Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/a0e2de45-be50-3d42-95ca-68f9af8585f8.roa
File:                     a0e2de45-be50-3d42-95ca-68f9af8585f8.roa (raw, json)
Hash identifier:          UhgKtwb++OcnhrtwQuTJB1jo+N+5Qo0FJIY0l5Lv2yw=
Subject key identifier:   03:A9:9D:A0:93:53:5F:A6:C1:9D:16:2A:5A:AD:3D:F8:9B:EF:B0:33
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F4328583CB800A9E08FCD441225BA8000
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/a0e2de45-be50-3d42-95ca-68f9af8585f8.roa
Signing time:             Wed 06 Jan 2021 05:00:00 +0000
ROA not before:           Wed 06 Jan 2021 05:00:00 +0000
ROA not after:            Tue 30 Apr 2024 04:00:00 +0000
asID:                     14445
IP address blocks:        2606:18c0:f::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:b8:00:a9:e0:8f:cd:44:12:25:ba:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Jan  6 05:00:00 2021 GMT
            Not After : Apr 30 04:00:00 2024 GMT
        Subject: CN=01e69de3-8201-4ed3-813e-aa1b36f070fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:af:4c:31:e4:04:31:d9:e8:54:54:50:1e:50:
                    5b:3c:ad:47:e1:d3:ce:49:72:a3:8c:91:eb:36:6f:
                    3e:58:b3:6e:98:e3:e1:61:b3:75:bc:92:56:9d:a9:
                    0d:69:2b:db:73:3a:66:2c:75:fc:f4:25:da:3c:52:
                    e8:5b:84:97:96:ef:b8:a5:30:ed:b4:3b:57:ef:dd:
                    09:18:fc:48:c1:81:e3:a7:a3:10:0d:f7:0f:f4:6b:
                    10:17:bd:56:a8:1c:c6:18:f0:d3:68:9d:64:19:8a:
                    dd:ce:2e:50:88:e2:e8:1f:cd:07:c2:6b:a4:ca:f5:
                    53:55:a7:bd:8e:7f:8e:3c:a2:ec:b6:0f:2d:59:67:
                    32:4c:00:15:39:69:40:dd:ca:eb:ae:dd:66:81:c8:
                    b1:31:81:c4:fc:ba:90:79:d1:20:6f:a9:40:58:99:
                    9d:07:6c:61:78:04:0e:a7:63:4a:ec:c3:45:b5:91:
                    53:02:ba:b6:15:94:9d:71:63:92:45:53:3e:3c:d9:
                    d9:1c:87:51:0f:11:35:da:fc:78:24:f9:89:58:43:
                    ae:cc:13:25:48:9b:f2:24:f9:d2:8d:61:51:8b:59:
                    4c:f8:4a:0c:10:5f:76:8c:ea:0b:93:14:f8:89:11:
                    5b:62:26:ce:84:b2:65:34:c7:6f:ee:c0:fe:5f:63:
                    ba:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A9:9D:A0:93:53:5F:A6:C1:9D:16:2A:5A:AD:3D:F8:9B:EF:B0:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/a0e2de45-be50-3d42-95ca-68f9af8585f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:18c0:f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:f1:6b:38:b1:09:d5:e2:3f:22:b3:53:02:80:97:13:b8:2d:
         7e:03:ec:aa:b9:aa:61:80:fe:f7:99:66:4f:a9:47:15:65:c8:
         4a:63:cd:bf:94:98:7c:d7:c8:5c:69:46:8c:f1:4d:bd:ef:cd:
         9f:86:f8:6f:70:f8:88:27:6c:e0:e1:44:f7:80:a2:a5:e3:84:
         a6:f5:d2:22:de:ae:20:2d:8c:b2:40:b2:87:be:d1:91:9c:10:
         98:0d:01:a0:87:4c:85:7a:13:f4:8d:53:27:c0:e4:41:8d:65:
         75:bf:14:a9:0d:67:7e:94:7a:d0:a6:fc:8a:06:a4:02:a7:e6:
         5f:76:d2:ba:51:e5:0b:d3:96:ae:dd:82:7d:2f:4d:85:72:71:
         7e:bb:bf:8c:e5:f8:eb:34:b5:22:f4:29:d5:3a:0d:08:a7:21:
         9c:83:94:1f:90:5f:fc:7a:db:a3:ca:c8:73:66:e6:87:77:cf:
         34:d7:ef:be:72:25:a1:01:06:1f:6b:16:f5:b1:76:eb:1c:11:
         8c:02:56:40:0c:dd:41:47:1b:ce:ad:29:21:ba:4e:d4:3b:1b:
         9a:3d:2a:28:7f:64:46:01:d9:ef:37:08:f5:31:4e:56:9a:4d:
         af:e2:c9:89:f6:68:47:02:91:72:2e:c5:9b:d3:e7:7f:a5:3f:
         c3:95:72:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----