Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cce1967-a5c4-3dd4-96b6-7b5cdb7a0875.roa
File:                     9cce1967-a5c4-3dd4-96b6-7b5cdb7a0875.roa (raw, json)
Hash identifier:          STxZN32/X7ivx/HS0TL07hBMiEym7GSEb7rM771/rgQ=
Subject key identifier:   36:B5:55:21:F8:CD:00:1A:0B:41:AE:FF:35:74:19:0C:A3:67:8C:20
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D662034F9102DCE3AEE10B100
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cce1967-a5c4-3dd4-96b6-7b5cdb7a0875.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        173.189.72.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:20:34:f9:10:2d:ce:3a:ee:10:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=46ba323c-efeb-4697-a4e3-29ab571f1c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2d:a8:ea:29:58:52:e0:9c:6b:f4:e4:0d:3f:
                    47:9d:f6:f9:98:69:89:81:72:c4:fb:2d:37:21:ba:
                    84:08:f6:2a:4e:8b:68:b5:6c:60:a5:e8:87:2b:61:
                    e6:12:b9:6e:3b:6d:28:bb:f4:eb:4d:e1:35:57:42:
                    b4:c9:c3:d8:98:c5:97:fc:31:97:79:ec:a1:e8:5e:
                    6a:eb:9f:29:26:12:0b:7f:13:60:26:62:55:eb:0e:
                    e7:58:8c:5d:01:6b:f9:cb:b4:3c:3f:61:00:5e:82:
                    ed:ec:2a:b0:fc:6f:20:db:3b:f2:53:5c:97:d4:89:
                    fd:19:bc:14:be:f2:30:93:d8:45:18:7f:fe:cf:a0:
                    46:7f:12:18:dd:f0:ac:0d:c6:55:9b:34:f9:6a:71:
                    27:ff:6e:82:74:6a:bc:b4:8f:8b:63:4b:6a:55:82:
                    aa:2a:e6:d2:9f:16:e1:8f:1f:de:41:0e:f5:32:ba:
                    8f:e9:0c:d0:b4:bb:98:73:24:19:2d:e4:ea:4f:67:
                    28:01:47:bc:69:59:74:6b:ac:ba:9e:0a:54:81:4d:
                    d0:5f:a1:46:d7:61:30:76:2c:de:f4:00:b9:f0:5e:
                    57:d7:f6:2b:da:4a:70:fd:db:75:77:a0:2a:88:98:
                    10:60:cf:c1:29:34:2e:d2:9e:8e:ad:b2:d2:ad:98:
                    0e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B5:55:21:F8:CD:00:1A:0B:41:AE:FF:35:74:19:0C:A3:67:8C:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cce1967-a5c4-3dd4-96b6-7b5cdb7a0875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.189.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:4f:dc:e8:cf:e1:c3:0e:f5:3b:87:40:a9:05:41:b7:7c:5e:
         7f:32:09:14:f2:c3:63:12:bd:88:c4:5f:4c:e4:c4:3d:67:e1:
         16:1b:97:4d:a3:29:ce:6b:86:cc:43:cf:2e:ed:c6:69:49:6a:
         05:a8:4c:9d:05:e5:2f:64:fd:e4:29:20:22:95:d6:51:21:b3:
         99:5e:12:b5:89:cf:d5:b6:af:ab:79:5b:cb:64:27:39:86:96:
         e0:4b:c2:91:a7:18:4f:dd:31:3f:a7:a7:cc:1e:d1:80:aa:f5:
         c4:1a:01:f6:94:30:45:7e:d6:b7:7a:5a:e3:31:98:9e:9f:f3:
         3a:a6:df:ac:cc:99:24:56:2c:52:3d:e9:58:36:0d:51:b0:ba:
         b2:52:d6:ac:ee:9d:ad:21:ea:65:67:c4:8d:39:f5:00:3d:5c:
         dc:d5:2a:d3:28:36:d6:9f:63:60:39:eb:82:7c:93:b1:b5:00:
         32:76:53:98:35:55:48:75:30:3c:ff:63:24:11:43:d4:0e:be:
         50:60:28:da:b1:8d:e5:45:d7:98:49:34:f8:25:35:d1:2b:d9:
         08:22:54:d4:cc:ba:5f:1b:4c:8a:0e:40:db:f9:f8:de:02:52:
         fc:e2:c7:b8:3e:df:54:0f:5d:93:6a:36:34:83:14:5f:c2:d9:
         e5:31:51:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----