Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/62925b8d-7e68-3670-a291-404476138988.roa
File:                     62925b8d-7e68-3670-a291-404476138988.roa (raw, json)
Hash identifier:          AwdsEy8afc9H9TldBjiY4MBpUFUTQ2KFzVxb1w35vyU=
Subject key identifier:   B2:6B:EA:4A:4C:A3:5A:59:A1:8C:BA:F8:21:3C:D5:48:35:52:4E:76
Certificate issuer:       /CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9
Certificate serial:       010D0C9F4328583F732AA48B9078380837D744C0
Authority key identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/62925b8d-7e68-3670-a291-404476138988.roa
Signing time:             Sun 02 Oct 2022 12:00:00 +0000
ROA not before:           Sun 02 Oct 2022 12:00:00 +0000
ROA not after:            Tue 03 Oct 2023 04:00:00 +0000
asID:                     14618
IP address blocks:        2606:f6c0::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:73:2a:a4:8b:90:78:38:08:37:d7:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9
        Validity
            Not Before: Oct  2 12:00:00 2022 GMT
            Not After : Oct  3 04:00:00 2023 GMT
        Subject: CN=aa1ba4b4-be65-422f-9d18-9b0c00e5c2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d3:7d:11:10:1e:3e:29:f5:ef:34:2e:84:b2:
                    38:68:0d:da:e9:64:93:bf:4e:bc:b1:f5:87:93:c5:
                    e3:33:8e:57:ed:44:26:ab:6a:72:09:44:1c:ff:0c:
                    cd:f1:30:16:b9:44:af:a4:76:a3:1f:93:2b:70:50:
                    d4:8e:fc:d6:40:3a:9e:fc:04:9b:a1:56:96:9d:18:
                    c4:a4:de:f1:f3:5f:a6:30:28:7e:85:d8:a5:02:95:
                    d5:55:be:f2:c9:aa:cd:39:ff:99:57:d7:41:b2:a2:
                    56:0f:c2:b3:30:aa:23:b8:d4:2b:79:d4:78:4c:e2:
                    7a:91:42:e7:76:4e:01:55:90:93:b3:09:0b:7a:c2:
                    06:d5:f7:7b:ce:73:b7:4d:34:89:4a:19:b7:f8:23:
                    cf:2c:c8:59:38:55:60:1e:46:2c:19:22:d8:3a:9c:
                    6f:06:59:ee:1c:1d:b3:b6:6d:c4:06:8f:37:d4:ee:
                    61:b1:b9:26:92:e0:fb:ab:82:f2:c1:a1:c6:7e:22:
                    78:f5:78:1a:cd:10:97:77:6c:1d:41:19:f2:9d:d2:
                    97:db:79:02:e0:ca:f0:fd:47:f9:81:c4:3a:e7:1e:
                    69:ec:0f:92:7e:fe:97:e2:86:5d:55:e7:7c:31:4e:
                    64:9b:41:ac:c5:de:d6:e9:c9:f2:70:90:95:91:90:
                    22:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6B:EA:4A:4C:A3:5A:59:A1:8C:BA:F8:21:3C:D5:48:35:52:4E:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/62925b8d-7e68-3670-a291-404476138988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl

            X509v3 Authority Key Identifier:
                keyid:B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f6c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:bf:aa:f7:81:4a:c9:6b:49:7c:f1:f6:e9:9d:0f:3c:67:c0:
         dd:bf:55:7b:90:20:7b:52:41:13:dc:a1:9a:94:45:15:00:44:
         a5:3d:04:d1:c6:3f:c2:e1:5e:df:6c:3d:09:ed:3d:64:b3:1f:
         ac:83:39:34:85:69:21:53:23:fd:f0:34:12:70:d7:57:f9:4e:
         39:aa:28:28:f7:7b:ac:83:b7:81:cc:c8:36:41:f6:f4:67:ed:
         46:ad:0b:86:06:9f:f5:40:26:9f:ff:82:bd:33:91:8f:3b:87:
         2f:60:48:ca:a5:86:63:73:81:15:fb:42:53:65:ad:41:f0:a5:
         72:39:1c:c0:3e:a4:d6:b6:9e:3e:39:41:c5:92:7d:8b:d0:b2:
         19:18:43:0c:5c:c3:29:6a:d7:cd:77:d3:2b:d0:58:55:36:f0:
         39:ca:7e:73:73:24:02:f7:52:d6:39:20:14:c6:fc:87:18:b3:
         22:7c:75:72:18:9d:08:0d:bc:1f:0a:64:e4:bb:98:66:90:2f:
         0c:f6:ab:72:91:97:69:e3:1b:5e:33:34:12:a9:cc:85:e6:ee:
         06:d4:73:01:89:72:be:24:38:5d:12:a8:57:6b:a0:21:2e:36:
         b2:60:64:c2:9c:f6:6d:de:29:df:18:31:b9:af:e3:ab:3c:cd:
         3a:16:e5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----