Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/18967d76-0c39-32b3-896e-351354f3a70a.roa
File:                     18967d76-0c39-32b3-896e-351354f3a70a.roa (raw, json)
Hash identifier:          LNDE+5gsGulW+/lOqak4wVFTIz7h8Z3wYNFDjRtRwFk=
Subject key identifier:   DC:E8:97:53:1E:C1:22:34:76:B3:57:35:26:D7:C5:E1:A6:B8:9D:48
Certificate issuer:       /CN=04bd1965-5757-479c-b2af-44967b5e0539
Certificate serial:       010D0C9F4328583DB9134C8B2D0CFE3DD003C0E0
Authority key identifier: B5:78:2D:55:7A:A0:51:AA:E0:15:64:BB:40:15:08:8D:34:54:FF:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/18967d76-0c39-32b3-896e-351354f3a70a.roa
Signing time:             Tue 26 Apr 2022 13:31:27 +0000
ROA not before:           Tue 26 Apr 2022 13:31:27 +0000
ROA not after:            Mon 31 Jul 2028 04:00:00 +0000
asID:                     400671
IP address blocks:        2602:fb7e::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 12 May 2022 02:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b9:13:4c:8b:2d:0c:fe:3d:d0:03:c0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04bd1965-5757-479c-b2af-44967b5e0539
        Validity
            Not Before: Apr 26 13:31:27 2022 GMT
            Not After : Jul 31 04:00:00 2028 GMT
        Subject: CN=f2500b29-0b2f-4226-8030-83a7521650af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:35:eb:aa:dc:da:74:28:98:4d:69:bc:b2:55:
                    7b:52:23:d2:60:87:82:e6:c1:ba:ae:66:c9:3e:8e:
                    bf:cd:1d:3f:cc:85:0a:92:dc:b5:e9:39:6b:07:77:
                    ea:d3:4e:e0:19:10:fb:b8:c6:c4:94:e4:78:00:1e:
                    47:33:08:7c:b5:43:75:85:fe:28:6a:30:22:71:3c:
                    17:5c:94:f4:fc:4c:93:67:d2:61:f0:3b:4d:6c:a8:
                    72:a9:c7:03:04:de:3b:dd:2c:46:ce:64:4b:cd:f7:
                    fe:4d:17:e2:25:8c:b3:74:19:38:d8:37:45:ba:25:
                    24:f4:57:fc:35:62:0e:bb:03:be:36:5f:f3:32:83:
                    45:ef:88:79:44:64:af:5a:d9:25:4f:f1:8a:87:dc:
                    82:1d:54:5c:d6:3f:1a:91:c6:b3:b3:b7:58:d5:95:
                    25:fe:ad:8e:cb:8e:50:7b:40:ee:11:de:ad:b1:8f:
                    b9:ad:d9:23:31:34:2c:c7:45:f0:cf:04:8c:3a:3e:
                    bd:92:0d:70:aa:e2:95:3a:8a:47:ab:a9:26:67:78:
                    3f:d0:1f:66:59:cd:3d:c5:2e:83:df:61:5a:46:8d:
                    b2:aa:9a:9c:81:90:40:11:2a:2b:c3:b0:96:87:a2:
                    5c:10:7e:38:e2:d9:72:bd:86:ce:96:42:50:0f:aa:
                    ed:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E8:97:53:1E:C1:22:34:76:B3:57:35:26:D7:C5:E1:A6:B8:9D:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/18967d76-0c39-32b3-896e-351354f3a70a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/04bd1965-5757-479c-b2af-44967b5e0539.crl

            X509v3 Authority Key Identifier:
                keyid:B5:78:2D:55:7A:A0:51:AA:E0:15:64:BB:40:15:08:8D:34:54:FF:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb7e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:a1:f8:5b:58:cb:db:e0:0f:42:6c:2d:2a:ba:e1:48:c2:01:
         06:c9:a8:81:86:69:c8:0c:fb:22:77:00:80:fc:5e:29:dd:85:
         21:b9:24:be:54:5f:a3:6c:22:48:d5:13:88:83:20:63:33:73:
         e2:55:42:2f:84:a8:0a:1b:d8:bc:b2:8e:00:e3:e9:ca:2b:b9:
         af:2d:c4:76:3c:86:10:d9:64:60:54:91:72:70:f1:8e:33:0c:
         5b:5a:87:69:bc:63:6f:7d:fc:11:ba:3c:38:7d:42:fa:93:13:
         75:27:1a:48:95:d6:66:0e:3c:b4:2c:78:d8:74:b7:3a:d8:08:
         3a:66:6a:90:ca:74:39:d9:e9:70:19:3d:6c:45:73:04:95:70:
         09:51:30:04:c8:2e:74:04:b4:8a:b8:c1:c8:f5:f5:f0:09:57:
         30:56:d1:4e:5a:07:e1:86:72:c4:6f:52:6b:c6:9c:d0:62:9d:
         d4:ce:c8:71:f1:54:93:6d:b6:87:e1:15:1f:87:3a:73:68:6e:
         6a:f8:74:da:cd:d6:4c:2f:34:8e:26:c0:b2:4d:eb:e1:32:b2:
         80:8e:c6:a0:33:93:bf:ac:a2:4e:a5:2f:34:06:f4:01:79:c5:
         b3:56:73:a4:15:4d:2e:44:fe:52:db:c3:9a:92:ab:e0:cd:8b:
         ab:66:3c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----