Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/23b41d0a-5aaa-3065-a063-3417351d5f73.roa
File:                     23b41d0a-5aaa-3065-a063-3417351d5f73.roa (raw, json)
Hash identifier:          AcjqodLlKTv4nYlYZxx/BrGDKtTixnkqGn932emJ8PI=
Subject key identifier:   03:81:F4:E2:0A:C9:C3:A1:E7:A0:6F:43:49:73:B3:EE:98:CF:45:FE
Certificate issuer:       /CN=56b96151-8a90-41ad-aefc-1091ab214a92
Certificate serial:       010D0C9F432858435F83B46D5F657D6C578B4480
Authority key identifier: DC:FC:BD:81:79:AC:17:F1:5F:B1:DD:0D:72:15:FA:F6:4F:1B:95:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/23b41d0a-5aaa-3065-a063-3417351d5f73.roa
Signing time:             Thu 28 Sep 2023 13:19:22 +0000
ROA not before:           Thu 28 Sep 2023 13:19:22 +0000
ROA not after:            Wed 27 Dec 2023 14:19:22 +0000
asID:                     14618
IP address blocks:        2607:6d40::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:5f:83:b4:6d:5f:65:7d:6c:57:8b:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b96151-8a90-41ad-aefc-1091ab214a92
        Validity
            Not Before: Sep 28 13:19:22 2023 GMT
            Not After : Dec 27 14:19:22 2023 GMT
        Subject: CN=15d61faf-ad98-4914-a725-e6e06ed389f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:65:42:e8:ad:9e:c0:7b:1b:55:57:88:ae:0f:
                    68:2a:bb:9c:54:4e:bb:af:fb:8c:fd:48:61:91:6d:
                    03:67:16:64:d7:c4:06:81:0e:da:d1:a6:92:38:62:
                    2c:5a:be:33:16:f0:da:b1:be:20:24:e1:3f:a1:5a:
                    82:db:ee:30:ba:e3:9e:9f:d9:45:86:6d:2e:d3:3b:
                    a5:24:5d:7f:96:53:a7:80:f8:30:00:9a:bb:05:b9:
                    01:73:5b:b7:81:40:1a:09:0a:a8:24:14:33:85:a1:
                    43:d5:dc:7c:f4:67:9a:5d:7f:87:95:6a:40:de:0c:
                    e1:b4:57:92:03:e6:9f:74:bd:2e:20:36:de:29:35:
                    55:ce:b6:d5:4d:b2:0d:e7:53:54:1d:67:8f:44:f2:
                    06:bf:a5:dc:62:5d:fe:31:38:2f:54:ab:45:80:3b:
                    6f:65:34:0d:47:f6:b2:b9:b5:1e:04:8e:8f:88:6a:
                    8c:22:c9:56:28:35:af:8c:73:52:f4:05:7d:48:6b:
                    af:29:ef:81:5f:fc:1d:31:a8:19:b8:01:32:b1:86:
                    9b:21:5c:4a:ac:ad:5f:88:89:cb:8e:ac:bc:c0:ab:
                    5e:e8:ab:13:4e:88:4e:64:d9:64:98:d0:b2:9c:84:
                    bb:b9:87:9c:45:05:81:9b:f0:e9:e2:a8:09:ab:ee:
                    c5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:81:F4:E2:0A:C9:C3:A1:E7:A0:6F:43:49:73:B3:EE:98:CF:45:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/23b41d0a-5aaa-3065-a063-3417351d5f73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/56b96151-8a90-41ad-aefc-1091ab214a92.crl

            X509v3 Authority Key Identifier:
                keyid:DC:FC:BD:81:79:AC:17:F1:5F:B1:DD:0D:72:15:FA:F6:4F:1B:95:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6d40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:35:83:37:6a:8a:d9:d4:a9:6d:3b:1d:0e:ed:4d:61:14:f0:
         a2:37:df:5c:d0:6b:87:43:2a:5a:7e:5d:86:ce:d5:47:7a:0c:
         00:23:a0:14:0c:52:5c:77:3b:64:42:25:21:09:41:8b:98:b7:
         9b:f6:34:65:b4:4f:38:e7:3a:9b:64:c1:e3:e0:b0:67:ca:44:
         e4:e1:74:3b:db:2d:a7:92:e4:29:8e:98:7f:c1:34:06:fe:86:
         88:df:a6:d0:1f:85:dc:15:fa:27:92:34:d8:e8:fa:10:18:9e:
         ac:c2:ca:0f:1a:27:52:31:58:76:85:be:6b:bd:9a:bd:9a:44:
         ab:d3:2a:21:e1:9c:d7:e9:51:0e:9a:72:8a:e6:63:b1:d7:bc:
         2e:6c:c2:c5:d8:6c:e6:49:00:48:81:45:a1:72:ff:37:a9:54:
         1a:b1:9d:58:1f:20:c8:fc:00:54:18:92:51:03:b8:da:bb:fa:
         1e:69:a3:b7:2c:6c:d3:7d:44:0c:8b:c1:1d:7d:a5:1a:b7:f0:
         dc:cb:1f:9b:f6:80:40:54:be:d4:15:25:e9:7f:1d:75:2e:e3:
         43:be:25:1b:88:0e:82:3f:f9:b8:c6:d5:fd:8e:75:22:10:5f:
         67:11:f4:15:d2:75:35:15:f8:2e:6d:94:38:df:67:c4:87:ae:
         6c:3e:37:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----