Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6fb1732e-723b-4926-bfae-2f7334753517/9acb098e-fd24-304d-ab60-41c3890f699e.roa
File:                     9acb098e-fd24-304d-ab60-41c3890f699e.roa (raw, json)
Hash identifier:          rbWU4bUgwix8RkYjk+dfab0PyfDjQh9fXnDvmkaxiOs=
Subject key identifier:   2A:82:61:8D:0C:1B:44:46:DC:F9:7A:5A:5F:0F:2A:64:56:E6:5E:F2
Certificate issuer:       /CN=6fb1732e-723b-4926-bfae-2f7334753517
Certificate serial:       010D0C9F432858436B7614D90F2DC9E4E462A418
Authority key identifier: D1:52:3C:44:A6:FB:62:61:9F:6C:6A:D6:E0:2B:00:CF:02:8D:E1:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6fb1732e-723b-4926-bfae-2f7334753517.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6fb1732e-723b-4926-bfae-2f7334753517/9acb098e-fd24-304d-ab60-41c3890f699e.roa
Signing time:             Mon 02 Oct 2023 20:01:37 +0000
ROA not before:           Mon 02 Oct 2023 20:01:37 +0000
ROA not after:            Sun 31 Dec 2023 21:01:37 +0000
asID:                     399971
IP address blocks:        2606:d3c0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:6b:76:14:d9:0f:2d:c9:e4:e4:62:a4:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fb1732e-723b-4926-bfae-2f7334753517
        Validity
            Not Before: Oct  2 20:01:37 2023 GMT
            Not After : Dec 31 21:01:37 2023 GMT
        Subject: CN=a8226c5f-8dbf-41ba-b450-02c350987dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f7:7c:84:66:ea:0f:32:ec:1b:54:cb:d9:ed:
                    d7:ee:c2:3c:70:f7:ee:01:2d:02:42:9d:7f:cb:94:
                    8d:20:ee:4f:de:ce:db:d6:6e:43:46:c4:b7:98:8a:
                    bf:80:c5:8d:25:3f:71:4b:31:2d:85:06:c7:44:50:
                    db:f2:de:d0:2a:a2:e3:2b:c2:88:65:45:d0:e3:56:
                    1c:fb:86:33:70:00:0f:3a:fe:06:57:4c:e6:d4:ed:
                    68:ac:86:14:1b:ab:e1:93:47:42:25:4e:2b:0d:21:
                    43:ed:8b:eb:96:3f:75:4e:4e:10:eb:55:ea:ad:7f:
                    5e:67:52:22:c7:a3:7e:1e:bc:3c:a2:b4:19:de:de:
                    d8:6b:62:a4:b9:b9:31:07:c4:40:78:1f:9d:3a:35:
                    67:15:bf:5f:6d:41:e8:52:85:5d:b5:4b:52:96:63:
                    83:8f:a3:0a:d8:76:7f:5f:33:07:80:84:e9:32:fa:
                    5d:0d:df:db:d9:11:22:06:a3:6e:d7:63:97:9e:73:
                    9e:ed:9b:d0:32:a4:be:76:fa:c9:ba:2a:13:f8:63:
                    0b:55:49:09:cd:c3:b9:b7:34:91:e3:6c:64:f6:6c:
                    7b:e5:3c:1e:b0:0e:fb:2a:00:6d:65:b8:0c:d7:f7:
                    0e:ac:bf:e3:12:e4:32:71:60:54:cb:7c:6c:8b:85:
                    a9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:82:61:8D:0C:1B:44:46:DC:F9:7A:5A:5F:0F:2A:64:56:E6:5E:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6fb1732e-723b-4926-bfae-2f7334753517/9acb098e-fd24-304d-ab60-41c3890f699e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6fb1732e-723b-4926-bfae-2f7334753517/6fb1732e-723b-4926-bfae-2f7334753517.crl

            X509v3 Authority Key Identifier:
                keyid:D1:52:3C:44:A6:FB:62:61:9F:6C:6A:D6:E0:2B:00:CF:02:8D:E1:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6fb1732e-723b-4926-bfae-2f7334753517.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d3c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:29:36:a2:72:da:97:a3:1a:5a:dd:c4:ca:e4:43:1e:b5:1e:
         65:84:22:2e:c2:2d:c1:b9:76:9c:f5:ce:e4:23:5d:6f:aa:d6:
         7b:97:f2:2d:21:55:62:c8:d3:59:44:d8:ea:c2:ab:bc:8c:ef:
         a0:ce:e3:37:49:04:23:5c:85:9a:eb:60:13:16:8f:16:0c:56:
         3a:39:2e:84:02:31:e8:f6:f8:21:c3:4c:5d:4c:85:ec:d0:96:
         27:77:18:5e:56:8f:6c:fa:91:3c:03:e7:cf:1e:cd:6c:87:a0:
         33:10:12:12:35:fb:7c:90:06:16:b1:3e:ed:06:63:54:0d:77:
         9c:09:95:07:f4:65:d7:15:9c:fe:c7:df:b0:64:25:ac:7e:ff:
         2a:60:c6:15:14:07:aa:ac:c1:00:6c:67:02:ce:59:31:6b:08:
         23:5b:84:e2:d7:18:64:76:32:f5:6e:31:5d:3b:1d:a2:d8:09:
         32:e9:91:67:c1:e9:82:7e:f8:15:1b:87:86:73:e1:f4:02:ad:
         8e:b4:3c:82:e7:f9:c9:8a:9c:9d:52:cf:cc:46:18:3a:3a:35:
         9d:5f:48:a4:29:b9:f7:e3:34:ea:2a:7f:be:5d:b7:b7:45:f7:
         2b:8c:16:ef:1d:e7:f6:a5:01:5c:f7:06:64:85:7e:32:25:ff:
         36:c1:41:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----