Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/383c40f7-c7c2-3af3-b3aa-4846da390103.roa
File:                     383c40f7-c7c2-3af3-b3aa-4846da390103.roa (raw, json)
Hash identifier:          g4an4G/ze2Xa7OTg0YVmxVHdxVJqAeqW9ubznz5y2ww=
Subject key identifier:   9F:A7:F6:0B:76:38:B5:69:40:73:BB:0F:AC:38:9A:7D:A7:A7:06:2B
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D661FB039496446E03C337500
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/383c40f7-c7c2-3af3-b3aa-4846da390103.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        173.186.172.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:1f:b0:39:49:64:46:e0:3c:33:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=f3682a57-a5a7-4b44-a843-93d51bc486d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bd:18:29:70:86:b7:fe:48:07:9c:47:cb:4a:
                    74:8b:82:bb:20:cd:92:35:f9:12:15:14:2a:51:ec:
                    c0:ed:7c:a0:61:3e:a5:ef:7f:24:a1:b0:07:de:44:
                    d3:c3:00:20:a5:c4:89:6d:69:b1:25:e5:5b:10:d2:
                    91:20:62:68:8d:32:ae:d2:15:56:1a:f7:9e:e4:64:
                    02:2a:9b:1d:86:55:17:1d:3f:f0:81:5a:72:ee:16:
                    18:29:f6:f9:49:39:60:24:c8:b6:2e:bf:87:9b:85:
                    7d:36:3c:81:84:76:c2:ea:cc:ed:75:2e:37:8d:d3:
                    3f:64:cd:4e:81:de:72:93:3a:62:e2:94:3b:1c:56:
                    12:92:70:24:29:0d:c5:1d:2f:02:25:23:75:2b:4e:
                    49:1a:77:e2:48:38:c2:85:67:eb:8e:40:51:d9:09:
                    8f:ee:53:dc:55:7c:80:61:86:e7:42:a9:95:ac:4b:
                    46:df:c7:36:4e:fc:22:c0:79:ed:e7:7a:d6:2e:47:
                    6d:03:5a:08:d4:54:b2:3f:4d:f6:3f:c9:f3:61:ca:
                    85:b5:d6:e5:d3:4f:11:c8:65:84:0c:02:5f:72:a1:
                    ff:cb:fe:40:76:8b:d3:13:a6:fb:34:65:cf:13:17:
                    d3:9a:ed:41:1f:31:68:53:5f:23:fe:08:ae:a5:7c:
                    a7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A7:F6:0B:76:38:B5:69:40:73:BB:0F:AC:38:9A:7D:A7:A7:06:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/383c40f7-c7c2-3af3-b3aa-4846da390103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.186.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a6:c4:da:1e:40:fc:d8:9f:a2:64:4a:02:04:bf:72:c4:2f:
         98:e6:0a:b4:91:46:a2:ff:0e:ac:29:31:e0:ca:58:08:5c:74:
         32:01:cd:68:fe:89:0f:1c:38:02:3e:4e:13:fd:06:62:50:d5:
         33:0c:0d:ac:81:6a:2e:db:67:02:2c:09:30:e5:d1:83:32:07:
         f2:8c:f4:c6:da:f5:32:fd:41:ca:60:e7:3a:be:f0:92:4a:35:
         70:ca:31:6e:85:6a:1b:ed:77:c7:57:a4:5a:4f:58:e7:8e:83:
         e7:7f:4d:17:a2:0e:fc:24:b3:e6:18:91:47:a6:bc:94:d0:0d:
         c4:cf:25:52:33:ef:33:49:f8:0e:88:ee:8d:16:43:e2:ea:1b:
         49:1a:90:0e:55:ae:83:79:e4:cd:90:b9:44:d0:f1:13:48:17:
         42:8c:7c:b8:47:07:fa:6f:95:ab:18:ad:76:1a:fb:f8:c8:96:
         ab:72:5a:90:2e:52:de:19:20:ac:e0:e2:16:a3:62:c6:f1:61:
         54:72:f3:fe:03:29:f9:7b:69:62:65:42:a2:9a:21:72:be:9a:
         0a:8e:d0:b8:5f:54:5f:30:1f:d0:36:4e:2b:09:53:b3:2d:ac:
         a6:1a:c0:44:07:1c:e0:ae:ab:b8:8b:95:99:11:fc:19:df:0d:
         b0:4e:9f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----