Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/1618d594-e3db-3aba-a8ae-4fed7cae6385.roa
File:                     1618d594-e3db-3aba-a8ae-4fed7cae6385.roa (raw, json)
Hash identifier:          HzgWaDi7Z86DjL7gE9UcmFHMcILEL+i3eoCcG6kXXUY=
Subject key identifier:   26:F6:BB:3F:7D:34:6C:DA:23:BA:29:3B:58:D0:94:9D:BA:E3:67:81
Certificate issuer:       /CN=80f343df-55be-4b48-b559-15fb2fe6c1c5
Certificate serial:       010D0C9F43285842972E58EFDF2DD062F2517380
Authority key identifier: CA:25:37:D9:1E:AF:B6:C9:18:89:19:53:82:63:C8:4F:4D:F0:83:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/1618d594-e3db-3aba-a8ae-4fed7cae6385.roa
Signing time:             Tue 18 Jul 2023 19:05:42 +0000
ROA not before:           Tue 18 Jul 2023 19:05:42 +0000
ROA not after:            Mon 16 Oct 2023 19:05:42 +0000
asID:                     852
IP address blocks:        2602:812:2003::/48 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:97:2e:58:ef:df:2d:d0:62:f2:51:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f343df-55be-4b48-b559-15fb2fe6c1c5
        Validity
            Not Before: Jul 18 19:05:42 2023 GMT
            Not After : Oct 16 19:05:42 2023 GMT
        Subject: CN=2af5cb32-aacf-409a-8883-e3c2cf6e8fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bf:2d:27:68:ec:e7:4e:44:19:6e:bb:b3:ee:
                    65:ac:79:c6:da:49:5e:41:89:31:78:20:bf:32:08:
                    65:38:58:5e:c0:33:58:68:1a:cf:1f:f5:19:a8:8e:
                    22:78:94:98:9c:c5:eb:f3:17:5b:18:41:d1:75:53:
                    bf:03:45:61:53:f5:46:a9:b9:79:a2:86:55:63:43:
                    3d:3d:49:c1:ef:1c:f1:8a:4a:93:82:d3:74:6b:46:
                    a1:a8:28:c0:8e:7c:5f:fc:a0:4a:7a:48:aa:5e:b5:
                    ea:7d:62:c4:c1:95:8a:08:7e:8e:e3:08:b3:8a:e3:
                    18:70:64:5b:cb:2c:70:1e:95:88:ba:91:0c:14:bd:
                    cb:4c:a0:b2:a6:84:44:2f:55:0d:d2:90:c5:fc:56:
                    11:c6:c0:c5:dc:81:b5:76:fa:27:08:dc:39:80:6e:
                    7e:ba:a6:0d:79:5e:52:91:1b:9b:ae:11:6a:de:f5:
                    43:97:19:28:ec:00:48:be:fe:7b:34:30:e3:a1:4d:
                    53:51:8d:36:6e:a8:e8:1e:c1:48:ae:f8:4f:1f:3b:
                    fb:34:07:d7:21:74:b8:4d:7b:e0:f9:2a:74:68:41:
                    a1:f5:2b:91:9e:7c:ce:a5:65:49:af:39:32:6b:63:
                    d9:49:d5:8d:bf:1e:b3:a3:ea:ce:31:85:8d:4f:b8:
                    14:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F6:BB:3F:7D:34:6C:DA:23:BA:29:3B:58:D0:94:9D:BA:E3:67:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/1618d594-e3db-3aba-a8ae-4fed7cae6385.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/80f343df-55be-4b48-b559-15fb2fe6c1c5.crl

            X509v3 Authority Key Identifier:
                keyid:CA:25:37:D9:1E:AF:B6:C9:18:89:19:53:82:63:C8:4F:4D:F0:83:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:812:2003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:47:4c:d4:ac:14:fc:53:6d:34:35:72:53:fe:cd:9d:89:88:
         b4:a3:4c:d4:22:a6:de:1e:ac:6e:a9:90:ce:95:df:ec:05:38:
         1e:bd:9d:04:93:62:67:6a:a4:78:c6:90:bf:67:13:55:72:39:
         0f:cd:8f:76:c3:7f:40:ec:f8:4e:45:cb:a8:dc:f6:66:f1:14:
         6f:0b:e1:42:04:b0:00:14:0e:9f:19:18:dc:da:54:08:97:fd:
         a4:cd:23:69:53:90:90:48:04:12:da:33:6c:8a:07:f1:c2:25:
         91:1c:6e:dd:14:4b:c0:1e:4c:7b:12:34:89:06:70:13:87:72:
         eb:ee:62:12:55:fa:de:6d:9b:1f:40:41:47:6c:53:85:94:bc:
         a7:8b:15:c4:00:ed:3c:7d:5e:d8:22:4a:ed:3b:80:17:96:36:
         26:bc:3a:d4:6c:dc:79:0b:e0:47:67:76:43:9e:86:b6:38:24:
         f7:bf:57:01:c9:e7:93:db:79:c6:d4:7c:14:e2:40:95:36:e1:
         3e:b0:12:c6:7f:b4:7e:66:d9:a4:c1:ec:cb:97:b1:59:d5:10:
         21:2b:74:63:9e:cb:97:10:04:68:b5:4a:bd:65:70:55:ef:eb:
         6d:34:e4:d6:f8:21:43:18:8f:2b:24:a5:95:3f:8f:82:65:8c:
         64:e0:e6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----