Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/815f5ccf-dea9-30dc-a80a-27776d4c534d.roa
File:                     815f5ccf-dea9-30dc-a80a-27776d4c534d.roa (raw, json)
Hash identifier:          Eiso17U8qifVdZldnJFlY4CStgVtFNznCgulFnUQb2E=
Subject key identifier:   E8:20:01:A7:23:69:39:01:F4:27:B2:EC:C2:D2:12:07:C3:1F:EC:CD
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D551B6EC4F50F0348D57D3600
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/815f5ccf-dea9-30dc-a80a-27776d4c534d.roa
Signing time:             Wed 23 Mar 2022 04:00:00 +0000
ROA not before:           Wed 23 Mar 2022 04:00:00 +0000
ROA not after:            Wed 15 Mar 2028 04:00:00 +0000
asID:                     26296
IP address blocks:        75.77.38.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:55:1b:6e:c4:f5:0f:03:48:d5:7d:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 23 04:00:00 2022 GMT
            Not After : Mar 15 04:00:00 2028 GMT
        Subject: CN=f6142a6f-3c80-4c46-a2d5-942db51429c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ea:90:79:c0:bd:fc:a6:60:4f:62:d3:65:4f:
                    33:75:a4:70:3e:92:26:15:06:50:32:e8:64:4a:0a:
                    0e:2b:4c:ea:b9:7e:95:af:13:33:71:68:08:65:2a:
                    90:30:8a:19:e1:c8:c8:ad:e8:93:9b:06:d1:cd:e0:
                    57:0f:f0:a6:d5:7f:c2:d5:5d:76:c9:57:42:1b:fe:
                    ab:28:de:4d:0a:fa:7c:21:61:c8:62:d6:22:9d:44:
                    66:3e:9d:3a:79:ea:9e:4e:4f:3c:4b:a9:26:cc:9e:
                    b5:a3:9f:23:a6:96:94:9e:e9:26:bb:68:dd:ef:6b:
                    e5:55:3c:9a:e3:ab:48:29:cf:dd:98:ff:39:7b:de:
                    e0:53:11:9a:07:a1:f3:f3:fb:86:80:87:0b:b2:97:
                    5d:22:ce:72:d2:ea:cb:b3:c3:8c:f5:4d:a9:c4:d5:
                    8a:f2:2b:f5:f0:31:c6:d2:65:14:89:ee:54:e4:22:
                    0e:b4:77:09:75:3b:cb:06:18:c1:74:c7:ce:9d:09:
                    4d:eb:60:8d:33:b0:2e:64:45:5d:26:9b:1d:ce:b7:
                    3e:80:17:0a:c3:a6:91:b6:4d:66:d4:71:e9:ab:cf:
                    b6:4a:ad:13:29:2d:ae:32:58:f9:dd:5c:35:4b:7e:
                    8f:0f:a0:02:5a:8a:28:f8:87:56:33:87:8d:c7:f1:
                    2a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:20:01:A7:23:69:39:01:F4:27:B2:EC:C2:D2:12:07:C3:1F:EC:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/815f5ccf-dea9-30dc-a80a-27776d4c534d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.77.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:85:b1:b7:bd:35:d3:52:e9:47:cc:e2:48:4f:73:83:b2:30:
         89:65:50:b3:3c:ca:44:cf:c4:7e:f4:5b:8a:5f:d3:04:ec:f2:
         37:cd:4d:8a:35:6e:f4:58:20:f7:e5:b4:47:f8:af:df:e7:fd:
         0d:1d:04:68:94:2c:9f:b6:bd:41:31:63:91:c9:fc:02:cf:f7:
         62:c7:e1:2b:2b:9f:ad:f9:03:dc:d5:0d:60:0e:76:25:5d:5d:
         d8:40:da:a5:c2:83:d0:84:3e:38:db:6b:1a:68:3e:ea:81:a6:
         43:b3:4f:ee:ba:a3:72:3f:a0:cd:ed:85:8f:c3:94:56:88:a6:
         ff:7a:c7:bb:89:10:a0:c6:2b:98:4a:0b:04:b1:ba:68:46:40:
         60:42:43:79:b6:81:bd:e3:a0:ca:5f:e7:7c:16:3c:f9:3d:54:
         3f:a9:04:56:08:38:30:fb:8b:72:ba:b8:1f:08:4f:4b:d0:ba:
         ee:95:ae:49:fc:ec:f3:fc:b8:40:11:aa:17:e7:bc:68:32:2c:
         e1:2e:ab:c5:10:6e:69:73:4a:e1:94:a9:bc:d1:b2:5a:2e:77:
         ab:68:ec:0d:c5:04:7c:fc:82:39:7f:1a:5b:e5:50:9b:c1:27:
         3e:2d:62:97:9b:94:88:7e:84:ee:6a:9a:81:fb:cc:64:bb:98:
         7f:bb:5c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----