Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/456bb2e2-8fb0-3738-acce-5defeaeaa19b.roa
File:                     456bb2e2-8fb0-3738-acce-5defeaeaa19b.roa (raw, json)
Hash identifier:          Gm5ygO2A1a7Sn9RvwnIRvcNTfYRgsE/Ct7Tozx5zJu4=
Subject key identifier:   FB:48:45:F5:0E:AC:9F:96:7C:E5:DF:FA:91:62:C8:73:DB:C1:CF:3D
Certificate issuer:       /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7
Certificate serial:       010D0C9F4328583DEF8CF3B0A093C3C0CE9B9F00
Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/456bb2e2-8fb0-3738-acce-5defeaeaa19b.roa
Signing time:             Tue 17 May 2022 18:28:55 +0000
ROA not before:           Tue 17 May 2022 18:28:55 +0000
ROA not after:            Mon 19 Aug 2024 04:00:00 +0000
asID:                     400679
IP address blocks:        2602:fb82::/36 maxlen: 48
                          2602:fb82::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ef:8c:f3:b0:a0:93:c3:c0:ce:9b:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7
        Validity
            Not Before: May 17 18:28:55 2022 GMT
            Not After : Aug 19 04:00:00 2024 GMT
        Subject: CN=0af8b121-fcf5-43f7-9949-584e0a47fe38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:78:45:03:9e:49:4f:0e:97:82:ca:0c:cb:95:
                    28:e1:6b:52:c3:38:f6:2e:e4:03:4a:49:a6:ac:5b:
                    95:82:7b:93:d0:70:2b:47:18:aa:59:f4:be:7a:fc:
                    28:3e:cd:92:9c:70:a2:b7:95:1c:26:16:eb:79:50:
                    bb:3a:ca:7c:e9:85:33:32:7d:73:b3:50:ee:f8:61:
                    66:a5:65:45:de:ab:24:53:53:12:cd:67:b9:99:59:
                    00:76:5c:05:dd:dc:73:51:1d:6d:2b:36:50:bb:de:
                    58:61:52:73:bb:66:c9:ff:27:f7:72:2c:c9:26:5a:
                    03:0f:73:f5:49:84:21:b1:af:3f:2b:55:dd:77:53:
                    29:8b:ba:96:fb:88:6e:ba:04:bc:ad:98:75:12:4d:
                    48:4b:0b:56:aa:33:a3:83:23:38:e0:b2:34:8e:c7:
                    ee:fe:4a:6d:ca:69:35:73:03:85:2e:23:7a:3c:a0:
                    75:47:90:5a:d2:a2:29:c9:d0:8e:2c:77:0b:93:14:
                    9f:45:35:ca:af:ed:74:41:fc:6d:0e:19:af:65:c1:
                    0d:8f:8b:6a:c9:e5:31:71:2a:00:5b:3c:bc:1a:bf:
                    6a:58:72:95:41:a1:22:03:85:71:d6:35:a0:e6:5d:
                    5d:fe:2d:ea:f9:7f:fd:e9:95:d7:ca:39:97:87:a2:
                    5c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:48:45:F5:0E:AC:9F:96:7C:E5:DF:FA:91:62:C8:73:DB:C1:CF:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/456bb2e2-8fb0-3738-acce-5defeaeaa19b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl

            X509v3 Authority Key Identifier:
                keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb82::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:fb:ad:f2:8b:5f:52:45:1d:27:a1:b1:dd:fb:3e:94:99:b8:
         4f:33:7d:ca:e3:b8:1a:4d:a8:6c:e7:ee:98:a3:19:86:4e:6b:
         7a:b2:6c:ab:80:fc:2c:dc:b4:c1:62:7c:5c:d4:83:a1:0a:5f:
         3d:22:c0:e8:c0:14:47:5b:b4:55:61:a7:43:36:4f:36:bd:d5:
         65:3a:8f:d8:3b:46:5f:63:72:62:3b:63:de:49:c5:b9:73:b8:
         ce:51:0d:f4:d0:12:f9:fb:f6:12:ad:30:38:1b:0e:29:da:ac:
         a4:b7:1c:62:07:fc:c4:4e:cc:5c:74:8e:85:ef:bc:dc:b2:7c:
         ea:b2:4a:a8:ea:e9:a8:4d:bb:8d:a4:14:34:6a:ba:ce:ef:8b:
         d6:df:3a:56:59:91:16:72:ba:35:80:8b:30:ed:9e:2a:08:59:
         80:25:ff:59:a3:cc:7b:61:d1:88:a9:c7:dd:f7:9f:a8:97:27:
         f9:cf:c5:3e:72:9e:8c:a1:14:16:a3:47:e9:a2:63:e6:4c:c0:
         35:58:e4:d5:23:f4:f7:eb:89:9e:a7:b5:52:a2:ba:17:c8:5d:
         2b:c9:8b:22:fd:97:78:d3:54:ce:b1:41:b8:ef:4d:2c:df:2a:
         cf:cf:31:82:8d:2e:93:16:15:7f:91:50:fb:08:fa:57:4f:50:
         06:58:42:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----