Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/784232d8-6429-3cab-b218-b268092eee76.roa
File:                     784232d8-6429-3cab-b218-b268092eee76.roa (raw, json)
Hash identifier:          ToSVH9hIpfaFP/9W2qH7wn8Gdi7TRgm4RNGZs1/Sw9Q=
Subject key identifier:   F7:58:D7:87:F8:CD:A1:0A:19:2A:C4:4F:05:6E:43:D9:71:C0:F5:64
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328583F14659C8A684D9E183718B880
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/784232d8-6429-3cab-b218-b268092eee76.roa
Signing time:             Mon 01 Aug 2022 15:54:43 +0000
ROA not before:           Mon 01 Aug 2022 15:54:43 +0000
ROA not after:            Sun 03 Nov 2024 04:00:00 +0000
asID:                     3477
IP address blocks:        2601:a000::/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:14:65:9c:8a:68:4d:9e:18:37:18:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Aug  1 15:54:43 2022 GMT
            Not After : Nov  3 04:00:00 2024 GMT
        Subject: CN=486254ce-a2dc-4e80-a388-d6eb51331106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:2d:9d:bb:ca:64:ca:29:7c:dd:3e:1a:ac:ec:
                    f4:c0:4e:72:88:eb:1c:8d:48:b7:53:26:05:4b:0a:
                    9b:e2:dc:30:c2:9c:c0:22:c9:26:e1:2d:92:2f:e9:
                    63:15:37:ec:e7:e1:3a:cc:b5:46:ec:3f:83:6c:40:
                    bb:99:e3:bb:46:45:38:d0:3d:ca:14:7f:00:e7:1d:
                    c5:13:a9:63:98:2b:02:d8:97:1b:01:40:ed:ef:50:
                    84:74:17:a9:41:ac:df:b4:2e:c1:1a:14:66:7c:85:
                    62:e7:de:3b:bb:50:b8:49:0d:1a:20:a3:2e:6b:bc:
                    6b:1f:2c:2f:32:18:22:69:e8:ee:a8:b3:2b:36:3a:
                    af:56:de:0b:b9:ce:93:ab:aa:6c:f4:80:f6:c3:66:
                    b2:b0:ca:c0:ba:b0:1a:74:d2:8e:ae:a8:2f:c4:4a:
                    f0:d5:b7:39:83:c7:82:10:64:7c:1f:07:8d:95:20:
                    18:f9:75:37:77:b4:e4:55:b0:49:4a:46:db:ae:d2:
                    f9:4e:f4:38:05:6d:03:77:96:31:bc:a7:4e:83:d1:
                    f4:e0:a2:69:72:3e:02:07:66:4d:8a:34:ea:62:cc:
                    fc:dd:4c:e4:27:b2:19:a0:b4:dc:5a:58:7e:ff:01:
                    d0:8e:34:32:89:45:29:8f:05:bd:83:b3:9e:f3:05:
                    25:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:58:D7:87:F8:CD:A1:0A:19:2A:C4:4F:05:6E:43:D9:71:C0:F5:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/784232d8-6429-3cab-b218-b268092eee76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:a000::/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:4d:8b:77:e9:3c:7a:13:40:0d:4d:66:a0:e4:50:f3:43:e0:
         b5:91:d2:d1:33:b0:cb:fc:58:bb:3c:bf:2b:b3:e2:8b:51:d6:
         dd:13:88:7d:65:e6:8b:2e:fb:a4:96:9d:33:29:65:78:b7:14:
         44:c1:d2:2a:cc:70:70:dd:bb:02:4b:bc:d3:c7:6a:a6:25:bb:
         4d:1f:52:89:0f:b1:b0:16:91:26:d0:11:5d:1a:7e:57:11:06:
         12:62:db:59:44:1f:cb:c0:e6:0f:b3:21:03:8c:ce:82:1d:ab:
         5e:0e:6e:14:75:7b:90:ea:3a:33:3e:77:9d:4f:f5:a8:8e:34:
         12:c1:8c:f0:de:6b:d8:72:f4:7f:95:0d:f4:d6:f6:c2:52:b2:
         22:f1:63:1f:23:d6:f3:34:e1:a1:de:12:fc:11:94:d7:a7:57:
         b3:39:9a:c9:fa:02:41:a8:48:20:65:a9:5e:8e:14:04:8d:5f:
         da:98:49:c1:8a:d2:e8:3f:87:5d:30:46:80:8d:12:c0:42:09:
         38:75:b2:95:53:1d:51:7d:ca:2c:96:2b:a8:52:d5:82:c6:33:
         8f:41:87:d1:28:f1:90:a2:c6:23:66:70:c2:0c:04:24:83:bf:
         52:7f:78:e3:0f:96:e6:01:43:f4:df:27:18:1a:c3:b1:4d:61:
         08:75:28:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----