Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a3dbf8b5-ecfd-33c7-9a99-2ae57dc51b6d.roa
File:                     a3dbf8b5-ecfd-33c7-9a99-2ae57dc51b6d.roa (raw, json)
Hash identifier:          bkiC1LIIdsoaRHYufvXp2grjvXK4nXU+MQiSpILrfuU=
Subject key identifier:   21:7D:79:D8:F2:99:30:B2:D5:1C:B0:2B:84:51:93:70:00:EC:51:53
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858439B136F3A3211565578FF0520
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a3dbf8b5-ecfd-33c7-9a99-2ae57dc51b6d.roa
Signing time:             Thu 19 Oct 2023 21:21:39 +0000
ROA not before:           Thu 19 Oct 2023 21:21:39 +0000
ROA not after:            Wed 17 Jan 2024 22:21:39 +0000
asID:                     396982
IP address blocks:        2606:f4c0:5000::/40 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9b:13:6f:3a:32:11:56:55:78:ff:05:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Oct 19 21:21:39 2023 GMT
            Not After : Jan 17 22:21:39 2024 GMT
        Subject: CN=77150c48-a34d-4a87-9849-783516bf6ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0b:cf:72:df:59:07:37:75:14:bb:c1:00:d9:
                    82:92:01:d9:5d:f3:ca:4d:6d:30:b1:3d:36:b7:a6:
                    55:e6:c8:94:8f:42:86:50:f3:92:80:1a:8e:e3:5a:
                    c4:0b:c0:e0:62:0c:11:18:9e:3b:26:2a:a4:30:c7:
                    1d:10:b2:80:69:04:72:96:a1:90:65:38:51:65:d4:
                    aa:ea:12:4f:6e:a2:02:f6:14:cd:8c:02:5f:2f:b2:
                    bd:cd:fb:fa:f5:5e:4d:f6:d8:17:59:da:ba:d6:10:
                    a5:0b:ae:5f:a8:cc:04:e4:08:99:35:69:da:9a:93:
                    29:9d:99:bd:89:7c:ca:7e:c4:42:40:a9:af:7c:0e:
                    37:c7:a3:39:4c:55:6e:b7:ec:a4:96:dc:db:52:36:
                    71:3f:2c:d2:20:a7:2b:f6:8b:03:f8:3a:d0:08:bb:
                    e4:58:7d:26:a8:4f:f0:8d:33:57:74:a3:ca:9b:76:
                    a3:ac:01:89:be:c6:8c:c9:72:c1:c1:17:0d:f8:16:
                    b6:e0:fc:54:23:92:22:a1:63:dc:c7:55:90:ac:c3:
                    b4:87:c3:1e:5d:5c:b5:e5:b7:36:5b:94:fa:2a:d8:
                    7e:92:0e:df:f1:c4:92:ea:b2:20:39:ed:73:27:8a:
                    5a:4f:4c:76:a3:38:8e:4f:65:48:23:be:97:55:bd:
                    1a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7D:79:D8:F2:99:30:B2:D5:1C:B0:2B:84:51:93:70:00:EC:51:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a3dbf8b5-ecfd-33c7-9a99-2ae57dc51b6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f4c0:5000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:02:36:ed:3f:97:d5:ff:97:1d:b1:dd:5a:be:2b:d1:3a:9a:
         05:e9:02:54:a8:2b:e0:d7:56:a4:41:2d:12:64:3a:9f:3b:8b:
         d4:58:32:95:bb:5a:d3:9f:99:ac:49:a9:02:14:6c:0b:20:8a:
         3f:12:e7:7e:78:83:b4:26:78:c3:d1:88:e6:dc:cd:4f:da:01:
         43:76:49:2f:15:e1:5f:53:c5:ac:ce:24:52:84:e3:5e:47:57:
         14:3e:b6:7d:db:b1:69:54:22:18:29:05:d1:4b:00:2f:68:e1:
         09:e8:6a:6d:83:c1:ae:03:4f:9c:75:88:c2:a2:62:55:8f:91:
         b9:52:aa:19:99:3f:2a:a5:00:f4:02:19:32:4a:ef:4e:71:64:
         8c:fa:e7:ad:10:d7:0c:87:48:61:60:93:2a:ef:af:f7:f9:50:
         5f:46:84:d7:b7:09:1c:2e:ce:1e:b8:f7:81:d4:45:c6:5c:18:
         c2:e2:29:ab:44:b7:16:8d:e7:a1:64:12:ae:06:0e:1b:d6:6e:
         5c:5c:07:00:20:84:91:fe:13:3c:c2:1c:73:38:bf:57:60:8d:
         ba:54:f8:ef:ca:a3:14:0f:80:87:88:25:76:c4:fa:d9:b6:3e:
         2b:6a:34:c0:70:3a:12:7b:e5:42:4a:bc:dd:bf:0a:15:3d:0b:
         68:be:ae:3b
-----BEGIN CERTIFICATE-----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