Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ad329084-f0c7-3595-90c4-db34060e35bc.roa
File:                     ad329084-f0c7-3595-90c4-db34060e35bc.roa (raw, json)
Hash identifier:          IAfqeNU/P2zbnAlBtAi88XIHhWPVAcLa3/lyl4XjSDY=
Subject key identifier:   08:A3:82:66:49:BB:A4:81:AB:A6:F1:D8:B4:A4:B3:2F:FA:F9:0A:73
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D551D1238D51D1FA61169F430
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ad329084-f0c7-3595-90c4-db34060e35bc.roa
Signing time:             Wed 23 Mar 2022 04:00:00 +0000
ROA not before:           Wed 23 Mar 2022 04:00:00 +0000
ROA not after:            Wed 15 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        173.186.244.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:55:1d:12:38:d5:1d:1f:a6:11:69:f4:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 23 04:00:00 2022 GMT
            Not After : Mar 15 04:00:00 2028 GMT
        Subject: CN=6891e998-c675-4aaa-b26b-ddfcf5516c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3a:bc:ac:69:bb:c2:b8:ac:d8:d0:98:06:92:
                    71:e4:8b:ce:61:94:d2:21:df:7f:ec:d6:9e:1c:1f:
                    42:55:78:e0:df:63:a0:64:59:a8:df:8f:70:2a:af:
                    18:a2:02:1a:fd:fc:14:a8:e5:e7:9c:77:7a:83:cf:
                    61:c4:45:7a:08:56:44:39:6a:e9:f5:59:8a:df:86:
                    a1:13:9a:da:85:ed:95:a4:39:3f:2f:ee:c6:9e:2d:
                    3f:f3:46:f5:4d:7d:9c:7c:9f:4d:f1:72:9c:a1:22:
                    68:5b:aa:1b:2f:d3:59:9c:bf:9e:4a:a6:43:ba:de:
                    99:ee:c1:b6:32:4e:93:bc:ff:cc:61:dc:ed:5b:b4:
                    3d:4b:ec:f5:37:83:bb:7c:ab:2e:8f:9a:b3:97:91:
                    2c:d9:e5:8f:2b:8b:3f:f5:b6:00:31:05:a9:87:f6:
                    ce:46:bc:d9:9a:5d:62:10:ff:01:91:8f:75:ac:b4:
                    cb:1c:ee:de:c7:19:f5:2e:a3:da:da:c5:a5:49:16:
                    f0:98:ab:7d:09:94:4f:cb:3f:f8:39:ca:3e:8a:32:
                    43:ba:25:36:16:ee:d0:4e:d1:5e:99:6c:11:2d:30:
                    e8:05:5e:cb:88:5e:0c:0a:ca:cd:4b:3e:25:2d:2f:
                    8f:df:a6:40:c2:af:0a:58:ad:1e:ca:89:f3:26:04:
                    f9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A3:82:66:49:BB:A4:81:AB:A6:F1:D8:B4:A4:B3:2F:FA:F9:0A:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ad329084-f0c7-3595-90c4-db34060e35bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.186.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:63:7f:54:07:e0:4c:63:d5:c7:2d:24:50:ea:64:ce:70:ff:
         37:83:9f:32:d8:d7:6c:02:94:d7:6d:e0:7d:84:7d:41:2a:fe:
         fd:2e:ab:69:10:bb:22:14:00:ee:f6:3b:d7:67:c2:9a:0d:ef:
         f1:1b:4a:5a:cf:26:c3:99:e4:cc:d5:9c:e3:ac:c9:cc:a2:fc:
         a3:82:7a:57:9b:df:17:9c:83:06:e9:ba:3d:4a:9a:73:9c:d8:
         d4:bd:9a:49:13:ab:44:aa:1a:ff:fd:33:d7:e4:93:b7:3d:3b:
         13:c0:8d:b1:64:c0:a0:d3:fb:7e:22:c5:eb:1b:66:26:85:a5:
         2c:dd:43:77:bc:59:a5:44:25:f5:96:e1:2d:39:4d:c6:1d:98:
         06:66:f8:aa:f9:cc:62:9e:9b:bd:57:1e:fb:d4:96:4a:a5:0f:
         46:c6:d2:da:4e:22:b9:75:e0:4c:a3:05:c0:21:31:4b:04:c5:
         aa:f8:aa:e4:32:73:4c:ba:16:86:be:54:96:2d:8f:1b:b9:57:
         a1:90:23:34:8a:40:11:b2:41:74:fb:05:1b:43:52:35:f2:51:
         8e:d5:85:94:b6:a7:4d:c9:98:98:2b:60:01:2c:23:2d:a7:9d:
         80:24:7e:3c:60:5f:4e:a3:bd:ff:2d:5c:6b:23:29:a6:49:fe:
         90:77:d1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----