Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9e292fc7-a4ee-33e7-96ad-1e2e1bf02d8e.roa
File:                     9e292fc7-a4ee-33e7-96ad-1e2e1bf02d8e.roa (raw, json)
Hash identifier:          siDUC11b1FrnlVGuxTfuI4y/a3hvgI0C+xWq3ogg+J0=
Subject key identifier:   FA:BF:8A:7F:0F:AE:85:B6:6A:74:5F:27:57:18:99:59:33:EA:3E:38
Certificate issuer:       /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Certificate serial:       010D0C9F4328583C8FC6A9399678465CF61DE2A0
Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9e292fc7-a4ee-33e7-96ad-1e2e1bf02d8e.roa
Signing time:             Mon 08 Nov 2021 05:00:00 +0000
ROA not before:           Mon 08 Nov 2021 05:00:00 +0000
ROA not after:            Mon 15 Apr 2024 04:00:00 +0000
asID:                     210734
IP address blocks:        2602:fc09::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:8f:c6:a9:39:96:78:46:5c:f6:1d:e2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
        Validity
            Not Before: Nov  8 05:00:00 2021 GMT
            Not After : Apr 15 04:00:00 2024 GMT
        Subject: CN=1832337a-e91b-4216-838f-ee3c339b85f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:30:55:00:01:09:4c:75:04:8e:6a:f1:75:1c:
                    71:c8:2e:0d:f0:f2:47:39:2b:1d:8a:a7:0f:a0:18:
                    90:28:c3:0d:43:b2:c4:16:99:74:40:06:3d:65:b2:
                    2e:fb:d2:b6:c7:7f:73:a5:13:5c:d7:e5:7f:aa:45:
                    6e:96:ba:93:e8:61:6c:d4:57:d0:39:f1:77:d2:7e:
                    df:7e:72:2c:97:f0:8d:63:27:1e:43:61:fd:93:96:
                    89:48:c6:78:08:2b:a9:05:f0:c8:85:c8:df:37:4d:
                    fd:ff:50:0a:f4:89:3d:0d:d3:a9:ff:d2:42:36:48:
                    89:f4:71:d5:9b:c2:ec:cc:d5:35:13:5e:0c:ef:b0:
                    0b:8f:e8:1d:07:92:53:e8:8b:68:cc:41:24:0b:2a:
                    bc:7e:ed:40:14:0c:ba:db:a1:ac:3b:e7:0e:12:4a:
                    84:5f:1b:77:1a:20:61:ca:4f:3e:25:d8:d4:8a:19:
                    05:99:78:2e:54:d3:7b:02:99:ec:21:e9:3e:7b:67:
                    83:9b:15:bf:27:ab:26:7d:71:87:a9:1b:16:d7:18:
                    0c:5a:47:2f:2d:6a:45:4e:a8:41:7a:32:0a:c0:65:
                    45:84:6d:59:d5:56:16:5a:90:c0:9d:76:b0:53:18:
                    bb:bd:78:f1:f2:f9:53:26:95:25:1d:aa:18:be:81:
                    83:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BF:8A:7F:0F:AE:85:B6:6A:74:5F:27:57:18:99:59:33:EA:3E:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9e292fc7-a4ee-33e7-96ad-1e2e1bf02d8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl

            X509v3 Authority Key Identifier:
                keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc09::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:8d:ba:b8:a4:6b:73:af:30:e2:78:1b:1e:c5:aa:73:48:42:
         14:a5:80:6a:72:24:19:d2:b1:85:1c:51:d5:bd:a0:41:bd:95:
         7d:44:b6:63:06:e8:dd:0e:43:aa:89:b2:9a:2d:8c:a5:14:38:
         f7:ae:da:a2:a6:ba:4d:bd:32:a8:24:6a:e9:65:60:89:ed:15:
         10:95:97:db:dd:26:92:4c:32:8d:dd:7d:ce:f8:98:8f:55:ce:
         84:48:4c:66:03:1f:b5:9d:b4:a7:95:9a:4f:fc:ad:fd:a2:75:
         d8:e3:72:6f:7c:e0:e6:fe:ae:50:a2:20:b6:43:ad:58:8a:55:
         00:1a:88:40:13:96:f6:3f:1c:f6:3a:de:f1:80:a4:48:ef:75:
         31:f4:ab:b8:a2:83:76:e6:a4:7b:ce:7d:7d:2f:b3:0b:16:fa:
         4c:b4:34:3f:90:98:93:fb:c2:b5:b3:0e:36:c0:97:a8:77:06:
         df:85:00:2a:88:be:82:68:75:c2:dd:eb:3d:6c:f1:b1:06:dd:
         02:10:7f:c9:af:18:f6:26:5a:74:9d:50:9e:6b:cb:4d:c4:fc:
         03:1a:ba:24:ea:7e:0d:56:0b:6c:95:82:f4:a5:32:de:56:f5:
         1c:ca:b9:08:ce:64:6a:29:64:44:6f:4f:cc:cc:f1:ec:d6:a5:
         35:e8:a9:62
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWDyPxqk5lnhGXPYd4qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3
ZWVlMB4XDTIxMTEwODA1MDAwMFoXDTI0MDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
MTgzMjMzN2EtZTkxYi00MjE2LTgzOGYtZWUzYzMzOWI4NWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTBVAAEJTHUEjmrxdRxxyC4N8PJHOSsdiqcP
oBiQKMMNQ7LEFpl0QAY9ZbIu+9K2x39zpRNc1+V/qkVulrqT6GFs1FfQOfF30n7f
fnIsl/CNYyceQ2H9k5aJSMZ4CCupBfDIhcjfN039/1AK9Ik9DdOp/9JCNkiJ9HHV
m8LszNU1E14M77ALj+gdB5JT6ItozEEkCyq8fu1AFAy626GsO+cOEkqEXxt3GiBh
yk8+JdjUihkFmXguVNN7ApnsIek+e2eDmxW/J6smfXGHqRsW1xgMWkcvLWpFTqhB
ejIKwGVFhG1Z1VYWWpDAnXawUxi7vXjx8vlTJpUlHaoYvoGDrQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPq/in8ProW2anRfJ1cYmVkz6j44MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3
Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvOWUyOTJmYzctYTRlZS0z
M2U3LTk2YWQtMWUyZTFiZjAyZDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy
ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw
N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk
N2MyMDdlZWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL8CQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAeY26uKRrc68w4ngbHsWqc0hCFKWAanIkGdKxhRxR1b2gQb2VfUS2
Ywbo3Q5Dqomymi2MpRQ4967aoqa6Tb0yqCRq6WVgie0VEJWX290mkkwyjd19zviY
j1XOhEhMZgMftZ20p5WaT/yt/aJ12ONyb3zg5v6uUKIgtkOtWIpVABqIQBOW9j8c
9jre8YCkSO91MfSruKKDduake859fS+zCxb6TLQ0P5CYk/vCtbMONsCXqHcG34UA
Koi+gmh1wt3rPWzxsQbdAhB/ya8Y9iZadJ1QnmvLTcT8Axq6JOp+DVYLbJWC9KUy
3lb1HMq5CM5kailkRG9PzMzx7NalNeipYg==
-----END CERTIFICATE-----