Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/79e9b329-e246-44a9-83eb-07fbccf4f7e0/a96c6c05-9332-362c-936f-d268a7f055be.roa
File:                     a96c6c05-9332-362c-936f-d268a7f055be.roa (raw, json)
Hash identifier:          P2BXzypg8Dkh2GuhYikZY6LKuNeTOvFjXBIMMjgsLrA=
Subject key identifier:   01:F9:10:5B:50:29:BF:31:BD:2F:5B:B7:8A:A1:06:1E:03:05:25:37
Certificate issuer:       /CN=79e9b329-e246-44a9-83eb-07fbccf4f7e0
Certificate serial:       010D0C9F4328583DF7C5701247A8C047EFC09FB0
Authority key identifier: 98:D3:AB:23:1F:74:45:7D:49:5C:ED:49:0F:4C:50:B7:CA:C7:6F:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/79e9b329-e246-44a9-83eb-07fbccf4f7e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/79e9b329-e246-44a9-83eb-07fbccf4f7e0/a96c6c05-9332-362c-936f-d268a7f055be.roa
Signing time:             Thu 19 May 2022 12:00:00 +0000
ROA not before:           Thu 19 May 2022 12:00:00 +0000
ROA not after:            Tue 20 May 2025 04:00:00 +0000
asID:                     6939
IP address blocks:        2602:fd3f::/36 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f7:c5:70:12:47:a8:c0:47:ef:c0:9f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79e9b329-e246-44a9-83eb-07fbccf4f7e0
        Validity
            Not Before: May 19 12:00:00 2022 GMT
            Not After : May 20 04:00:00 2025 GMT
        Subject: CN=200dd1b9-b3b2-4110-886e-8d2da36b8d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1d:d2:d9:bb:64:69:4d:37:a5:f9:45:65:d1:
                    4e:30:4a:9b:d3:14:96:ad:06:e4:ef:21:ac:15:53:
                    b3:ef:22:ed:d5:8f:4b:b6:07:20:36:14:6f:0d:3a:
                    cd:ae:81:7a:ac:1b:82:d8:a9:bf:23:41:a4:b4:6e:
                    7e:21:a6:05:89:e4:88:eb:20:45:dd:df:18:4f:35:
                    6a:af:42:1b:29:e0:c9:50:aa:75:da:8d:a5:63:c6:
                    25:ea:9a:30:af:2a:07:65:54:9b:b7:d4:7d:56:9f:
                    bc:ee:d0:45:d9:fa:43:d5:09:6e:ef:ab:ed:66:7b:
                    e4:26:c5:be:08:47:87:53:22:7f:fa:46:e0:55:d7:
                    f0:bd:31:ff:b8:d7:ab:75:d7:34:29:4e:9d:49:99:
                    81:cb:81:4b:56:69:c4:da:ac:37:a5:b1:5a:a9:9d:
                    b1:c5:a5:b7:a3:33:30:3d:3b:44:3f:72:10:82:0e:
                    92:0a:f5:2a:50:dc:48:2c:30:f7:57:4b:e8:0d:e4:
                    67:24:2f:a7:77:5d:3f:01:c8:ff:9b:2f:7c:0a:7e:
                    37:fb:e5:01:b6:fd:55:b4:13:7b:3b:9c:1d:17:a4:
                    e2:e1:47:6a:50:26:93:1b:49:02:10:88:6a:2f:0c:
                    fc:c5:f6:65:e0:44:39:36:cd:f0:08:2c:32:a0:0e:
                    05:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F9:10:5B:50:29:BF:31:BD:2F:5B:B7:8A:A1:06:1E:03:05:25:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/79e9b329-e246-44a9-83eb-07fbccf4f7e0/a96c6c05-9332-362c-936f-d268a7f055be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/79e9b329-e246-44a9-83eb-07fbccf4f7e0/79e9b329-e246-44a9-83eb-07fbccf4f7e0.crl

            X509v3 Authority Key Identifier:
                keyid:98:D3:AB:23:1F:74:45:7D:49:5C:ED:49:0F:4C:50:B7:CA:C7:6F:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/79e9b329-e246-44a9-83eb-07fbccf4f7e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd3f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:63:42:3f:9a:0e:74:8d:21:c0:64:96:26:43:74:cf:55:f8:
         9c:b5:d2:73:50:b4:c2:0d:dc:bd:19:1e:79:02:98:f4:61:dc:
         fb:13:80:5b:7e:89:65:80:c0:78:c2:97:c4:04:e6:75:cb:b3:
         7a:c9:14:00:07:4b:07:e5:e6:a0:7d:3e:eb:02:3b:a7:f5:7f:
         b3:ac:9f:cc:54:0c:eb:73:9b:8c:b2:d5:1d:28:4e:12:02:d7:
         51:f8:3f:67:be:19:0a:6c:38:96:c7:d7:e4:51:c7:64:b5:91:
         7e:a4:e4:fc:0a:07:0f:31:fa:40:0c:69:25:04:4c:26:c1:37:
         5e:fa:e1:5d:51:69:05:e1:1b:c3:fd:65:6d:b8:f8:18:81:90:
         be:00:c3:6a:66:4c:78:84:da:96:49:81:61:29:d2:f7:30:b4:
         51:fd:51:60:c0:6b:c7:f0:71:3a:a0:55:14:ad:54:32:a4:98:
         31:73:0d:37:48:b7:6f:ac:24:11:98:e3:8e:83:14:74:05:43:
         31:5d:95:8d:8f:66:19:98:f0:d6:83:d6:23:18:55:ad:f0:80:
         4e:55:f7:5f:a6:d0:fe:75:a2:ab:6d:be:95:29:67:1f:0a:40:
         04:67:89:0d:e0:9a:14:29:33:ab:d2:61:4c:45:51:e2:93:d4:
         e2:a1:f5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----