aa:e5:73:16:
         f4:47:0f:50:5a:64:54:41:b7:79:d1:ba:87:48:e0:b2:57:bf:
         5b:c5:47:e0:89:a0:3a:30:4f:0d:fd:c8:99:50:22:25:c8:f1:
         3c:88:83:c2:9a:2b:0d:53:96:96:94:84:52:2e:c4:11:0a:0c:
         40:91:5f:3e:4a:dd:c5:a3:fc:e5:c3:ad:38:3a:27:33:e2:51:
         f2:e6:33:a3:3c:ec:34:4c:b3:e8:4c:fc:de:87:cd:9f:58:b9:
         79:35:dd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----