Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/6f776e8e-bb2f-3f01-8ed4-f2e45d96e418.roa
File:                     6f776e8e-bb2f-3f01-8ed4-f2e45d96e418.roa (raw, json)
Hash identifier:          2XKBqvGo+PqW2Kv7hPLop60VuUh70A61hGgYr/516eU=
Subject key identifier:   26:4E:FC:B0:87:B8:86:1E:7B:80:3D:93:D5:E2:C7:6F:E3:F4:ED:DD
Certificate issuer:       /CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
Certificate serial:       010D0C9F4328583FB0CFBB1BACDF6EB84A76B540
Authority key identifier: 0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/6f776e8e-bb2f-3f01-8ed4-f2e45d96e418.roa
Signing time:             Tue 25 Oct 2022 12:07:42 +0000
ROA not before:           Tue 25 Oct 2022 12:07:42 +0000
ROA not after:            Mon 27 Jan 2025 05:00:00 +0000
asID:                     33333
IP address blocks:        2607:ffd8::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b0:cf:bb:1b:ac:df:6e:b8:4a:76:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
        Validity
            Not Before: Oct 25 12:07:42 2022 GMT
            Not After : Jan 27 05:00:00 2025 GMT
        Subject: CN=4460b40a-5527-44b9-9318-7a0cc04367ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9d:7f:be:b8:65:75:2b:53:2a:e6:02:69:75:
                    87:1c:06:d8:7f:53:df:b8:a5:9e:6e:81:89:d3:62:
                    80:bf:58:47:bc:70:e3:13:43:71:45:a9:29:36:63:
                    5f:0c:cc:74:6b:fb:fa:93:19:46:58:b0:58:3b:81:
                    2f:8f:a6:4e:18:d7:ce:2b:f8:dd:0e:be:64:27:1e:
                    32:5d:9d:25:61:d5:7d:0e:0c:87:93:80:ac:df:da:
                    dc:f4:66:aa:2f:97:0c:67:d2:ec:d9:3a:f1:9a:be:
                    66:77:12:6c:6a:22:b3:a9:42:a3:e3:d3:3b:3d:a7:
                    09:07:d7:39:65:6d:cb:67:37:bf:ee:95:78:3c:b6:
                    52:21:63:29:30:b6:2f:75:2d:f8:10:e4:e6:05:88:
                    8c:4b:aa:c2:fe:b3:47:9e:70:c2:29:61:63:53:6f:
                    f0:0e:e9:06:6f:8b:26:ef:f2:8a:ae:81:9e:35:f5:
                    87:8d:30:9b:8c:3c:c4:03:de:4c:ac:52:05:24:0a:
                    84:13:b4:0c:37:c8:8c:4e:56:c9:eb:6c:f6:48:af:
                    1d:37:8f:b4:54:eb:ae:44:f2:56:5c:e3:60:6b:f2:
                    df:e1:ea:25:80:1a:76:a7:fb:c0:c3:ef:08:6b:37:
                    e0:3a:bf:5f:1b:1a:d0:4f:c8:cf:a7:3b:26:7e:00:
                    13:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4E:FC:B0:87:B8:86:1E:7B:80:3D:93:D5:E2:C7:6F:E3:F4:ED:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/6f776e8e-bb2f-3f01-8ed4-f2e45d96e418.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/2d6a17c2-b155-4b32-933b-3f7043e2cecc.crl

            X509v3 Authority Key Identifier:
                keyid:0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ffd8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:ef:47:6d:31:ef:50:f4:c5:0a:66:92:7c:c1:52:64:ff:17:
         6c:b1:7f:9d:6a:c2:12:bd:05:39:89:46:5e:2a:2b:b0:75:ad:
         9f:7d:50:7c:a6:56:3b:03:2d:64:52:34:74:80:e9:ab:24:83:
         85:27:c9:9b:de:36:de:d0:0d:f6:ee:70:ac:cd:59:01:05:59:
         26:c5:50:b1:23:ab:3e:84:8b:9e:59:a0:dc:53:b0:f7:91:d0:
         24:35:d3:12:f2:e3:6f:ea:b2:8f:31:e4:12:8c:fb:4a:58:fc:
         7e:70:60:9b:82:99:8c:80:b6:12:76:54:4d:44:6a:07:3f:36:
         96:85:40:68:8b:4b:b3:b3:76:51:68:14:96:e7:b3:5f:06:66:
         e1:0e:1e:66:12:e2:b2:88:45:ae:25:c0:02:55:6e:b4:0d:d4:
         3e:54:04:13:4d:55:43:34:6e:45:64:5e:c5:f9:b8:e5:b3:ff:
         f6:e1:ae:bc:bd:39:b4:b2:91:0f:f7:a7:90:a0:6d:22:70:b8:
         e6:14:d7:c4:c2:7c:67:aa:97:b9:1d:43:e3:8e:fd:24:16:f8:
         3f:18:ad:7f:eb:ad:7e:75:72:de:08:4c:69:97:d1:64:04:a5:
         5a:6d:8d:4d:69:6b:0c:e9:83:51:f3:37:3f:15:ed:c0:ec:eb:
         62:19:0a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----