Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/c5cc0490-e74a-341b-9548-77686a8c02c2.roa
File:                     c5cc0490-e74a-341b-9548-77686a8c02c2.roa (raw, json)
Hash identifier:          CV8PVxxy3TLE9rJyPyy8uHxp7DIhNZYwAzAA0UXFhBs=
Subject key identifier:   17:39:3C:B6:28:0B:88:25:75:43:5A:71:16:1B:46:73:AB:19:00:CC
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F4328583D343FEF8D9396D2EE6956A5B0
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/c5cc0490-e74a-341b-9548-77686a8c02c2.roa
Signing time:             Mon 24 Sep 2018 04:00:00 +0000
ROA not before:           Mon 24 Sep 2018 04:00:00 +0000
ROA not after:            Wed 14 Jun 2028 04:00:00 +0000
asID:                     14618
IP address blocks:        2602:fdeb:5::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:34:3f:ef:8d:93:96:d2:ee:69:56:a5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Sep 24 04:00:00 2018 GMT
            Not After : Jun 14 04:00:00 2028 GMT
        Subject: CN=693ea88d-4ecf-46ff-82da-9d4cb406c58f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cf:30:67:da:43:2b:8d:c1:e7:74:c4:ff:3f:
                    12:0f:de:85:4e:39:82:a6:fe:e4:65:3b:b2:c7:98:
                    71:fa:b6:b3:8a:47:17:a2:83:f6:12:32:f2:d2:ef:
                    01:34:0c:f5:6d:50:7c:cd:ad:50:14:91:67:a4:1b:
                    a4:4b:d4:56:3f:d6:7c:26:dc:ec:6a:4b:fc:6e:0d:
                    ce:d8:e3:2e:5c:2c:a5:eb:c5:73:a1:9a:7c:ad:2b:
                    2d:87:fc:4c:57:f6:57:1e:29:c7:9c:23:e7:72:c1:
                    a1:49:26:36:97:02:a8:a3:ba:c2:bd:5f:6b:e1:9c:
                    9f:a0:5e:b7:95:7d:d2:84:35:3c:12:83:9f:89:a9:
                    a9:0c:f1:28:10:a5:58:bd:3e:57:ee:68:96:63:58:
                    7f:24:57:a8:03:e5:4d:c2:0f:c8:2c:ed:3b:d7:ec:
                    0e:3d:68:8c:cb:89:5c:b6:2c:b3:4e:57:56:69:e7:
                    08:93:37:ef:1f:dc:68:5b:f5:c0:dc:c2:10:92:37:
                    ef:3c:e9:73:31:26:40:a4:11:40:b6:f3:c8:48:07:
                    b1:57:16:51:8a:33:24:00:53:63:b1:3c:db:9b:40:
                    ef:46:46:50:9e:e5:31:19:23:67:84:12:7d:a5:61:
                    f1:f0:4d:e3:8f:99:61:80:d0:29:d6:4f:44:87:fd:
                    d6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:39:3C:B6:28:0B:88:25:75:43:5A:71:16:1B:46:73:AB:19:00:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/c5cc0490-e74a-341b-9548-77686a8c02c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdeb:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:c5:74:65:0d:02:76:c9:10:b8:bc:29:e0:e0:b7:e6:26:62:
         ba:cd:11:59:de:b4:cf:04:df:d5:65:76:59:52:73:ab:1f:60:
         16:4e:20:80:40:ae:bc:91:b2:ac:ae:85:e6:17:83:32:2a:18:
         46:f3:c1:43:6a:3e:1b:35:fd:42:50:5f:30:ed:3d:bd:38:8a:
         c9:9c:00:b8:70:fb:0c:a5:a2:ab:b6:8e:e8:ad:c0:b1:2c:0d:
         6f:d1:49:75:be:87:c9:1f:08:83:55:01:0a:74:6b:56:e0:45:
         a7:07:d4:c3:10:8f:c7:d7:b3:f9:34:6d:5a:ac:5a:8e:53:d2:
         8e:2a:21:eb:76:c1:31:ff:c8:3c:2c:d5:c2:d6:b7:b3:91:3f:
         0e:50:9d:38:f4:00:f1:ee:f8:2c:dc:ac:44:ac:63:9d:cc:f1:
         cc:37:a1:8e:8b:ab:41:84:7c:34:7e:b9:72:f9:b0:51:92:fe:
         51:6c:dd:14:68:51:7e:70:b2:a5:de:99:71:57:22:27:d0:35:
         dc:4c:2f:25:f2:98:36:1b:dd:1f:5f:ce:de:77:2f:fc:26:cd:
         7b:55:e6:bf:ac:1b:e9:04:e1:e8:0d:df:ba:46:4b:2c:8c:6f:
         b8:4c:c4:3b:4e:a6:9d:3b:f8:e6:5a:b5:2b:c7:1e:a6:20:2d:
         43:9c:00:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----