Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/8903dfe6-cbb3-3d82-a2be-da0007705105.roa
File:                     8903dfe6-cbb3-3d82-a2be-da0007705105.roa (raw, json)
Hash identifier:          Fv5LQI9bw4ALMz/wr97urQBv7UHrgFeXnMlcNvK61+4=
Subject key identifier:   82:99:69:2E:BC:60:27:C6:4A:82:89:2D:4E:E3:17:5B:02:86:CF:26
Certificate issuer:       /CN=46369a04-d9fc-4dd8-bc96-cf22af084843
Certificate serial:       010D0C9F4328583DB805947A6D6428E11925B380
Authority key identifier: B9:68:B7:2D:27:25:1F:8B:2F:08:14:1E:50:FE:82:74:A6:BB:C0:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/8903dfe6-cbb3-3d82-a2be-da0007705105.roa
Signing time:             Mon 28 Mar 2022 13:35:32 +0000
ROA not before:           Mon 28 Mar 2022 13:35:32 +0000
ROA not after:            Tue 30 Jul 2024 04:00:00 +0000
asID:                     400550
IP address blocks:        2602:fb9e::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 28 Apr 2022 03:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b8:05:94:7a:6d:64:28:e1:19:25:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46369a04-d9fc-4dd8-bc96-cf22af084843
        Validity
            Not Before: Mar 28 13:35:32 2022 GMT
            Not After : Jul 30 04:00:00 2024 GMT
        Subject: CN=957b266e-6b0d-41c3-88f9-aaf8ad591e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2a:b5:dc:af:a0:e1:98:a2:7c:e9:a0:c6:a2:
                    84:68:76:d6:59:5d:a8:15:53:8a:e2:4f:e4:e8:4b:
                    42:9d:75:c3:69:92:1a:71:7a:e6:c6:be:2f:26:40:
                    4e:2e:1d:4d:89:20:fd:db:15:26:75:32:4a:0c:11:
                    b5:1c:14:5b:f9:a0:5b:ee:63:ca:28:51:da:48:ab:
                    3a:cd:3e:5d:7d:61:f0:92:03:1a:98:85:ec:1d:36:
                    52:b4:d4:6c:e5:ad:eb:c5:80:d5:e1:9f:f9:c0:fc:
                    25:37:c9:35:a4:3d:d1:da:0c:99:ee:65:77:18:27:
                    10:cf:dd:93:38:3a:f5:2b:3f:dc:84:e7:d2:a0:65:
                    84:5c:d4:59:47:72:8e:4b:15:30:0c:f0:e2:ef:10:
                    c2:64:65:91:44:d2:c1:54:36:67:71:e2:31:2d:84:
                    6f:64:3b:a4:5f:07:51:ca:d4:c2:f4:db:c2:0d:d4:
                    f8:f4:51:db:15:3b:94:69:a0:e0:d1:3a:2c:a1:2a:
                    b3:e3:8f:e2:ad:bc:43:0c:12:01:46:29:4f:1f:25:
                    92:83:d5:75:73:98:a5:1b:1b:a5:fa:80:b8:9a:8f:
                    2e:76:73:2d:59:5c:6a:16:65:53:1b:be:73:d2:da:
                    58:c3:53:d2:f4:da:d1:a6:8a:22:1f:a5:94:92:e7:
                    19:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:99:69:2E:BC:60:27:C6:4A:82:89:2D:4E:E3:17:5B:02:86:CF:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/8903dfe6-cbb3-3d82-a2be-da0007705105.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/46369a04-d9fc-4dd8-bc96-cf22af084843.crl

            X509v3 Authority Key Identifier:
                keyid:B9:68:B7:2D:27:25:1F:8B:2F:08:14:1E:50:FE:82:74:A6:BB:C0:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb9e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:d2:40:5d:8d:07:c7:96:8f:c5:28:df:fb:d5:59:ec:fc:55:
         77:da:70:1a:04:38:8e:f4:55:81:46:45:0a:c3:46:ca:ca:90:
         7f:56:c3:fb:0f:a0:41:ab:d9:41:d0:65:ae:b4:18:9e:a8:a7:
         6b:6a:41:2e:02:69:1c:0b:dc:aa:1a:bc:54:2f:6e:57:8e:58:
         0f:97:47:ac:ea:d3:86:4b:51:28:1f:3f:54:35:07:e8:3b:53:
         d9:11:ed:aa:25:95:ea:24:06:ed:89:23:3b:6a:71:e9:5b:4b:
         79:f3:75:86:c8:43:29:ff:1d:3e:53:08:04:ee:93:0d:25:8c:
         56:fd:ba:ee:1b:3c:cd:25:e7:2c:52:18:a6:4a:07:c7:82:6c:
         d2:80:3e:74:30:c2:24:d6:02:fa:c1:ed:78:68:9d:e7:3c:82:
         2b:34:bf:57:a0:dd:6f:fb:f9:67:6e:5a:f5:3a:4b:c0:ca:51:
         8e:67:23:7a:ff:63:e5:57:42:db:76:be:97:12:fe:ba:f3:03:
         9e:02:13:63:2c:93:48:09:30:86:40:80:dd:60:c5:ca:8e:a9:
         19:5a:68:50:2f:9e:9a:ad:04:c2:4e:77:c6:14:4f:12:56:ab:
         19:10:2c:f3:ec:e2:81:58:6e:56:2e:c2:8d:86:d3:fc:22:10:
         74:e6:e6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----