Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/76e2a2de-4348-3fd0-82b1-e70a5e8e51ea.roa
File:                     76e2a2de-4348-3fd0-82b1-e70a5e8e51ea.roa (raw, json)
Hash identifier:          nam2CI0UkC9tDROypgy30sxr/Hgwn13sbqL0qpp7gqQ=
Subject key identifier:   A5:52:0C:99:DE:32:D2:C1:71:B3:8A:23:E8:33:9B:A4:20:5E:04:DE
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D3F518B9702EC9FC186D88EC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/76e2a2de-4348-3fd0-82b1-e70a5e8e51ea.roa
Signing time:             Tue 15 Mar 2022 04:00:00 +0000
ROA not before:           Tue 15 Mar 2022 04:00:00 +0000
ROA not after:            Tue 07 Mar 2028 05:00:00 +0000
asID:                     7029
IP address blocks:        75.119.0.0/17 maxlen: 17

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:3f:51:8b:97:02:ec:9f:c1:86:d8:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 15 04:00:00 2022 GMT
            Not After : Mar  7 05:00:00 2028 GMT
        Subject: CN=35283187-8c67-47c3-abc0-813e577fea1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c7:32:07:15:6b:d0:4b:bc:02:60:fa:11:f3:
                    7d:70:fc:39:fa:9a:5d:d2:1d:58:e5:e6:02:a0:d4:
                    32:a9:b0:5f:c6:40:ad:90:89:f9:a3:3a:a2:d7:84:
                    5e:8f:c1:ca:37:b4:fb:e5:d8:8e:37:a0:74:98:ed:
                    c2:06:ff:3a:d2:58:84:56:86:71:52:dd:3b:32:d9:
                    ce:33:36:e8:ae:7a:86:dd:01:95:3c:2c:d1:bd:22:
                    74:3f:96:4d:9e:08:d6:ac:18:2a:8e:7a:2e:77:c4:
                    f4:bf:ad:9a:f8:66:56:d6:40:d9:f7:a9:d6:3c:fc:
                    10:d0:49:bd:37:59:01:f6:d6:ec:93:d8:f1:2e:d1:
                    e8:c6:25:66:55:34:06:b3:7d:85:e7:d5:98:59:a3:
                    60:84:f1:f8:d2:e6:00:c1:fb:84:99:7b:36:83:00:
                    a2:43:f4:76:8a:aa:2b:e3:b3:71:55:6a:f2:3e:f3:
                    23:d7:96:f6:24:5d:31:cc:c3:74:45:43:f7:07:f2:
                    e5:5e:7c:2a:64:b6:fd:66:20:4d:d7:51:a2:21:f3:
                    37:4a:6d:31:a7:1c:ce:81:f9:56:f1:9f:a9:3d:e0:
                    c8:ca:1c:e9:fa:07:b9:6d:fa:a3:f4:f8:ad:c6:1f:
                    2e:6f:b8:fc:a3:e1:53:5d:43:f2:0f:d7:ce:9d:da:
                    45:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:52:0C:99:DE:32:D2:C1:71:B3:8A:23:E8:33:9B:A4:20:5E:04:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/76e2a2de-4348-3fd0-82b1-e70a5e8e51ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.119.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:e9:a3:64:a2:4b:66:e7:ee:34:86:dd:ce:f4:8d:ce:87:5d:
         fb:1e:d1:ae:1c:90:ae:c6:94:66:35:b2:2a:fd:e8:58:2d:68:
         05:d0:e5:95:4f:00:7c:29:e9:ee:13:59:ac:df:ff:44:ec:93:
         dc:1b:b0:dc:91:a8:0d:99:25:6c:16:93:e7:e5:5c:e2:66:cf:
         36:bc:ab:a1:92:43:af:02:73:1a:3a:0e:18:d7:db:ad:ac:54:
         67:0a:2e:5c:04:fd:ca:5f:a3:73:cc:41:24:7f:37:0a:25:80:
         b2:6b:f0:55:f7:0b:58:a0:17:ab:39:a6:85:99:79:54:60:19:
         32:f0:4e:d7:22:b1:61:c3:50:09:23:88:a3:e5:3a:2f:d0:6f:
         b5:99:ee:59:30:64:00:65:fd:19:f2:71:eb:93:d9:3d:51:0a:
         a6:b6:60:39:8d:4f:da:5c:76:14:c1:84:17:49:20:31:e6:f6:
         b7:9b:1f:6d:87:11:48:9f:f9:67:6d:d8:49:ff:ca:f0:cb:16:
         8b:a5:52:3a:ff:17:3c:e0:c9:eb:82:72:12:a2:ea:aa:be:ea:
         e4:2a:33:4b:06:ec:db:29:60:c6:83:c2:13:4a:2e:a8:74:df:
         f4:8a:28:bd:50:f0:56:5e:98:79:20:f8:9e:71:9c:38:e0:2a:
         fb:33:1e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----