Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/2efbaff3-e2cb-331f-936e-e8df1d090037.roa
File:                     2efbaff3-e2cb-331f-936e-e8df1d090037.roa (raw, json)
Hash identifier:          8UbU33U3bhYl4hArcWFwchfJgaAUqHANWkQYBEgjNyE=
Subject key identifier:   48:3A:91:61:FA:DA:60:65:62:57:F7:60:D1:F3:D2:23:DA:9F:2D:5D
Certificate issuer:       /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Certificate serial:       010D0C9F4328583E571C95F36FECA1C5D36091C0
Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/2efbaff3-e2cb-331f-936e-e8df1d090037.roa
Signing time:             Tue 21 Jun 2022 18:18:07 +0000
ROA not before:           Tue 21 Jun 2022 18:18:07 +0000
ROA not after:            Wed 25 Sep 2024 04:00:00 +0000
asID:                     950
IP address blocks:        2602:fc09:950::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:57:1c:95:f3:6f:ec:a1:c5:d3:60:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
        Validity
            Not Before: Jun 21 18:18:07 2022 GMT
            Not After : Sep 25 04:00:00 2024 GMT
        Subject: CN=6a1b758d-635a-44ec-9d72-be73d5e5e9a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b4:fc:77:a6:c9:c1:67:a6:8c:5b:f0:99:a9:
                    25:ba:62:80:7a:cf:43:c2:17:b6:26:fd:7c:82:27:
                    6d:8a:51:06:1a:0a:4e:47:1b:82:01:ab:ec:c9:5b:
                    a6:c0:0b:78:4e:e3:e9:f6:8f:a8:1b:f5:eb:46:55:
                    8f:8c:fa:25:41:1e:ab:21:2d:85:e0:fe:8b:29:a0:
                    f2:c8:ca:b3:b6:34:d1:1d:a5:5c:52:28:f3:a7:d6:
                    66:2d:39:ad:4e:d0:68:f0:20:79:14:7b:c7:71:be:
                    ee:0a:80:1f:68:39:d8:b8:ac:ac:49:ee:c1:03:6c:
                    4b:83:61:9a:1a:89:06:bf:5b:8a:4f:05:26:8c:7d:
                    c6:57:a1:06:aa:37:87:a7:e8:50:0c:2f:1c:f4:dc:
                    f6:07:86:a6:c9:48:9f:af:ff:65:ad:c2:52:45:a7:
                    6c:71:83:bf:28:54:13:1e:a2:22:11:53:f2:d5:e5:
                    23:00:d7:79:d3:9d:d8:0d:cf:fb:4d:b0:56:0b:99:
                    7f:7c:15:ce:75:2b:a0:6e:4e:f3:fc:b9:ca:18:49:
                    6d:35:b6:e9:1d:d6:98:d2:1a:d3:ee:76:b8:8c:e9:
                    23:2c:39:1b:6d:91:8c:cf:72:0a:af:79:17:a4:9d:
                    23:93:b9:ee:06:71:12:92:05:01:26:45:04:3a:7b:
                    e0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3A:91:61:FA:DA:60:65:62:57:F7:60:D1:F3:D2:23:DA:9F:2D:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/2efbaff3-e2cb-331f-936e-e8df1d090037.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl

            X509v3 Authority Key Identifier:
                keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc09:950::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:a8:a7:f7:c3:65:47:1d:45:d2:58:66:cf:c0:35:81:19:8e:
         38:4b:b7:8a:4c:ed:af:18:b3:37:d4:16:b9:e0:71:cb:c4:01:
         c0:61:cb:83:e6:29:3b:72:02:58:16:d6:cf:bc:c9:2a:71:c1:
         a5:e9:a2:96:8a:18:95:e4:17:ee:73:4d:ff:0d:e6:b4:f0:24:
         7b:fe:d0:d3:41:46:48:a8:15:28:88:4e:13:d2:9f:f2:79:14:
         a2:97:7c:59:55:58:78:da:e1:2d:8e:22:f9:e5:3a:7e:ba:96:
         25:a6:37:44:4f:34:5f:b4:f6:ff:14:b5:7b:04:f5:7c:eb:34:
         64:25:0a:94:e4:35:e8:be:99:d1:f1:99:34:6d:39:ba:96:de:
         38:f5:1f:85:c6:00:27:76:25:01:c3:82:4e:41:3f:7c:69:85:
         23:ab:89:c4:c8:f6:b5:fb:50:60:43:67:d2:57:ab:4f:29:43:
         37:7a:a8:5f:d4:9e:01:8b:f6:ba:16:f1:9c:8a:80:0c:9e:20:
         3d:b2:14:d8:dd:e1:0b:cb:83:a9:54:79:ac:1c:4f:7c:43:e5:
         52:23:21:b2:3f:6e:7c:5b:3d:ac:1e:58:32:d4:2b:c3:0c:18:
         f9:63:7d:c8:2d:03:76:73:b9:7e:4d:d9:fb:8a:5f:85:e4:ec:
         3a:9b:e5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----