Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/2ff3f29d-768d-38c0-a4da-4653c54ec97d.roa
File:                     2ff3f29d-768d-38c0-a4da-4653c54ec97d.roa (raw, json)
Hash identifier:          VYuRDw/y3u6t5Eg85FDbaRENRyQqNAQDM3FDtMdYWbk=
Subject key identifier:   97:E6:5D:9B:95:16:FE:9B:53:AA:DD:6C:97:43:1A:7A:C7:3B:E8:2D
Certificate issuer:       /CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
Certificate serial:       010D0C9F4328583FB0D29D6620872B3F016F0C00
Authority key identifier: 0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/2ff3f29d-768d-38c0-a4da-4653c54ec97d.roa
Signing time:             Tue 25 Oct 2022 12:07:42 +0000
ROA not before:           Tue 25 Oct 2022 12:07:42 +0000
ROA not after:            Mon 27 Jan 2025 05:00:00 +0000
asID:                     33333
IP address blocks:        2607:f5a0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 26 Oct 2022 16:51:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b0:d2:9d:66:20:87:2b:3f:01:6f:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
        Validity
            Not Before: Oct 25 12:07:42 2022 GMT
            Not After : Jan 27 05:00:00 2025 GMT
        Subject: CN=2179d2d1-b520-4841-baea-0f764be686de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b6:eb:b0:5c:0d:53:c7:be:b5:f2:53:47:59:
                    41:88:e7:3e:6b:f6:67:e7:dd:45:2f:29:0b:bb:5c:
                    90:3e:3a:5d:95:25:ce:a5:ee:d8:19:dc:8f:70:cb:
                    d8:10:0c:31:ae:2e:12:04:db:eb:69:b9:26:82:b7:
                    17:d0:63:08:86:d2:a7:d8:2e:19:a1:78:7e:78:76:
                    b9:3b:62:7d:a2:c2:80:6f:4b:69:07:e0:ee:f1:23:
                    bd:e0:6e:d1:03:f8:e4:73:e5:b1:ab:50:93:c5:83:
                    f5:e1:76:4f:8d:df:b4:dc:85:04:5c:b6:e3:48:94:
                    10:75:d5:67:62:f0:d3:94:d0:3a:0f:59:2c:58:98:
                    f5:e7:d7:d9:c1:fc:45:9d:28:ac:6c:19:cc:d2:73:
                    63:e9:ba:17:be:fb:29:f9:97:0c:4e:25:8d:1c:ff:
                    85:99:6d:8a:c9:86:04:7c:02:f7:43:28:18:9e:b1:
                    c5:15:5b:4e:35:27:b4:3c:8f:7c:a0:a0:5e:ac:e9:
                    2c:0e:85:21:e7:67:53:3c:8b:04:64:5b:ee:8b:e6:
                    1a:36:64:9d:2c:30:10:c1:16:ac:4b:2f:3f:e5:b6:
                    75:36:53:31:2f:b7:85:73:be:ba:c9:a4:ee:3c:58:
                    9b:dd:fa:c9:bf:00:45:bd:dc:ca:5f:7e:36:7d:db:
                    ef:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E6:5D:9B:95:16:FE:9B:53:AA:DD:6C:97:43:1A:7A:C7:3B:E8:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/2ff3f29d-768d-38c0-a4da-4653c54ec97d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/2d6a17c2-b155-4b32-933b-3f7043e2cecc.crl

            X509v3 Authority Key Identifier:
                keyid:0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5a0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d2:c9:4b:a7:31:62:44:cb:c2:31:be:37:e6:23:ad:fb:96:
         40:15:47:9a:f2:9c:1c:dd:f0:48:82:ea:2e:b4:2a:29:98:45:
         c0:64:ec:5c:1e:32:c5:75:ac:d8:2c:2a:55:a6:93:30:b8:21:
         a4:91:e3:e5:a2:2a:85:9e:8c:c5:81:c2:24:9b:f3:91:df:81:
         34:2d:c6:e7:68:c5:f8:71:b9:51:c2:9c:fa:3f:ba:59:7d:d3:
         83:85:a2:7f:12:8d:3c:c6:2f:76:40:a5:6b:6b:e1:af:b4:e0:
         04:13:2e:d9:e7:7c:1c:78:16:32:78:c9:ae:14:1a:53:e5:4f:
         3a:b0:03:67:d1:b8:29:9f:aa:e0:25:56:cc:28:c6:e7:12:e3:
         d4:b0:df:fe:5d:fc:40:da:eb:8c:2c:77:e6:82:50:d9:24:63:
         eb:59:5b:46:ce:1f:aa:8b:c1:09:56:aa:ef:8f:7e:34:6b:06:
         66:48:f8:9f:cb:97:5b:32:1d:65:68:c5:0e:ad:1d:f8:04:ab:
         4e:f8:fd:b9:87:68:67:71:6e:f2:2f:47:b7:d5:b5:4e:39:a2:
         3d:63:38:ea:56:95:98:a6:4b:15:32:a5:af:69:8d:49:45:80:
         df:dc:8f:e8:cd:aa:12:d3:16:b2:ea:87:80:4d:b5:c1:51:82:
         d6:8f:eb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----