Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/486bb261-1bd5-3a33-a2ba-64e6ca091af3.roa
File:                     486bb261-1bd5-3a33-a2ba-64e6ca091af3.roa (raw, json)
Hash identifier:          3x9TJv3oK9FpujRscKjpRt1zhbBhiUk81Tns0l8xcn8=
Subject key identifier:   AA:2B:C8:75:21:E0:C5:75:D9:BC:A2:30:D9:23:DC:51:B6:EA:E5:9A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858436253F1FAA43D8750DDC26180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/486bb261-1bd5-3a33-a2ba-64e6ca091af3.roa
Signing time:             Fri 29 Sep 2023 13:30:33 +0000
ROA not before:           Fri 29 Sep 2023 13:30:33 +0000
ROA not after:            Thu 28 Dec 2023 14:30:33 +0000
asID:                     142125
IP address blocks:        2001:470:166::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:62:53:f1:fa:a4:3d:87:50:dd:c2:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 29 13:30:33 2023 GMT
            Not After : Dec 28 14:30:33 2023 GMT
        Subject: CN=e6cbf17f-30bb-4492-9624-bb09c79e50e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5d:a6:21:c7:52:7b:72:7b:53:b6:a9:c0:54:
                    52:98:4e:7c:83:a6:e5:63:ac:8a:67:48:d5:8d:68:
                    e9:ba:21:36:67:8c:fc:07:b6:4e:ad:3c:43:a0:3c:
                    8a:45:b8:1e:5d:62:96:8f:62:6f:4b:ac:d8:b4:e7:
                    da:5e:40:74:cd:c2:08:43:4a:56:07:d8:f4:a7:7b:
                    65:65:33:f5:69:8b:42:74:c3:50:fd:ab:e8:51:70:
                    18:6e:b7:44:f6:de:dc:59:25:ac:8d:b7:1f:4d:95:
                    77:12:56:95:5a:86:30:d6:5b:45:72:87:3b:11:82:
                    ae:6e:69:3a:9c:1a:36:9b:8f:6c:0b:0e:79:f1:5b:
                    73:3b:a9:8e:72:15:ff:ba:00:38:7a:d6:8f:b9:e4:
                    7b:fa:1f:72:e9:f0:90:cf:fa:14:a2:55:0b:70:70:
                    e2:b9:fd:85:0a:61:d2:16:df:2d:fd:62:aa:10:f5:
                    0a:e6:fc:2f:a2:4a:13:8f:f7:24:fb:59:1c:7e:b8:
                    64:80:b7:d5:25:cf:92:f8:9e:37:6c:42:81:8d:c3:
                    0c:59:4d:48:7f:da:8f:77:e4:71:d9:81:4d:b4:6c:
                    72:79:a2:75:e4:b6:a1:d2:9d:7d:9b:0e:65:2d:c5:
                    56:34:63:87:0c:ba:bb:40:b4:eb:5d:26:89:a2:7e:
                    d1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2B:C8:75:21:E0:C5:75:D9:BC:A2:30:D9:23:DC:51:B6:EA:E5:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/486bb261-1bd5-3a33-a2ba-64e6ca091af3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:166::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:12:db:12:0b:59:24:0e:36:a4:0b:7c:2e:8a:8d:30:e1:0c:
         83:04:9a:6c:bc:a3:df:ba:fa:9d:e5:09:05:2e:68:30:4b:cd:
         a5:a6:26:7e:ae:f1:ba:fd:69:ba:01:67:bb:bd:c1:a3:2b:d9:
         3f:9b:f7:32:8f:23:d2:47:18:32:80:f7:60:06:d9:01:dc:e6:
         8a:38:80:29:97:37:39:4d:ac:82:61:a8:a7:e6:00:fd:23:d7:
         21:e0:40:e0:d1:83:73:d6:86:3a:96:ba:2c:28:c3:11:e8:0e:
         e5:fd:94:a6:1d:eb:8c:ba:8c:12:b8:75:ae:ec:36:fd:5f:12:
         82:86:31:f9:62:9d:13:95:55:37:d7:cb:0d:89:47:33:fe:17:
         57:38:d4:04:fe:2d:b3:98:fb:ff:00:92:ef:67:53:18:43:93:
         09:0d:bc:91:49:54:19:1c:b2:e3:8c:30:26:68:5e:9f:67:79:
         be:e3:2a:95:ab:ad:13:1a:0e:ed:f6:96:50:9c:ef:af:d2:a5:
         02:d1:b9:8c:f1:a9:29:0f:c6:20:34:a0:10:77:1a:fc:cf:9c:
         22:d8:c2:b3:d7:ad:ac:62:26:fc:f8:27:f1:49:98:7f:52:67:
         0b:0c:59:c3:3b:ee:1b:a6:b9:62:d7:dd:72:54:3d:24:2e:db:
         b6:73:2c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----