Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/f19899b5-e084-379e-9116-a5d38b57a90e.roa
File:                     f19899b5-e084-379e-9116-a5d38b57a90e.roa (raw, json)
Hash identifier:          VpI/VffubOup7wPncivlVsbDuKEUmiIuRg6lBDrFtHE=
Subject key identifier:   4F:29:1E:ED:9A:7E:17:81:82:9E:40:05:A2:3F:05:B2:2F:05:AD:85
Certificate issuer:       /CN=239e2a72-9347-4316-9be7-20bdf6512711
Certificate serial:       010D0C9F432858426EA9FFDE151BADFCA40F9E80
Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/f19899b5-e084-379e-9116-a5d38b57a90e.roa
Signing time:             Tue 04 Jul 2023 06:46:42 +0000
ROA not before:           Tue 04 Jul 2023 06:46:42 +0000
ROA not after:            Mon 02 Oct 2023 06:46:42 +0000
asID:                     212144
IP address blocks:        2606:99c0::/32 maxlen: 32
                          2606:9940::/32 maxlen: 32
                          2606:9a40::/32 maxlen: 32
                          2606:9ac0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:6e:a9:ff:de:15:1b:ad:fc:a4:0f:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711
        Validity
            Not Before: Jul  4 06:46:42 2023 GMT
            Not After : Oct  2 06:46:42 2023 GMT
        Subject: CN=ca68380b-189e-449e-9b63-eb83f705e589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5b:7e:09:56:15:8c:2a:61:bc:60:74:5d:78:
                    39:3f:a9:5d:f3:49:8e:8f:57:93:61:39:d0:b8:c1:
                    c7:47:6f:fd:7d:7e:bd:3e:c4:e9:20:85:dc:13:40:
                    ba:ad:9b:5d:e9:a0:da:cb:75:38:43:61:3e:8f:07:
                    03:88:e8:07:f7:20:41:5a:f2:61:60:26:e7:c9:6a:
                    68:1d:b9:de:67:8c:8b:f7:2a:ad:54:60:8b:e5:f9:
                    b4:b7:d1:fa:8c:f7:ab:4d:71:65:91:fc:56:6f:6f:
                    e8:e7:11:9a:43:93:ad:8d:ee:b9:14:b2:8d:a7:b7:
                    ab:03:56:9a:7b:2e:c4:47:cb:93:5e:ff:ce:9c:ea:
                    d7:e8:f0:bc:d4:7f:35:f4:01:cc:23:26:6f:88:90:
                    50:1e:1b:a2:ba:7c:5a:fd:91:0b:47:86:d8:86:d0:
                    75:37:cb:9e:58:74:b7:d6:95:60:9a:e8:70:d4:ce:
                    69:4a:f2:eb:5a:f6:f9:85:d1:63:11:76:6b:17:6c:
                    51:d6:67:8f:22:4e:d0:42:58:9b:3b:6b:e3:b5:9b:
                    84:bc:70:f4:1b:13:46:4c:89:04:60:81:b0:f6:19:
                    48:93:df:70:40:5f:cc:ce:f0:80:df:60:da:0a:0e:
                    48:d0:9c:51:20:f1:85:f5:e8:a4:a1:0f:b0:39:2b:
                    6c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:29:1E:ED:9A:7E:17:81:82:9E:40:05:A2:3F:05:B2:2F:05:AD:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/f19899b5-e084-379e-9116-a5d38b57a90e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl

            X509v3 Authority Key Identifier:
                keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9940::/32
                  2606:99c0::/32
                  2606:9a40::/32
                  2606:9ac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:14:f9:50:d3:a7:4c:fb:f4:94:74:fa:79:d9:62:83:0b:ae:
         a1:b1:97:9f:a6:ba:6b:f6:2b:1e:2f:17:32:61:aa:33:0f:c1:
         24:bf:b2:b1:a0:07:cb:46:2e:11:72:85:bd:19:a9:2b:93:a5:
         27:56:42:35:c5:90:90:83:be:bd:50:c8:ba:d2:75:c6:f2:fb:
         b6:8c:f3:75:f1:38:88:27:f9:d0:53:0c:65:6c:b1:27:72:a0:
         a8:76:d7:c4:7a:58:1a:f1:ab:b5:94:19:a2:e1:ce:8f:b6:0c:
         0f:75:16:1b:ef:a5:4a:73:ac:71:40:a7:64:ea:51:28:90:3d:
         d0:7d:40:c8:2a:59:0a:dc:6a:a2:ce:2e:3d:b1:ef:9e:25:4b:
         91:b1:d7:45:32:06:a7:7e:94:5b:c4:a1:f5:01:42:d4:5e:c3:
         e1:94:79:80:80:13:b9:cd:a2:17:58:34:a7:9e:80:42:98:8f:
         7a:5e:76:43:49:da:0e:1b:2f:5c:0c:3b:69:d5:0f:ce:ac:86:
         f6:00:27:e5:90:76:33:6a:26:f2:3b:a9:31:0e:96:47:15:f7:
         74:60:2f:9d:f3:08:36:b8:42:f1:96:91:15:23:c5:54:fe:99:
         9a:3e:75:98:9a:f8:a0:a4:b0:b0:6b:d7:44:76:31:7b:ce:b3:
         bc:6e:c1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----