Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/fc3c3490-b301-39a5-bd55-d03f2d462384.roa
File:                     fc3c3490-b301-39a5-bd55-d03f2d462384.roa (raw, json)
Hash identifier:          Etdzj+xaA/DGbQ5VytdiwGEx+FZj0hV1Tno6yf/6mrY=
Subject key identifier:   7E:21:BB:CF:C2:EA:67:6D:66:73:18:C9:2D:DD:A2:E6:C3:65:DE:25
Certificate issuer:       /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
Certificate serial:       010D0C9F432858414DD02FF619FD65A8C15381C0
Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/fc3c3490-b301-39a5-bd55-d03f2d462384.roa
Signing time:             Mon 29 Nov 2021 14:13:06 +0000
ROA not before:           Mon 29 Nov 2021 14:13:06 +0000
ROA not after:            Tue 24 Jun 2025 04:00:00 +0000
asID:                     400226
IP address blocks:        2602:fc05::/40 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4d:d0:2f:f6:19:fd:65:a8:c1:53:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
        Validity
            Not Before: Nov 29 14:13:06 2021 GMT
            Not After : Jun 24 04:00:00 2025 GMT
        Subject: CN=3992c972-2dcb-44eb-907b-b73bb1618b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:52:3b:5f:0b:f6:98:e6:80:45:ee:5a:a3:30:
                    64:4a:77:34:75:48:25:c7:c6:71:cd:5d:74:c8:e1:
                    2e:24:15:72:4b:d3:3a:4f:63:9e:d7:39:42:1d:ae:
                    8c:3c:81:af:10:de:9b:db:2d:09:78:c8:d0:08:e8:
                    aa:6c:76:56:fe:5d:1b:e5:07:3f:3b:1b:82:bf:a3:
                    a0:19:72:88:35:46:89:84:d5:48:6b:e9:a4:bf:18:
                    85:24:b2:36:22:f3:4d:aa:bd:8b:0b:88:82:dd:6d:
                    4c:01:18:9e:e0:ed:cc:71:7d:74:ad:1b:6b:b2:79:
                    a8:0f:2c:27:0a:c7:84:7c:00:91:14:e2:8a:49:ab:
                    50:9e:aa:35:7f:d1:f5:b2:af:c5:33:fb:67:0d:2e:
                    18:32:06:9e:ea:4d:4c:cb:17:78:ab:64:f3:c8:d5:
                    de:60:6f:68:63:f1:3e:4f:70:38:e8:76:73:04:68:
                    3e:aa:43:a4:87:b1:6e:eb:81:08:8d:40:3e:bd:82:
                    12:30:d7:8f:9d:3c:d0:7d:71:7b:5d:c3:e2:9c:70:
                    01:c0:fa:2e:e6:31:38:cb:79:b4:1b:76:a3:66:fc:
                    4c:07:0f:38:cd:d5:9b:63:64:ea:3f:7d:f3:45:3b:
                    08:1f:ae:72:38:7b:b6:27:ce:f4:ea:6c:88:c5:37:
                    1f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:21:BB:CF:C2:EA:67:6D:66:73:18:C9:2D:DD:A2:E6:C3:65:DE:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/fc3c3490-b301-39a5-bd55-d03f2d462384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl

            X509v3 Authority Key Identifier:
                keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc05::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:f4:82:3c:66:29:ff:bf:2b:f4:f3:e5:e7:2e:72:c4:92:84:
         73:dc:66:3e:5a:95:fa:f5:5a:1d:1c:44:eb:4a:0c:6b:16:c3:
         31:f0:c2:b8:71:d4:3c:0e:92:ce:8c:54:11:2d:09:4b:2c:b3:
         70:69:d3:5d:aa:86:68:f1:db:4c:78:62:4c:67:ec:d9:73:f7:
         ba:31:55:88:2e:11:6e:18:af:68:57:b1:51:3d:9c:78:d8:03:
         d5:22:9b:d4:45:ec:36:5b:b8:b9:f6:62:a4:37:21:3e:93:55:
         10:7f:60:98:6e:c9:05:47:b7:92:09:a7:2c:7f:29:c9:12:31:
         82:b5:21:ce:37:4f:f5:ae:ad:b6:85:97:8d:12:c6:c4:fa:ba:
         42:19:23:4b:40:cc:0e:e9:26:c6:de:b0:da:14:54:e0:65:c8:
         8f:10:81:56:fd:9d:d2:7b:8a:84:8a:54:72:81:8a:fd:dc:0f:
         7b:f2:9b:09:ac:70:d8:de:e5:fa:41:3e:74:c5:21:45:02:a4:
         e8:5c:63:23:a7:62:cf:f0:a8:c1:0d:ef:34:08:09:fe:ef:6e:
         20:b8:8e:d3:46:e1:03:bf:44:7a:a9:8c:82:69:6e:47:f9:09:
         e8:a6:b5:a0:4e:8e:79:38:56:e8:96:39:5d:4c:98:d3:4e:d7:
         68:78:6a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----