Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/13f6aa3a-32b6-346f-a91c-99a0999341aa.roa
File:                     13f6aa3a-32b6-346f-a91c-99a0999341aa.roa (raw, json)
Hash identifier:          iNNsqmcafbY0OonLfjAMFrEc9oOSatdHFU4Ux9F34R8=
Subject key identifier:   97:D9:FE:EB:69:8C:C7:84:6E:6F:47:AE:09:EF:67:C4:EE:71:3C:6A
Certificate issuer:       /CN=9be8f23f-3a8c-4822-8996-e4131d203c13
Certificate serial:       010D0C9F4328584022E6340A1F1884553DC24780
Authority key identifier: 80:AD:19:B2:F1:CB:42:EA:DC:B3:3D:6C:5D:DE:3C:68:47:48:15:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/13f6aa3a-32b6-346f-a91c-99a0999341aa.roa
Signing time:             Sun 04 Dec 2022 12:00:00 +0000
ROA not before:           Sun 04 Dec 2022 12:00:00 +0000
ROA not after:            Fri 04 Dec 2026 05:00:00 +0000
asID:                     16509
IP address blocks:        2606:cd40:1000::/48 maxlen: 56

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:22:e6:34:0a:1f:18:84:55:3d:c2:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be8f23f-3a8c-4822-8996-e4131d203c13
        Validity
            Not Before: Dec  4 12:00:00 2022 GMT
            Not After : Dec  4 05:00:00 2026 GMT
        Subject: CN=b89116e2-03a0-4c61-8dac-788810d426c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cb:d8:fd:b5:14:18:7a:4b:41:08:d5:d2:59:
                    98:11:cb:aa:83:0c:06:e3:a0:5a:20:77:8c:62:18:
                    8b:50:f3:a0:0a:8d:0d:c5:6c:8e:af:4a:e8:d4:71:
                    0f:e0:6b:b8:f9:38:30:82:4b:d5:a4:5c:5c:91:2f:
                    6e:86:96:03:a0:1b:25:0d:52:47:0b:4e:7e:c2:02:
                    b0:fa:c6:d8:56:41:cd:86:59:5a:e7:2e:7e:23:20:
                    ad:a7:51:76:2b:8e:53:0f:c5:0c:c4:cb:84:d6:e6:
                    de:1f:04:35:eb:df:ea:7a:e4:5f:57:f5:cd:01:e2:
                    73:5f:5a:ff:fc:2b:5d:ad:87:bb:b3:d4:54:ff:d0:
                    21:12:d4:c2:20:02:a2:46:5f:91:7f:4e:b7:6a:7e:
                    c1:6b:cb:04:aa:3f:84:fc:5f:b6:36:79:8c:59:3d:
                    f3:8e:8c:b1:7f:6e:58:13:a9:63:60:d7:6b:c6:66:
                    47:07:93:36:01:d2:30:24:99:0a:52:b5:35:76:24:
                    46:ef:5a:6b:7a:99:84:c6:41:df:ac:4d:e8:66:ab:
                    8e:0a:18:46:56:64:a8:9b:ca:d2:dd:c2:a4:4f:07:
                    e1:9e:78:f3:41:6a:98:8f:0b:0b:74:56:7a:ef:fe:
                    ec:a8:b7:95:5d:9e:33:79:43:1a:da:a0:3e:46:b3:
                    16:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D9:FE:EB:69:8C:C7:84:6E:6F:47:AE:09:EF:67:C4:EE:71:3C:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/13f6aa3a-32b6-346f-a91c-99a0999341aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/9be8f23f-3a8c-4822-8996-e4131d203c13.crl

            X509v3 Authority Key Identifier:
                keyid:80:AD:19:B2:F1:CB:42:EA:DC:B3:3D:6C:5D:DE:3C:68:47:48:15:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:cd40:1000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:cf:bd:b2:f8:7c:fe:57:79:de:0c:a7:08:09:39:af:6b:fc:
         36:05:c5:85:8b:cd:ed:10:08:4e:bc:77:f4:c8:96:57:66:3a:
         6b:7d:29:4a:f3:ca:03:98:f1:83:4b:5e:be:99:95:31:c9:67:
         3d:df:2b:e9:1a:7a:bc:3c:e0:92:5c:e8:c0:f0:de:a3:32:cd:
         59:93:9e:3a:6b:b2:38:a4:26:c9:0e:8a:42:e6:f4:36:18:a1:
         1e:e0:f7:ab:bd:b3:7f:6b:d2:36:60:f7:07:fa:0c:48:b6:96:
         38:61:70:f2:c6:33:13:01:a8:9c:03:9d:ed:6a:ac:72:20:27:
         00:d4:10:6e:ea:54:46:13:cf:37:0d:ef:be:5e:10:13:bf:ba:
         44:b9:37:d0:17:ea:54:52:ff:b0:7a:94:0d:0d:ed:4e:01:1f:
         d8:8e:7a:90:df:73:fa:50:08:8f:9a:e8:80:ec:65:38:ae:bd:
         5a:c1:bc:06:81:70:d1:47:e0:07:ce:e0:60:ba:a3:dc:3f:de:
         37:cb:6b:ae:2c:35:fd:b9:38:83:2a:92:92:6c:0d:c9:4f:71:
         c5:1f:bb:b8:3d:e3:49:eb:4c:1f:f2:c6:de:8d:cf:89:40:c0:
         50:52:9a:de:15:8c:bf:30:bc:24:db:ee:73:82:88:dc:7c:99:
         56:2c:e9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----