Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/546900d9-0d67-3213-876a-d9fed6ce28ee.roa
File:                     546900d9-0d67-3213-876a-d9fed6ce28ee.roa (raw, json)
Hash identifier:          hLJOZZqS8Vwvd3aiurWgPuiXtT8owoD/FdnGKsYTFiA=
Subject key identifier:   2A:5D:B4:A2:6D:A4:11:C4:8B:9F:BE:D4:B3:03:AF:52:89:48:62:17
Certificate issuer:       /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial:       010D0C9F43285840FFC27E49C83A1BB3B3888E00
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/546900d9-0d67-3213-876a-d9fed6ce28ee.roa
Signing time:             Wed 22 Feb 2023 17:04:07 +0000
ROA not before:           Wed 22 Feb 2023 17:04:07 +0000
ROA not after:            Tue 27 May 2025 04:00:00 +0000
asID:                     21559
IP address blocks:        2604:1cc0::/32 maxlen: 48
                          2605:5d40::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:ff:c2:7e:49:c8:3a:1b:b3:b3:88:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
        Validity
            Not Before: Feb 22 17:04:07 2023 GMT
            Not After : May 27 04:00:00 2025 GMT
        Subject: CN=e39e69b8-f81a-45f2-b146-fb9559ca348a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3d:37:8c:4e:bc:28:71:09:fa:01:af:cd:3c:
                    45:25:8f:76:e2:5a:bb:22:55:a3:5a:16:b7:88:1b:
                    aa:6a:0c:e3:ce:eb:ce:d6:22:33:cf:7e:a8:14:54:
                    7e:ea:e9:e1:ae:b6:bc:04:63:8a:4f:cb:6c:16:a4:
                    72:35:c2:70:d6:53:c7:14:8d:0b:cb:68:ee:0f:6e:
                    84:b5:e8:01:05:26:99:0e:5f:77:b2:fb:f1:17:a2:
                    33:62:32:6a:da:24:47:be:b4:8b:00:13:21:ce:a3:
                    28:e2:66:6d:25:72:96:2d:ba:f1:30:5c:ea:9a:29:
                    ca:b5:83:41:8c:f5:3a:6c:95:2d:8c:d8:23:40:f8:
                    9f:aa:1b:4e:7b:6b:a2:cb:f3:d3:26:df:a0:e7:2b:
                    b3:5b:e7:66:5f:22:56:86:27:65:18:8c:aa:80:38:
                    fa:bf:26:4e:aa:5c:d9:2d:bd:ca:28:7e:ee:3c:04:
                    fe:09:a0:02:ef:70:a5:82:a3:ca:5b:a1:dc:06:5d:
                    71:20:af:e6:47:5b:d8:40:d8:c0:f8:23:3e:54:c8:
                    17:f4:a1:e5:ef:b7:66:f4:9a:85:82:8b:c0:33:eb:
                    fa:b1:d6:b0:43:b9:90:de:80:4a:3d:0f:68:28:1e:
                    02:8b:b8:6f:85:9b:5f:86:74:b9:8c:2a:d8:48:56:
                    5d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:5D:B4:A2:6D:A4:11:C4:8B:9F:BE:D4:B3:03:AF:52:89:48:62:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/546900d9-0d67-3213-876a-d9fed6ce28ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl

            X509v3 Authority Key Identifier:
                keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1cc0::/32
                  2605:5d40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:b2:ae:fe:75:d0:6a:db:73:84:1a:51:10:3a:54:2a:c5:1c:
         58:c1:3e:b4:0e:ec:10:6d:b3:64:43:16:04:62:27:49:69:ad:
         55:e2:83:b3:4c:83:3c:c0:27:f9:1d:6b:91:4c:42:71:f4:66:
         2e:af:d7:2a:7c:04:88:ad:aa:ff:d6:f8:4b:91:f8:96:c9:50:
         9e:be:76:4d:fe:21:bb:81:e6:c4:bc:47:42:98:42:0b:9d:95:
         fc:e4:46:13:3e:4c:59:22:2e:2d:e8:5a:b9:f8:2a:cc:3a:98:
         77:fc:b8:53:6c:b5:48:cc:50:81:4d:63:8b:31:17:ee:14:d2:
         ce:70:46:07:31:e5:86:d6:f9:1f:97:59:3c:34:ca:87:1b:ec:
         64:c1:76:98:c2:46:36:af:29:78:da:83:bf:89:23:64:91:79:
         77:c1:dc:d1:5b:70:4f:03:e3:6e:46:fd:f4:15:bd:0a:c8:ec:
         9f:a2:58:81:51:32:26:75:ae:a2:1b:e7:83:ee:d4:55:76:eb:
         73:d7:de:ab:1a:9f:f2:14:8a:53:f3:57:59:b2:fb:8f:2f:25:
         26:e3:fa:57:fa:bb:32:b3:dd:aa:00:0d:9b:20:25:6d:32:6c:
         f5:7f:b0:6c:15:0c:40:f0:46:57:78:7e:22:e9:38:ce:1a:58:
         b9:71:78:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----