Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/514e8c30-b490-35eb-bc79-044e774e3d39.roa
File:                     514e8c30-b490-35eb-bc79-044e774e3d39.roa (raw, json)
Hash identifier:          +qdippIs3yloexU4wPzZmBK1UGXcERW07+f7cwKFcoo=
Subject key identifier:   19:CB:95:C4:1A:EE:8D:07:D6:97:AE:6E:D0:94:73:B7:46:91:CC:AC
Certificate issuer:       /CN=cc2b08f9-b3dc-4cf6-870c-a730b860c491
Certificate serial:       010D0C9F4328583DF8A51373AD8D03DC9577E2C0
Authority key identifier: E1:1F:BF:28:EA:F0:4B:06:8B:E0:2B:51:CA:BD:60:3B:8D:C7:18:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/514e8c30-b490-35eb-bc79-044e774e3d39.roa
Signing time:             Fri 20 May 2022 19:24:07 +0000
ROA not before:           Fri 20 May 2022 19:24:07 +0000
ROA not after:            Thu 22 Aug 2024 04:00:00 +0000
asID:                     395332
IP address blocks:        2602:fb69::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f8:a5:13:73:ad:8d:03:dc:95:77:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc2b08f9-b3dc-4cf6-870c-a730b860c491
        Validity
            Not Before: May 20 19:24:07 2022 GMT
            Not After : Aug 22 04:00:00 2024 GMT
        Subject: CN=8e8d9a8a-be69-48f6-b376-4383e4e2f3be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8e:2c:0f:93:d0:d5:65:dd:7a:bd:98:d7:f8:
                    fb:94:21:4b:ab:2d:64:74:ba:f7:2f:81:bd:49:ce:
                    08:6d:4e:e9:17:56:4f:fc:8e:c4:f7:40:5f:da:5c:
                    f9:0a:6b:77:4f:0e:bf:bd:d4:d9:b2:b7:cc:3a:dc:
                    e7:a2:cf:61:7a:46:66:2e:b9:b3:53:1c:f8:3b:01:
                    d8:f2:1a:0d:de:24:1f:61:3a:23:c1:2f:b2:c2:7a:
                    93:52:ff:3c:84:24:f1:e4:64:63:06:66:94:8f:08:
                    a2:0c:21:45:5a:bc:ec:20:f8:8e:06:ef:29:b2:d8:
                    d9:fc:18:05:3a:95:b9:f8:a9:6f:e8:60:d6:eb:74:
                    af:f5:37:f2:1a:02:42:8b:92:5b:ca:27:6d:7d:f3:
                    89:96:5b:d3:15:3d:dc:2c:b1:ea:3c:54:09:80:07:
                    b3:eb:11:7d:1a:db:e1:c2:cf:fa:5d:9c:77:6e:8a:
                    02:d6:56:ec:06:1c:fd:55:3a:d8:50:98:69:5d:96:
                    c7:e4:19:3b:e4:79:a5:5e:60:70:7c:c7:47:96:56:
                    79:93:d0:51:23:3f:11:bf:e1:df:a3:56:bd:f3:9f:
                    37:7d:3c:00:01:14:e6:dd:57:f8:1f:fb:db:81:39:
                    aa:a7:ac:ad:8c:82:84:96:b1:a8:4e:4e:91:75:b2:
                    ac:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CB:95:C4:1A:EE:8D:07:D6:97:AE:6E:D0:94:73:B7:46:91:CC:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/514e8c30-b490-35eb-bc79-044e774e3d39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.crl

            X509v3 Authority Key Identifier:
                keyid:E1:1F:BF:28:EA:F0:4B:06:8B:E0:2B:51:CA:BD:60:3B:8D:C7:18:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb69::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:bb:cc:d0:a5:12:e3:31:a1:0e:b4:93:09:cd:b4:c0:b2:06:
         16:7c:fb:20:8e:ac:06:dd:f6:f4:e6:3c:3c:3f:76:05:36:ac:
         25:7a:98:72:c9:70:45:23:ea:32:b1:d1:e5:65:fb:8a:13:29:
         2f:26:a4:84:a0:fe:2c:28:54:95:2a:a5:2e:90:56:4a:82:93:
         68:87:70:95:58:33:ff:e2:87:44:fe:11:13:27:9e:a8:ee:c4:
         c6:5e:38:0a:8e:85:5c:83:9e:8d:d3:aa:10:79:d8:f7:96:03:
         52:c4:c5:75:4a:3b:65:4b:77:0a:c9:0b:db:94:d2:47:f0:28:
         b2:56:d6:61:c0:d7:e1:97:48:20:40:83:76:2c:4c:e0:52:a7:
         be:f0:79:19:58:a5:82:07:b7:3b:77:f9:72:9e:ed:49:59:66:
         f4:1c:04:fe:d0:7a:1b:1a:e2:65:00:2b:6c:07:84:d3:85:a1:
         ef:ee:a9:7b:67:75:c4:5e:34:f2:3a:e4:b5:ed:db:b2:49:06:
         84:80:ce:16:7b:f6:eb:1a:5f:6e:93:8a:88:6b:a4:85:b0:78:
         c6:5c:84:af:44:02:a8:e7:c0:48:bb:7c:0c:9d:12:8a:51:6b:
         6b:ca:81:31:10:93:50:aa:36:5d:4e:2b:93:dd:32:46:64:8e:
         96:31:51:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----