Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/63cfa390-bf93-34d6-95e6-13b01ba9546d.roa
File:                     63cfa390-bf93-34d6-95e6-13b01ba9546d.roa (raw, json)
Hash identifier:          t4PcYFCBTD0kBGoGKBYx6a3ICxEy/2YSiZ+v4TdySnw=
Subject key identifier:   C0:8C:7E:2E:65:D9:9B:E3:B8:34:D5:2E:D3:DA:E7:F5:76:D5:DB:2D
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583DA149C21384E4FB9BFA6A6C00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/63cfa390-bf93-34d6-95e6-13b01ba9546d.roa
Signing time:             Tue 19 Apr 2022 04:00:00 +0000
ROA not before:           Tue 19 Apr 2022 04:00:00 +0000
ROA not after:            Tue 11 Apr 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        2604:cb00:36::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a1:49:c2:13:84:e4:fb:9b:fa:6a:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 19 04:00:00 2022 GMT
            Not After : Apr 11 04:00:00 2028 GMT
        Subject: CN=c76cba04-f9fb-4c48-8a07-9362b138592a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ca:59:be:77:d5:ae:19:b9:b0:7e:2d:fd:94:
                    b2:14:2d:98:e5:94:e0:f8:47:6e:1a:5a:da:4d:8f:
                    0c:95:c6:9c:22:20:3c:00:64:56:ae:ec:fc:01:49:
                    b1:8d:3b:86:83:35:bb:29:f8:1c:1c:7b:09:ad:59:
                    f7:d4:44:5c:d0:1f:51:ba:81:6e:59:0b:36:fe:23:
                    b8:c5:d3:b2:dd:1b:eb:64:16:ff:5a:f9:eb:72:16:
                    44:e9:19:a7:cc:59:3f:2d:33:93:9b:65:94:22:b4:
                    60:d8:a1:10:4c:01:c0:8f:34:fe:69:61:c7:ca:62:
                    8e:11:e3:f8:66:a2:cc:2d:5e:6e:02:07:6c:6b:35:
                    bc:77:88:1b:50:4c:58:8a:40:91:b3:5a:c6:de:e5:
                    f8:9c:ac:43:2b:14:cf:89:c8:ae:ef:cb:18:07:e5:
                    39:58:06:5e:c0:ff:53:fc:1a:50:f5:77:c6:6a:e8:
                    b1:ea:9e:b5:0d:5d:d2:f0:a2:de:e4:a1:d5:30:42:
                    fc:90:9a:96:2f:fb:53:39:61:77:66:36:ce:cd:77:
                    53:f3:6e:51:63:3d:2a:a2:b9:08:20:77:48:ee:9b:
                    4b:66:9d:a8:8e:c7:b0:71:42:d2:cf:fd:19:5a:07:
                    42:4d:9b:58:02:bb:c5:aa:ca:4d:0b:23:c7:a4:56:
                    ae:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8C:7E:2E:65:D9:9B:E3:B8:34:D5:2E:D3:DA:E7:F5:76:D5:DB:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/63cfa390-bf93-34d6-95e6-13b01ba9546d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:36::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:8b:9b:bc:d7:fd:f8:06:b2:ad:37:91:49:bb:fd:65:de:5f:
         c0:62:7a:ec:93:36:ad:82:2d:74:27:8f:90:13:5d:f5:23:15:
         2f:bf:2c:f8:93:f8:dd:2f:ab:ed:46:8e:86:95:77:d8:e9:0a:
         77:8d:7b:7c:46:ba:51:ba:78:f8:2c:f0:6d:ef:aa:11:c0:5c:
         78:a8:65:24:3c:81:d3:0b:11:09:c6:70:b9:27:27:57:d8:21:
         4d:d2:ad:8c:11:47:cb:0c:74:3d:85:9f:c1:26:5e:1d:9f:c9:
         a5:f8:33:0f:f7:24:07:cf:5a:47:2e:4f:d9:e3:7e:9b:71:c6:
         90:0c:bb:54:48:3f:bf:94:b2:c6:6b:36:dd:21:95:ca:06:8d:
         b1:b4:54:ea:9b:30:21:e2:04:ab:6c:83:b7:84:42:af:ab:4b:
         3f:3c:fd:9f:2b:38:a3:62:8f:47:96:e0:81:ec:35:81:2f:d5:
         2a:db:54:b1:4d:f1:12:88:08:87:41:d6:80:d1:6e:be:9a:ab:
         96:70:e3:91:63:9f:17:4e:9f:ea:65:05:69:38:40:f0:c3:ea:
         6f:3e:bb:51:20:a2:34:2e:99:89:cf:35:4f:d2:39:7e:f1:c8:
         79:15:51:1c:24:e5:56:f5:22:61:ab:c3:72:85:a8:ff:c5:81:
         28:46:c2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----