Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d45c922-c885-3a72-b807-da3c0a5b0bc9.roa
File:                     4d45c922-c885-3a72-b807-da3c0a5b0bc9.roa (raw, json)
Hash identifier:          jKy2EieomSgpaxqxY8XIhrhH8dPUC4aEF7wgycdNdWM=
Subject key identifier:   4D:23:7C:17:A8:C5:BB:8C:FF:D5:B7:9A:2D:DD:09:55:1E:98:8E:BC
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D661E90B236DEBE6E45BE55F0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d45c922-c885-3a72-b807-da3c0a5b0bc9.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        139.55.32.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:1e:90:b2:36:de:be:6e:45:be:55:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=b2b4ff19-82eb-400c-9765-ed353d8a95f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b9:f0:03:84:b9:d4:18:d0:9b:51:66:80:76:
                    1d:1e:46:2e:45:d7:90:78:27:bf:3f:61:ab:6d:54:
                    cd:93:7f:5d:21:04:c5:8e:4c:11:d5:80:49:72:7b:
                    02:cc:0b:0f:78:2f:f6:c4:b5:a5:8a:21:08:2f:17:
                    f4:50:a2:67:42:91:2d:09:16:dc:bc:8c:04:27:b6:
                    61:57:a1:97:02:f9:d4:0f:52:b4:d8:1d:b5:73:b6:
                    8b:ca:ae:fe:da:6c:1f:38:b3:1c:4b:cb:4a:65:4f:
                    33:ad:0e:ed:35:bb:24:7f:c4:23:01:b3:94:70:81:
                    e5:97:f4:ad:80:1a:9c:ca:45:21:55:91:94:d4:16:
                    22:aa:c5:0a:ec:a8:be:0c:fa:1f:28:75:ea:34:9f:
                    e2:a0:6d:1a:0b:5f:67:68:0e:65:cd:11:52:3a:b0:
                    9a:28:db:f3:a8:74:2c:7e:85:9d:0c:98:33:a2:59:
                    24:6e:38:c2:66:e7:02:24:e7:8f:d0:c2:0f:7a:19:
                    8a:d3:55:b5:ef:70:ea:f6:83:39:2f:b1:b3:4c:89:
                    fd:1e:08:1b:60:c9:5f:1c:12:05:a2:05:b4:b1:30:
                    b5:02:20:e0:55:57:d5:91:7b:fe:f2:bc:16:c4:49:
                    51:be:66:8a:a4:f1:d3:c6:29:78:29:0d:c0:31:fa:
                    a3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:23:7C:17:A8:C5:BB:8C:FF:D5:B7:9A:2D:DD:09:55:1E:98:8E:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d45c922-c885-3a72-b807-da3c0a5b0bc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.55.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:d5:a5:21:f0:41:8c:17:35:14:38:75:8c:be:6f:6f:cd:1d:
         ff:b0:2e:54:91:96:63:18:dc:08:9c:99:49:95:3e:cd:13:3d:
         f0:cb:df:84:90:a0:fc:1e:30:f3:53:68:dc:53:2e:e7:43:b2:
         4d:00:6d:f7:c9:c3:6f:e8:ad:76:47:cc:2a:d0:f0:ed:c3:d9:
         2f:e1:ea:0e:78:4e:b1:a0:8f:69:f8:d3:17:68:e3:d9:93:16:
         52:c8:e7:0c:12:97:0e:00:79:e1:8c:79:3e:25:aa:d0:b8:90:
         6d:4d:35:ab:a8:71:3b:99:88:e2:e2:47:64:90:05:3d:b5:c4:
         a0:f5:78:b8:87:e7:1c:7c:7f:2d:84:f3:c6:cd:63:99:04:75:
         81:0b:6f:ea:02:3c:53:60:00:41:8e:2e:f1:92:08:11:de:bc:
         57:2b:ba:c7:c5:ae:bb:45:f6:ea:cd:18:42:02:d8:d5:31:29:
         be:95:db:03:74:36:33:3f:6e:07:10:0d:d6:80:9e:67:54:97:
         2d:da:87:3c:78:6d:28:73:78:db:fc:c5:49:d2:bc:1c:45:9e:
         b7:c5:bb:50:b1:43:06:f8:4a:ab:4c:8a:6d:75:11:16:59:a8:
         a6:5d:bd:e6:0e:b9:06:a3:83:a6:fe:95:7e:f7:0d:e0:d6:d2:
         8c:c1:8d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----