Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/084fb721-f6e5-345f-b188-14f08ada124a.roa
File:                     084fb721-f6e5-345f-b188-14f08ada124a.roa (raw, json)
Hash identifier:          W5vnqVRxLLjDFBAjXSDrKGEQSJ1aiG2C7k0K20LH/44=
Subject key identifier:   BB:92:E5:A1:D7:05:81:8B:96:D1:6D:74:44:7D:EA:2A:A5:AA:F1:A1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A50AF41B069E4D45033C080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/084fb721-f6e5-345f-b188-14f08ada124a.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     140052
IP address blocks:        2001:470:136::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:50:af:41:b0:69:e4:d4:50:33:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=44e3f21a-bfd2-498e-9aef-a6e86051f6a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:01:70:2e:74:e7:71:66:00:97:c2:a9:ce:87:
                    d5:fc:0b:10:46:08:43:99:91:28:fb:98:41:f3:d3:
                    e6:fe:c0:43:f0:0e:e5:7b:c1:02:ba:de:82:30:aa:
                    6d:15:96:12:af:2c:7f:79:b3:16:b6:26:1e:55:28:
                    1d:76:7e:cd:97:2f:91:bc:2d:ea:3c:ee:fb:fd:40:
                    4b:c1:a2:b1:28:a6:ec:60:6b:e3:8a:66:b3:2e:7a:
                    d8:3d:05:86:9f:b2:40:09:15:1d:5d:35:8a:47:49:
                    e8:4d:9e:7c:8d:d2:15:14:1e:d7:0e:5f:41:2f:e5:
                    5f:9c:73:0e:5d:7a:8b:0c:6a:57:c4:3a:f3:60:ad:
                    97:41:e5:ed:47:29:38:b9:e5:6c:da:44:87:94:2f:
                    2a:c7:17:fb:d2:9c:c9:2d:07:16:9a:37:44:28:79:
                    68:fd:72:a6:dd:ab:94:4a:46:b1:21:e5:67:63:40:
                    f0:e9:ee:79:40:77:b6:6f:53:1d:e3:3c:f7:cb:7d:
                    1d:0d:a4:43:49:bf:15:00:60:02:3b:e5:3f:4a:be:
                    ed:b2:ac:f6:b3:66:37:50:38:cf:f6:9b:03:f3:81:
                    ac:a5:1f:0d:b4:15:e6:77:a0:bd:e5:85:42:2f:10:
                    dc:62:bb:91:bb:51:b3:d2:5c:6b:2b:b4:8e:93:fc:
                    b8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:92:E5:A1:D7:05:81:8B:96:D1:6D:74:44:7D:EA:2A:A5:AA:F1:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/084fb721-f6e5-345f-b188-14f08ada124a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:136::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:f5:25:0f:a0:53:91:93:6e:d1:0f:79:d7:a1:f7:0d:5c:e1:
         61:40:c4:e8:3a:7a:99:2a:6e:84:d8:cb:6a:04:8d:fd:ad:40:
         74:34:93:e0:38:22:8a:41:a4:c7:5f:c2:da:58:57:32:b8:87:
         de:c4:70:e7:ad:b2:de:70:20:1e:c6:8c:a7:89:37:68:ca:55:
         6d:b0:c6:f3:55:a9:8b:47:26:4d:0f:07:d9:54:4b:02:3b:f3:
         da:69:7c:c5:e7:1a:bc:71:75:41:05:9f:9d:6a:69:95:06:ce:
         47:f3:f5:ab:72:d5:3a:1b:50:cd:f7:82:bc:f3:01:ec:e9:7c:
         37:42:a4:f9:d4:8f:27:d9:19:11:6f:4d:0c:26:14:03:a8:06:
         10:18:06:18:0b:df:1b:04:4f:8e:cc:ec:ec:95:9f:38:42:88:
         76:06:2f:fd:2e:cd:e0:98:91:e6:d8:da:97:e0:8b:1a:7a:84:
         3c:cb:ac:f6:3d:25:94:1b:75:4e:3a:62:54:85:3a:9f:04:5f:
         91:7b:1d:0d:1f:00:5a:1a:f7:3c:09:47:50:15:4b:80:e1:51:
         af:04:27:f4:a9:e5:c1:56:e4:9d:10:ee:35:c0:de:d1:8e:8e:
         ef:35:f0:75:77:b8:28:cc:89:19:3e:bc:af:11:56:54:aa:ea:
         4a:9a:1f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----