Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/6f62d387-445c-3c0f-b006-158b3463bbda.roa
File:                     6f62d387-445c-3c0f-b006-158b3463bbda.roa (raw, json)
Hash identifier:          rF0scdfXWQ8OnociEDexdDqSx73bdaV5oSkNuuuSpWQ=
Subject key identifier:   C9:AD:8F:77:D6:26:DE:B5:75:D0:2E:B6:B4:64:2F:76:4D:3A:AA:26
Certificate issuer:       /CN=0cf53e58-6557-450f-832c-9baa5c99cca4
Certificate serial:       010D0C9F43285841FDA8CD22B49DE4157BF10FC0
Authority key identifier: 9D:12:7B:B3:E3:C3:F4:64:BC:E1:32:60:ED:35:87:5D:E7:FA:47:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/6f62d387-445c-3c0f-b006-158b3463bbda.roa
Signing time:             Wed 24 May 2023 19:17:57 +0000
ROA not before:           Wed 24 May 2023 19:17:57 +0000
ROA not after:            Tue 22 Aug 2023 19:17:57 +0000
asID:                     16509
IP address blocks:        2607:f250:e000::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:fd:a8:cd:22:b4:9d:e4:15:7b:f1:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cf53e58-6557-450f-832c-9baa5c99cca4
        Validity
            Not Before: May 24 19:17:57 2023 GMT
            Not After : Aug 22 19:17:57 2023 GMT
        Subject: CN=505527bc-5bdd-402e-a79a-a0933e5fc485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d5:89:5e:86:96:b8:41:5d:47:71:de:b6:40:
                    e9:be:f2:5d:f1:c8:d9:b1:a4:99:b2:46:07:66:65:
                    c3:54:dd:74:97:19:19:fe:b5:f7:f8:ab:5e:e2:52:
                    0f:c8:a4:81:0b:0f:b5:c9:6c:62:46:f0:8d:59:c5:
                    1b:d7:1f:fb:ba:8c:2b:eb:3a:f6:62:45:15:a6:a6:
                    24:58:e0:28:f7:66:55:91:a6:78:39:f3:c4:72:7b:
                    5e:de:f6:f0:e1:6d:bf:b3:d2:82:23:33:77:37:e4:
                    fe:6b:dd:4d:d6:c6:79:68:33:e4:49:5b:14:fe:ef:
                    e3:16:95:6a:e9:a7:b7:0a:b5:20:80:31:f8:ad:8a:
                    da:7a:b4:06:b1:ad:3e:91:08:38:03:46:e8:09:f9:
                    e4:56:dc:76:da:e6:5c:b1:b1:34:c3:35:2b:22:3e:
                    ab:88:11:54:b9:30:f1:95:2f:43:54:44:90:10:41:
                    a7:71:b0:72:e9:c8:6c:83:97:b1:21:2f:a4:1a:0d:
                    dc:df:83:52:f8:90:84:42:13:77:4e:37:f9:b7:28:
                    21:04:bb:a7:b9:e1:df:bb:79:da:ff:00:f9:c6:5b:
                    a7:2b:0d:ca:81:77:1b:6e:7b:7e:b5:72:bd:73:24:
                    c6:e4:57:88:f6:2f:5f:d4:f6:9a:88:69:4e:ca:a3:
                    f3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AD:8F:77:D6:26:DE:B5:75:D0:2E:B6:B4:64:2F:76:4D:3A:AA:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/6f62d387-445c-3c0f-b006-158b3463bbda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/0cf53e58-6557-450f-832c-9baa5c99cca4.crl

            X509v3 Authority Key Identifier:
                keyid:9D:12:7B:B3:E3:C3:F4:64:BC:E1:32:60:ED:35:87:5D:E7:FA:47:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f250:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:5d:92:93:fe:cb:8e:3f:ad:ea:c5:20:c4:c6:1e:29:1a:5c:
         5c:3b:bd:cf:27:c4:10:15:c7:58:a2:07:1b:a6:02:cd:3a:6c:
         ac:e6:02:ad:7f:2e:94:70:dd:81:cd:21:cd:f8:c0:3f:45:b5:
         f9:26:bf:1b:56:09:6b:68:1c:54:9c:b9:6c:63:a1:d6:55:51:
         53:04:59:a7:e0:15:21:c1:02:e1:57:16:2f:6f:dd:a4:d6:9e:
         42:61:1c:ed:a1:5d:b3:0a:4e:1d:e8:3b:8c:84:f3:7e:7f:b4:
         23:ad:24:b7:78:27:c9:67:82:61:83:42:7e:70:f0:cd:e6:2c:
         b5:bb:a5:53:9a:87:33:9c:9b:37:7e:9a:65:5b:fc:b7:4f:3b:
         63:62:be:74:3f:0a:d0:89:89:dc:e0:74:94:b0:7a:ed:1d:d3:
         cd:61:54:56:bd:54:03:9c:81:29:3a:e4:cc:46:8f:4c:ba:b2:
         f6:13:37:31:38:a6:32:73:df:97:fb:00:83:bd:dd:65:8f:0e:
         ee:0f:ba:74:db:a5:46:ec:f6:f3:3c:94:e5:00:f4:6e:4d:7a:
         a9:d6:8a:00:67:b7:85:97:7c:d4:1e:f7:77:58:b3:b5:6e:76:
         28:50:a4:e5:75:50:6d:bd:f5:53:18:b7:be:43:26:a8:7c:0a:
         9d:97:4c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----