Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/1ff569b7-dbcc-3c5d-8fa1-fb17d2786b07.roa
File:                     1ff569b7-dbcc-3c5d-8fa1-fb17d2786b07.roa (raw, json)
Hash identifier:          LvTy9RA5jZjcbT2tmUKdJGhaixy/ZNdxIjCgwe5Uefo=
Subject key identifier:   65:FD:E5:CF:47:33:E6:A3:7F:67:47:7A:BA:78:99:DB:C4:E1:75:CB
Certificate issuer:       /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Certificate serial:       010D0C9F4328583C98D94522B8DB777FC0B3BC00
Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/1ff569b7-dbcc-3c5d-8fa1-fb17d2786b07.roa
Signing time:             Mon 08 Nov 2021 05:00:00 +0000
ROA not before:           Mon 08 Nov 2021 05:00:00 +0000
ROA not after:            Thu 18 Apr 2024 04:00:00 +0000
asID:                     210734
IP address blocks:        2602:fc09:805::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:98:d9:45:22:b8:db:77:7f:c0:b3:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
        Validity
            Not Before: Nov  8 05:00:00 2021 GMT
            Not After : Apr 18 04:00:00 2024 GMT
        Subject: CN=7498a33d-531e-482c-ae93-4c30e52b228b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b9:6b:28:14:22:09:8f:52:19:2a:3e:1e:29:
                    a3:dc:9d:28:73:b3:c7:f2:97:80:92:92:c5:1d:22:
                    41:b5:c8:90:8a:27:00:b6:a9:e7:76:6d:80:eb:54:
                    aa:0f:71:6c:f1:94:12:a5:d7:5f:14:1a:47:db:f4:
                    49:5e:9a:af:53:63:ab:73:c2:ab:c6:e2:8b:30:71:
                    a4:47:07:00:0e:44:85:3b:97:2d:0a:05:b6:69:a2:
                    91:df:82:cc:e2:77:d7:eb:64:2f:59:a1:5a:93:ed:
                    14:cc:f0:c7:b9:30:40:63:dc:24:f8:59:07:7e:6c:
                    fa:85:dc:f5:1a:53:5d:07:f1:31:1a:1c:d8:db:ea:
                    07:e4:a5:7d:ca:a6:23:27:50:ac:8a:71:8c:d9:89:
                    c2:56:3a:1d:69:0d:6a:62:59:80:77:74:be:ce:cf:
                    7b:72:de:6c:12:87:28:fb:ff:15:1a:43:44:6d:72:
                    f1:e6:7f:a9:14:58:ee:0a:d1:d1:87:9c:10:80:ca:
                    e0:c4:f0:7f:5a:33:b5:83:1b:66:ed:50:d5:86:d1:
                    48:28:06:de:48:d5:1f:3d:0d:fd:ce:f4:0a:4f:20:
                    e1:d0:f1:bc:81:ba:a7:95:e1:da:b0:73:62:28:86:
                    1b:81:69:c3:e5:5e:f6:57:2a:cc:a4:28:00:76:17:
                    e4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FD:E5:CF:47:33:E6:A3:7F:67:47:7A:BA:78:99:DB:C4:E1:75:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/1ff569b7-dbcc-3c5d-8fa1-fb17d2786b07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl

            X509v3 Authority Key Identifier:
                keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc09:805::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:3f:26:8a:d5:04:cf:de:94:5a:dc:35:eb:02:a0:9a:ec:6f:
         56:04:58:fc:f2:e1:4c:06:71:c4:5c:69:99:76:0c:89:f1:fe:
         39:8b:19:a3:56:07:61:aa:28:cf:59:b9:1d:27:8f:75:bd:38:
         6e:92:c5:bc:34:ed:99:7e:0b:62:b3:72:33:3e:f7:6b:8d:42:
         87:0f:db:b9:ea:c5:b6:fc:93:97:a2:a7:b9:23:a4:ad:33:b9:
         51:65:fa:a5:fc:6e:d6:82:32:60:13:c0:aa:d4:c7:f6:36:ec:
         f2:a2:0d:eb:51:b9:c5:82:3c:aa:15:57:0f:57:47:c8:e7:31:
         b0:bd:ab:2c:c3:9a:e7:d6:3e:c5:f6:70:d4:22:94:b2:89:73:
         ea:aa:79:4b:27:d1:78:cf:f4:d5:e4:29:c6:48:d1:29:7c:a0:
         94:db:e6:c3:f5:e6:d9:5c:2c:ca:70:50:34:df:89:38:c6:98:
         d1:dd:af:07:da:70:7e:32:6c:13:4c:74:e2:cc:79:18:b5:fd:
         6a:c4:c4:f7:a1:d5:a3:4b:43:11:f8:0a:2d:88:ca:a2:6e:87:
         01:83:a9:5d:d0:9b:a4:4f:d3:35:f2:93:0b:71:f4:a6:5b:fb:
         da:f0:ce:73:55:ac:35:98:85:c1:d2:49:99:39:48:a4:d3:c3:
         6b:19:2c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----