Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/2cd58b09-92ed-377d-9cee-ff6acb637052.roa
File:                     2cd58b09-92ed-377d-9cee-ff6acb637052.roa (raw, json)
Hash identifier:          HKBd0+18EWMou5B8pUmZ4kzv39I/xDqiX9ABgCXmGAA=
Subject key identifier:   31:C7:F6:D0:B0:8B:EF:23:F3:B8:1B:D1:9B:33:A6:09:D5:20:CD:2A
Certificate issuer:       /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Certificate serial:       010D0C9F4328583C989ED6AA3DDF6A7535A929C0
Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/2cd58b09-92ed-377d-9cee-ff6acb637052.roa
Signing time:             Mon 08 Nov 2021 05:00:00 +0000
ROA not before:           Mon 08 Nov 2021 05:00:00 +0000
ROA not after:            Thu 18 Apr 2024 04:00:00 +0000
asID:                     210734
IP address blocks:        2602:fc09:d2f::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:98:9e:d6:aa:3d:df:6a:75:35:a9:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
        Validity
            Not Before: Nov  8 05:00:00 2021 GMT
            Not After : Apr 18 04:00:00 2024 GMT
        Subject: CN=13a48508-d827-4bed-a097-ece1b8196384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:31:1d:1f:00:18:eb:72:50:12:15:6d:af:fd:
                    d6:a4:d2:77:29:39:5c:9d:ef:63:c6:8a:90:ea:09:
                    30:8f:fb:e5:4c:24:5a:36:eb:f7:08:52:a7:ae:ea:
                    38:e5:78:cb:5c:09:d8:3e:89:3e:2e:52:d1:3a:39:
                    08:af:81:a6:50:be:dc:75:fa:61:e4:f0:dd:b9:4c:
                    e9:8b:7d:95:45:8c:ea:a6:bd:46:72:94:47:e5:c6:
                    56:2f:ba:cd:5d:6d:69:05:72:14:19:d2:49:7c:83:
                    b7:84:61:f2:1b:0d:2d:41:7d:b4:af:41:ee:c2:92:
                    51:67:8d:df:9f:a6:19:e3:0e:05:1a:2b:76:e1:0f:
                    aa:64:f8:8b:b0:0e:48:2a:26:e5:52:f9:a1:11:3b:
                    52:94:6b:39:a8:e7:a2:6f:7e:6f:9f:7b:3c:1a:a5:
                    12:22:aa:ca:5a:2c:12:27:4e:12:20:c0:7d:1f:de:
                    60:70:94:82:05:cf:df:ab:a7:a1:f9:8d:51:aa:22:
                    63:9e:5a:80:3f:de:9b:9f:d7:b2:32:e7:51:ef:ff:
                    2c:03:d0:ba:c0:54:46:22:de:3a:87:92:a2:68:d0:
                    1e:ba:a7:d9:e4:6a:ce:f1:5f:32:7e:e0:b5:1b:d9:
                    5c:ee:f7:d5:0a:29:75:36:93:a2:89:1b:71:5e:eb:
                    19:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C7:F6:D0:B0:8B:EF:23:F3:B8:1B:D1:9B:33:A6:09:D5:20:CD:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/2cd58b09-92ed-377d-9cee-ff6acb637052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl

            X509v3 Authority Key Identifier:
                keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc09:d2f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:24:20:6e:de:25:a5:2f:6c:a4:43:ba:5a:12:ae:7f:3a:92:
         15:d1:80:ad:dc:12:78:fc:39:e3:91:2b:7a:b6:82:39:84:4b:
         3c:a7:3f:4f:7c:ad:ca:3e:d7:5e:bd:07:65:d7:08:d2:2a:fe:
         0b:1d:1a:5b:ed:0f:0e:3d:9e:d0:02:10:3c:e6:e9:2b:13:0a:
         cf:e9:ac:fa:ac:48:e1:1c:cc:50:bb:8d:90:a2:47:43:30:10:
         b5:4a:ab:2f:34:24:63:a9:27:b4:c3:56:7d:9c:24:66:07:72:
         0f:18:88:c3:04:ae:77:d2:d9:fa:e8:b4:bc:3f:c3:46:16:1a:
         8b:de:64:60:6a:cf:c5:74:59:36:11:8b:3b:11:7f:a6:de:1b:
         d1:90:af:aa:8f:d9:8b:6b:33:45:ff:4b:89:a2:4f:df:ad:26:
         f0:26:f1:ba:0a:54:8e:41:fe:a4:33:88:a0:70:6e:59:b2:35:
         c1:55:06:64:7f:79:ab:38:00:aa:9c:da:6e:53:6a:3b:aa:ea:
         0d:40:37:76:53:92:8f:08:f0:77:36:10:77:d5:87:04:70:2e:
         86:92:7e:7e:59:ec:34:fc:3c:29:20:af:a1:f9:47:60:95:af:
         5a:cc:5f:f6:ee:1a:e4:b7:7c:49:b9:70:83:79:b9:bc:4c:71:
         ed:1f:cc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----