Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/207718f7-b9fd-3fc5-8ae3-98592075020c.roa
File:                     207718f7-b9fd-3fc5-8ae3-98592075020c.roa (raw, json)
Hash identifier:          UwVmt0KlYfSsRkWTH8UdSYLhfJu4NEUXHuaLSZFty0Q=
Subject key identifier:   35:4A:D8:70:27:FA:2C:DE:DF:4B:83:86:D8:81:A4:4C:16:FB:0E:89
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D661D78D1D011F457B68E5F40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/207718f7-b9fd-3fc5-8ae3-98592075020c.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        98.19.80.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:1d:78:d1:d0:11:f4:57:b6:8e:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=03364c11-396b-4439-960e-cd36cca08fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fb:ba:34:26:7a:13:e1:fc:09:1e:16:86:1d:
                    38:90:ee:41:8e:57:3b:0d:b9:8c:62:84:e2:b5:47:
                    75:42:3e:1c:d1:82:48:5b:32:59:75:fc:00:b0:f8:
                    82:bf:87:97:1d:31:aa:31:83:f3:7e:08:0c:59:64:
                    3f:91:72:f1:be:43:5c:a1:b7:b4:1a:f3:ea:0f:8b:
                    9a:cf:13:ec:f0:5e:87:f3:30:68:e5:9e:be:70:ac:
                    4e:17:c1:c9:e6:5f:60:99:91:92:28:a8:9d:3b:2e:
                    27:d3:2c:12:0b:12:1d:80:80:86:33:fe:54:89:d0:
                    aa:77:ca:61:6c:25:5b:fa:15:9e:c7:cf:71:00:16:
                    a2:a1:76:73:1f:c5:7b:a2:6d:7b:d6:57:f1:4f:a0:
                    8a:67:10:36:3d:51:bb:89:cf:d2:92:2f:bc:c5:f0:
                    cf:c0:1d:01:14:e6:12:6b:3b:98:7e:1c:81:6d:94:
                    0b:9c:0c:4e:bf:c0:f9:db:6b:ab:b8:62:a6:14:bd:
                    4c:f1:03:8a:b6:2c:16:9d:c6:63:61:93:0c:40:26:
                    27:c4:ee:35:94:62:83:33:60:52:91:10:49:10:be:
                    61:45:07:ef:a3:c4:31:7b:6c:a6:66:01:8e:dd:d2:
                    b6:5c:65:c4:3e:fc:6f:05:ce:30:28:de:80:3c:b5:
                    fc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4A:D8:70:27:FA:2C:DE:DF:4B:83:86:D8:81:A4:4C:16:FB:0E:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/207718f7-b9fd-3fc5-8ae3-98592075020c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.19.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:34:a6:51:7b:ae:17:d0:fb:89:33:da:2b:61:9c:4a:27:ab:
         c6:5c:95:3d:2b:55:ac:db:29:a8:b5:51:7e:4a:a4:2d:f2:10:
         8d:ae:8d:cd:51:6a:c6:d8:cc:fe:4f:a4:a1:14:a3:3b:11:b1:
         db:20:16:9d:4c:d5:c8:5c:03:e8:9d:b9:07:23:cf:5b:3d:dc:
         9e:a5:99:8c:36:25:20:6a:71:c8:ea:62:e1:36:9d:9b:e2:9c:
         86:40:78:5d:c8:9c:15:6a:5d:0b:3b:97:9f:91:76:4f:86:55:
         45:4f:49:0b:85:24:3d:bf:2d:bd:2f:33:54:4d:fa:79:68:95:
         2f:ee:8f:22:bb:66:82:54:2f:ae:2b:ff:07:40:85:f8:d8:c4:
         85:a0:86:06:fd:24:dc:6e:fd:7e:1c:71:48:8c:a5:54:03:8b:
         50:70:a7:53:32:fc:9b:3f:8d:68:24:2f:de:dd:6d:5d:c6:f8:
         cc:05:7a:7c:c9:8f:fc:18:7a:12:7c:60:0d:ea:78:bc:db:f6:
         09:3c:a6:8a:f9:e3:9e:51:c8:02:eb:e1:79:c3:a1:7d:c4:5f:
         dd:0b:98:6a:a3:08:47:9a:e6:ec:83:6f:46:f7:ec:ef:18:95:
         fb:e2:4c:2a:9c:73:0e:f9:4a:4e:bb:f0:2d:88:21:68:a8:14:
         07:b8:3a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----