Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/52a07f6f-5214-39af-8dbf-b29c8468b7c0.roa
File:                     52a07f6f-5214-39af-8dbf-b29c8468b7c0.roa (raw, json)
Hash identifier:          53gNXTde8aiIeZjr2rjxDPBEEYVy7mKmLNAWwPa2tIE=
Subject key identifier:   26:A3:79:8F:42:34:B2:6E:58:31:5A:38:0A:3D:4D:49:5A:16:A6:3D
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D3F47D10AC78A12F5685EA500
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/52a07f6f-5214-39af-8dbf-b29c8468b7c0.roa
Signing time:             Tue 15 Mar 2022 04:00:00 +0000
ROA not before:           Tue 15 Mar 2022 04:00:00 +0000
ROA not after:            Tue 07 Mar 2028 05:00:00 +0000
asID:                     7029
IP address blocks:        67.224.0.0/18 maxlen: 18

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:3f:47:d1:0a:c7:8a:12:f5:68:5e:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 15 04:00:00 2022 GMT
            Not After : Mar  7 05:00:00 2028 GMT
        Subject: CN=d4e49bfc-a93d-4b30-bf8b-e28d6b3dfddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b8:70:ab:5f:ab:32:40:54:4a:0d:37:ad:59:
                    22:2c:d8:32:5b:12:73:80:5f:11:01:90:a8:d0:cc:
                    fe:fa:35:a8:6f:7f:12:6f:ec:c7:7d:04:d7:f1:be:
                    58:7b:68:1d:8b:e3:e6:42:a2:61:96:eb:a6:2d:0d:
                    6c:e4:a6:26:a3:b7:ab:5b:0e:a5:03:df:5b:b6:5d:
                    cf:3f:13:c0:b4:63:1a:9e:27:a4:f8:ab:2b:ca:27:
                    d9:99:58:14:42:39:4a:eb:7d:23:a0:e1:bc:98:1d:
                    16:2d:9e:b6:76:97:63:f8:05:e3:f0:e7:18:a9:7b:
                    7e:a8:6b:e0:7f:76:8d:68:a6:5a:62:5f:7e:98:a9:
                    1b:7d:b0:31:43:11:99:88:e2:60:55:c8:ef:95:20:
                    2a:bb:90:d9:58:b0:90:f4:c7:4e:b5:b9:ff:28:02:
                    13:d1:3f:2d:3d:80:28:42:cf:76:f6:27:51:66:95:
                    a1:6b:fb:b1:78:d0:b1:40:7d:91:4e:82:4e:e6:50:
                    80:86:7f:ca:3a:6e:ac:20:f9:78:db:ae:24:cc:fc:
                    51:a9:57:b5:1f:82:ad:7a:74:28:f0:ab:9a:25:24:
                    0f:d4:c1:c4:09:d0:d2:98:31:fb:17:f1:1c:f7:e5:
                    47:de:ab:13:ef:d9:c0:03:61:6f:5e:42:25:5b:86:
                    70:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A3:79:8F:42:34:B2:6E:58:31:5A:38:0A:3D:4D:49:5A:16:A6:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/52a07f6f-5214-39af-8dbf-b29c8468b7c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.224.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:35:ae:ee:0d:1f:c6:37:cf:30:52:fa:a1:b3:63:16:87:9f:
         91:b9:79:07:e4:e3:14:e9:ed:84:2b:99:7c:27:40:b5:a4:74:
         a5:d6:d8:9a:06:32:ed:15:8b:69:d6:16:c3:e8:d4:13:6d:ef:
         60:6d:df:24:ad:b6:d2:69:55:d7:66:7f:44:bb:e5:63:58:7d:
         13:45:2e:d2:47:a6:21:e8:00:56:7d:21:97:c8:08:1b:cb:c9:
         58:44:cb:ba:73:ce:9c:2b:5d:fd:1a:b0:bb:54:d7:33:9f:5b:
         5c:1b:a9:86:dc:bd:52:98:08:c6:3f:97:a6:c6:9a:ad:77:50:
         ae:6e:04:b6:4f:78:94:ca:68:54:38:a0:8e:3f:b0:da:23:80:
         0c:96:48:a7:62:9b:84:78:96:ee:20:20:2e:40:a4:fc:8c:1b:
         ee:cb:41:36:e7:3c:24:d6:04:3c:1e:e5:4e:9f:c7:8f:1a:fe:
         b2:9a:27:b1:94:fd:26:07:a6:9d:6f:78:10:6a:cd:c2:27:58:
         da:b9:b2:76:86:3e:ac:9b:a6:09:b8:e8:88:50:81:67:d0:ea:
         e0:8b:9d:b6:cb:4a:fc:6a:4b:fd:51:9c:d4:af:09:94:8d:8b:
         a0:5f:05:90:ad:e5:ab:68:03:01:ee:0c:1e:11:1e:4d:e6:94:
         de:46:3e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----