Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/c5d1d31b-0be6-3364-b9f9-b9af15e3a5af.roa
File:                     c5d1d31b-0be6-3364-b9f9-b9af15e3a5af.roa (raw, json)
Hash identifier:          yrkvf12i4hYNBGjrQpmukCdRUts0bFGXl6lyIa7pcWY=
Subject key identifier:   15:B6:D3:54:AB:C4:46:6F:47:59:D1:CB:B7:FA:AD:04:CF:32:2D:AB
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F4328583D39B1F0E6416A030D5619E200
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/c5d1d31b-0be6-3364-b9f9-b9af15e3a5af.roa
Signing time:             Wed 06 Jan 2021 05:00:00 +0000
ROA not before:           Wed 06 Jan 2021 05:00:00 +0000
ROA not after:            Sat 15 Jun 2024 04:00:00 +0000
asID:                     14445
IP address blocks:        2606:18c0:d::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:39:b1:f0:e6:41:6a:03:0d:56:19:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Jan  6 05:00:00 2021 GMT
            Not After : Jun 15 04:00:00 2024 GMT
        Subject: CN=e098f036-7dd0-4fd7-b0b8-5ed23098add7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e5:1c:df:b4:7c:ec:9b:d6:a8:87:ad:9f:96:
                    7f:d2:0a:60:8d:fb:31:73:d0:1a:72:4e:12:e2:9f:
                    b6:18:5a:1e:21:a5:ff:3c:15:fc:9b:84:5d:dc:0f:
                    f5:2b:9d:73:28:81:73:61:56:ce:b1:3c:02:ac:f2:
                    a3:bd:70:57:17:7d:a2:e3:2b:29:72:fc:80:08:fe:
                    d7:07:df:91:87:83:d0:1c:7b:24:4d:45:f9:2b:7c:
                    16:a0:26:cd:ac:e1:71:61:87:f8:a5:1d:1d:10:a7:
                    52:48:52:de:59:ea:69:4a:22:13:d8:3b:7f:59:ba:
                    8d:aa:d3:54:12:21:df:12:71:a6:e1:dd:da:b6:f4:
                    a4:ce:31:98:2f:0c:5e:6c:96:7f:60:c3:4a:f7:7d:
                    a1:4e:32:2c:3c:cd:e2:e9:29:64:3a:77:f6:0f:e2:
                    fc:90:50:e2:e0:f7:60:a0:a2:55:88:a7:f2:62:6b:
                    62:87:58:3d:d4:d3:df:3b:c2:33:80:6d:66:7d:2d:
                    9e:12:6a:66:dd:15:7a:59:67:77:c1:bd:33:65:14:
                    ec:5e:d4:8c:93:27:e2:7a:96:a1:2e:b8:a4:de:69:
                    b2:ca:95:ff:06:a7:fa:85:47:29:48:04:27:c6:df:
                    71:fd:64:3e:7a:34:cb:aa:6e:0a:c3:ec:ac:62:a2:
                    93:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B6:D3:54:AB:C4:46:6F:47:59:D1:CB:B7:FA:AD:04:CF:32:2D:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/c5d1d31b-0be6-3364-b9f9-b9af15e3a5af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:18c0:d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:26:96:aa:1b:13:70:92:c8:d5:99:cb:3a:72:cf:e7:5b:5e:
         e9:62:d4:cb:33:63:7e:b3:be:31:5e:31:2b:63:05:d8:a8:c1:
         a9:de:f4:48:11:e3:df:b6:ea:15:c6:bb:8e:11:da:8b:9b:e4:
         85:f0:36:f9:f0:c9:c8:6e:ea:59:d6:e0:35:e8:02:ec:83:60:
         f1:02:ef:18:00:a6:ba:e2:a5:7a:c2:bb:9a:b3:80:40:a2:02:
         5a:0f:98:c4:03:11:dc:66:6b:94:34:25:f7:b8:59:aa:8b:1a:
         e6:16:40:5b:b3:09:ca:3c:a3:41:53:db:4d:72:0d:01:66:19:
         01:82:b4:6b:d0:01:31:0e:20:c1:15:57:50:a6:8b:af:29:34:
         71:74:44:92:18:59:19:9a:3d:45:a7:9c:0b:0a:d0:a8:f0:b3:
         83:b9:33:df:33:f7:1a:38:5c:78:96:4e:81:ee:40:b7:db:c9:
         b1:45:47:71:e8:2a:27:22:36:5a:c0:2a:19:4e:aa:2e:97:fc:
         00:11:67:c4:d5:76:c5:ad:99:6b:7c:01:d9:99:3e:06:b9:f9:
         8f:69:97:23:d1:00:b8:fe:49:d7:aa:71:59:58:b9:df:3b:7c:
         7e:c7:43:30:28:99:53:97:be:3f:e2:87:c0:db:0e:17:db:0a:
         61:b6:25:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----