Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/9dc48d57-861c-3d38-b4f6-c3d75e2ef21a.roa
File:                     9dc48d57-861c-3d38-b4f6-c3d75e2ef21a.roa (raw, json)
Hash identifier:          7FHTVHAQ+iVF1M/TsWVAR3qk1lSBBT2tTAk2O1A78Kg=
Subject key identifier:   5F:99:3E:D2:D6:15:E7:4E:D3:ED:52:01:39:EC:49:80:A8:7F:FD:52
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285843A5456D1DC9EBCB7685282480
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/9dc48d57-861c-3d38-b4f6-c3d75e2ef21a.roa
Signing time:             Mon 23 Oct 2023 13:00:21 +0000
ROA not before:           Mon 23 Oct 2023 13:00:21 +0000
ROA not after:            Sun 21 Jan 2024 14:00:21 +0000
asID:                     11232
IP address blocks:        2001:48f8:9014::/48 maxlen: 48
                          2001:48f8:9015::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:a5:45:6d:1d:c9:eb:cb:76:85:28:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Oct 23 13:00:21 2023 GMT
            Not After : Jan 21 14:00:21 2024 GMT
        Subject: CN=136e464d-a6b0-4123-808e-947ba72edf4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:35:17:9f:5e:44:68:9d:c8:03:ce:3c:96:4a:
                    54:29:28:05:f8:0f:ad:e8:5b:41:9f:8c:03:88:f8:
                    f3:45:51:f0:77:84:b3:31:e2:b2:51:98:cd:1a:bc:
                    98:18:d2:c7:9c:34:58:99:b5:db:3d:cc:9b:7a:b9:
                    5b:9b:35:33:74:6a:88:1f:90:d8:ed:80:4e:3e:1f:
                    23:48:d5:85:3c:64:24:01:e4:4f:55:16:54:87:d8:
                    fa:e3:9e:da:6b:fa:99:c5:92:ea:1d:c4:e6:77:67:
                    d7:85:38:19:71:bf:9b:f0:fc:47:4c:fd:00:9e:50:
                    5a:d2:04:2b:84:52:67:cf:4b:6e:47:82:fc:b3:df:
                    58:9a:0a:f3:83:c6:59:c4:12:b3:e6:4c:5f:0b:1a:
                    12:74:98:12:b8:5d:c6:e1:0f:45:b1:ed:08:6d:a1:
                    41:17:be:cc:74:40:ed:13:87:27:78:24:5d:5a:47:
                    f4:62:8d:f0:92:cb:1f:0d:59:64:8a:59:ed:69:94:
                    55:22:ff:52:a6:18:ed:38:7a:f5:68:6a:ad:ab:8f:
                    90:2a:8d:70:15:b4:07:9e:67:d8:ef:c0:98:77:6b:
                    7e:a6:47:f8:8d:80:77:e9:66:b8:47:8d:45:38:ce:
                    e1:66:02:10:8c:4b:5e:21:f0:b4:a5:9c:8a:b0:5a:
                    af:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:99:3E:D2:D6:15:E7:4E:D3:ED:52:01:39:EC:49:80:A8:7F:FD:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/9dc48d57-861c-3d38-b4f6-c3d75e2ef21a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48f8:9014::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:c3:ea:c7:06:69:65:37:62:9d:e7:64:2c:a2:6d:40:b5:85:
         c7:d5:15:a6:79:44:94:19:29:da:f3:5e:f8:fb:ff:71:bb:82:
         77:53:04:74:e2:0c:9a:89:13:0c:fb:ee:16:02:c8:60:49:28:
         c5:74:0a:51:b5:58:34:7d:31:7a:7a:09:c2:ee:67:c9:8f:d3:
         c8:d1:76:ff:dc:47:4f:22:25:b3:83:ea:da:96:e9:2f:28:e5:
         6a:99:e8:b1:5c:fe:be:fb:ca:c8:9a:dc:ca:65:f9:ce:02:6d:
         00:1d:b7:ba:54:17:d2:db:96:dc:8d:b3:df:38:30:8f:08:49:
         11:92:40:49:84:8d:75:cd:d5:0e:e4:f3:5e:28:fd:3e:14:ea:
         61:a0:25:b7:bb:1b:bd:5c:03:8b:de:3c:17:06:d3:d5:69:09:
         8f:be:be:59:60:30:83:94:90:c7:46:f1:c4:ac:cb:f3:03:53:
         5b:66:5a:72:17:8c:88:81:56:cc:d9:40:89:14:1e:d4:7a:88:
         34:4b:6b:fb:ab:d0:4f:a8:73:70:97:d3:cc:ba:d4:fa:11:e9:
         2e:7e:fa:bb:f3:a9:e1:2e:86:29:e6:50:65:2f:aa:21:a3:55:
         80:46:43:e7:d2:33:ab:ce:08:bb:de:92:dd:f6:3d:ff:32:16:
         55:9c:f2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----