Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b5758e7-ca1b-3556-b2ad-fe9f3e781693.roa
File:                     2b5758e7-ca1b-3556-b2ad-fe9f3e781693.roa (raw, json)
Hash identifier:          qhFCKJgiI3vzZnzzcdaaKIC+dI6hH9l9Q1gZ5r+hQt8=
Subject key identifier:   47:82:11:75:59:BF:2F:8D:B4:80:28:70:DB:48:42:B7:21:84:EE:40
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858434D63CC4ED60DBB319B48F400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b5758e7-ca1b-3556-b2ad-fe9f3e781693.roa
Signing time:             Fri 22 Sep 2023 01:30:31 +0000
ROA not before:           Fri 22 Sep 2023 01:30:31 +0000
ROA not after:            Thu 21 Dec 2023 02:30:31 +0000
asID:                     327872
IP address blocks:        2001:470:112::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:4d:63:cc:4e:d6:0d:bb:31:9b:48:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 22 01:30:31 2023 GMT
            Not After : Dec 21 02:30:31 2023 GMT
        Subject: CN=51c6cdca-9d23-4a1d-a966-141b3c05920f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5a:23:20:61:64:f7:b1:99:bc:ef:4b:97:2a:
                    3d:85:f5:33:ff:56:54:46:2c:f8:ab:bb:07:e3:88:
                    bc:5b:9b:fe:32:ed:7e:dd:48:4a:53:91:e8:60:b5:
                    67:33:6c:94:64:3a:e5:38:17:db:fb:4b:c2:ce:1e:
                    26:46:02:f7:8c:ec:4f:31:a1:6f:95:81:f9:e8:45:
                    e8:76:2e:20:ad:44:bc:1d:1d:74:ba:ae:bb:da:2b:
                    85:cf:8d:9e:c6:9c:55:2b:9c:b3:5f:18:3d:71:4f:
                    aa:f6:8c:98:94:88:0b:87:d8:51:7c:91:62:00:44:
                    ac:c0:10:0f:f6:bb:8a:f2:ae:7e:28:7d:b3:a5:bc:
                    17:0f:2e:c4:d9:68:7d:3c:9a:b3:f9:3e:4d:a7:65:
                    1b:e7:e0:ef:4b:b2:da:2a:45:7a:88:b5:f1:5a:2d:
                    8f:ab:fa:74:8d:ce:aa:ed:79:4b:5b:b8:4d:84:31:
                    c9:f8:88:94:41:53:60:25:1d:9b:ba:f8:06:fa:6d:
                    b7:f1:22:66:a5:b1:98:70:cb:84:ad:b0:b2:72:c5:
                    be:73:1a:8a:5b:b0:68:e8:c8:66:b4:38:12:f0:34:
                    12:bb:a6:23:41:25:ef:0b:18:d4:b5:0f:13:f1:29:
                    e2:03:0e:8e:65:95:33:04:2e:65:a3:58:b0:9a:9e:
                    d7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:82:11:75:59:BF:2F:8D:B4:80:28:70:DB:48:42:B7:21:84:EE:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b5758e7-ca1b-3556-b2ad-fe9f3e781693.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:112::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:99:9b:6f:21:a0:c3:6e:69:ac:57:9f:1b:05:7c:d7:92:13:
         6f:2c:e2:76:64:e1:08:b2:13:ee:b0:82:01:c4:de:a5:ff:fe:
         35:4e:18:ff:08:45:e3:ed:db:c4:92:03:93:0b:d5:33:70:a1:
         99:19:64:ab:f8:92:68:e5:7e:83:e2:2b:96:98:6a:ad:92:02:
         d8:e7:ba:82:22:ef:4b:bf:70:e7:ce:8d:f5:76:34:d0:8a:f7:
         1e:72:82:f7:fb:06:d0:ce:64:ac:65:85:74:fb:fb:96:51:aa:
         0a:b9:b3:45:bf:e3:ae:75:42:f7:16:d5:86:35:86:3c:d9:e9:
         31:f5:04:7f:e5:39:e3:6d:c7:5c:59:70:c3:b2:50:24:b1:1f:
         8f:e7:48:89:c6:f8:ec:ff:0a:d1:1a:9f:2a:74:8f:31:d7:e2:
         04:b3:d6:36:c8:56:6d:fd:47:68:24:5f:f0:34:6c:a6:68:0e:
         a3:ed:da:4c:74:f6:08:25:4d:26:24:70:45:cd:fa:64:7d:b8:
         bd:48:60:1a:c5:33:20:cd:30:d4:dd:c6:9a:0f:f3:36:46:da:
         2f:a4:7e:af:1a:0a:0a:6e:08:e4:9d:11:ef:a5:8d:a2:11:28:
         15:60:f2:69:05:74:31:8b:ee:4c:d4:fe:74:0d:1c:8f:8c:65:
         14:91:bd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----