Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/68c1b893-807d-33e2-b4de-3b4cf62ae84d.roa
File:                     68c1b893-807d-33e2-b4de-3b4cf62ae84d.roa (raw, json)
Hash identifier:          AJCYaY3ic3SlXhRWJcctHWFSFWBVXLnDYeG+lIoG7ow=
Subject key identifier:   C6:8A:1D:9B:0A:BE:83:63:C3:3A:1E:EE:56:CD:25:EC:7B:AE:CB:6E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584421ADC7FB32AA9D1DCA1F5A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/68c1b893-807d-33e2-b4de-3b4cf62ae84d.roa
Signing time:             Thu 07 Dec 2023 02:30:58 +0000
ROA not before:           Thu 07 Dec 2023 02:30:58 +0000
ROA not after:            Wed 06 Mar 2024 02:30:58 +0000
asID:                     49824
IP address blocks:        2001:470:23d::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:21:ad:c7:fb:32:aa:9d:1d:ca:1f:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  7 02:30:58 2023 GMT
            Not After : Mar  6 02:30:58 2024 GMT
        Subject: CN=034f934d-fe07-45c1-852d-3ed80e7585ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:63:78:a9:ee:04:77:67:d3:be:31:ef:63:08:
                    5c:fa:37:a3:15:a6:f6:ce:20:01:6b:b9:02:9e:94:
                    12:6f:93:86:8b:ef:54:e7:83:2a:ca:66:d3:6c:04:
                    2c:08:f3:a5:a1:b4:b1:88:a1:4b:87:de:09:af:ef:
                    4a:72:80:17:78:e7:b2:a0:f1:3b:3e:0a:88:0a:7a:
                    a9:3b:77:f0:f3:44:88:69:9e:eb:20:0e:b2:bf:12:
                    06:1d:5e:88:19:77:17:d0:de:88:d8:92:90:83:31:
                    d7:1d:74:82:a1:86:d9:9b:e8:31:4b:4c:d2:7c:b0:
                    34:e5:ff:67:cd:07:82:74:75:94:27:6d:6a:3b:87:
                    94:97:ef:51:e9:c6:51:75:65:a2:d3:8a:0a:fc:58:
                    6c:85:e0:83:c5:9b:03:11:96:3b:34:23:b5:63:c0:
                    aa:4a:2c:38:dc:2e:f7:47:31:e0:92:ce:56:7d:ae:
                    72:f2:17:16:2f:49:d2:50:8d:16:1b:6b:80:5a:09:
                    c4:7d:a3:50:8c:3f:0c:5a:2c:aa:01:e2:0b:5b:7e:
                    75:73:52:25:d3:e8:26:32:2c:08:29:26:cc:44:36:
                    5d:15:b3:06:01:38:78:69:21:69:ad:a6:5e:1b:2e:
                    c8:04:e7:89:4d:af:ce:d6:39:4b:92:38:26:52:81:
                    7b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8A:1D:9B:0A:BE:83:63:C3:3A:1E:EE:56:CD:25:EC:7B:AE:CB:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/68c1b893-807d-33e2-b4de-3b4cf62ae84d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:de:ef:b2:77:14:5a:77:ac:69:62:3d:e7:2e:55:d6:d5:55:
         d0:78:81:15:30:e7:78:cd:38:16:5c:06:ab:b5:3a:0d:58:6f:
         60:5e:52:c5:0c:47:0b:de:e6:8b:85:5d:7f:75:50:b6:d3:c3:
         7e:75:b0:1c:20:c2:80:a9:25:e9:00:7e:e2:ea:53:d5:ef:7f:
         fb:99:85:7f:d9:9d:4f:c3:a3:11:46:15:24:a0:34:b0:b3:56:
         5b:b6:ad:46:06:ac:b7:f7:76:9a:8e:a6:3a:47:9a:c9:02:26:
         3c:db:32:75:2f:38:e7:bf:18:c7:2c:90:6c:49:10:1a:b7:8f:
         e4:79:c5:ed:2d:64:a4:1a:0c:55:07:55:82:a5:71:ab:24:8c:
         da:d7:d3:a3:f5:40:52:26:b5:22:78:05:a3:19:56:69:43:2a:
         c7:07:01:b3:b1:30:c4:f3:c2:e9:3f:7f:ec:f6:b7:c7:75:fa:
         f5:2d:e7:11:8e:56:11:7e:fa:b4:88:f9:f6:c7:47:3a:c8:f5:
         dd:d4:14:73:7a:7a:f8:9c:86:72:1c:f6:66:1a:14:17:b8:60:
         35:86:bf:47:dd:b7:c1:c8:7d:b4:30:ec:27:77:e4:9e:18:e4:
         d8:dd:5f:cf:f2:4f:49:e0:63:8b:be:96:6a:51:3b:b6:4c:3e:
         86:4d:39:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----