Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/a97fc857-7676-316a-91a1-4e58703d4d60.roa
File:                     a97fc857-7676-316a-91a1-4e58703d4d60.roa (raw, json)
Hash identifier:          4okXW0pforg087JkLBi45eijnSh14rO2eupvsfGOSqc=
Subject key identifier:   DF:AF:EE:95:22:1A:2D:96:72:70:A0:C7:2F:5A:B0:01:A4:A4:E3:D8
Certificate issuer:       /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial:       010D0C9F4328583DA1A4F4EA4650006251932880
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/a97fc857-7676-316a-91a1-4e58703d4d60.roa
Signing time:             Mon 28 Mar 2022 04:00:00 +0000
ROA not before:           Mon 28 Mar 2022 04:00:00 +0000
ROA not after:            Sun 28 Mar 2032 04:00:00 +0000
asID:                     8100
IP address blocks:        2606:ca40:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 28 Apr 2022 03:05:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a1:a4:f4:ea:46:50:00:62:51:93:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
        Validity
            Not Before: Mar 28 04:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2032 GMT
        Subject: CN=09ac9c2b-96dd-4596-a6da-b8276968ccd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c4:38:b5:05:1c:96:e5:dc:86:70:63:3a:ff:
                    59:fb:d5:de:5a:4b:f0:fe:0c:ad:f1:6d:27:45:40:
                    61:4b:a1:a0:23:fb:11:13:16:8a:a9:f0:0c:77:53:
                    3c:38:30:58:d7:cf:e1:aa:15:7d:a7:6e:89:ea:5d:
                    8c:a6:08:f9:eb:50:1b:7f:2d:07:79:f3:85:f5:6d:
                    e5:03:e4:aa:10:ae:2c:ac:00:41:88:bf:bb:94:29:
                    0a:cb:7f:fa:30:81:62:0b:9b:0b:5b:ba:0a:eb:1e:
                    8f:6d:1d:68:55:be:84:00:c3:8e:36:6c:14:1b:d5:
                    ee:61:78:c7:14:18:14:6c:09:47:17:c1:b3:de:18:
                    a0:1b:45:76:5a:21:e9:2f:a8:63:56:ab:02:35:fe:
                    46:7b:84:d4:5e:e0:47:c8:12:95:8b:ce:7c:a4:81:
                    63:8a:be:0d:96:a5:e6:03:4a:03:80:9a:3f:f5:11:
                    05:cc:ed:25:03:13:b5:fb:03:d5:aa:6a:e0:27:87:
                    c8:4f:8d:e9:28:6d:50:96:ea:bc:b9:7a:da:50:cc:
                    e1:a2:15:91:4e:65:19:15:7c:d4:d1:23:53:f0:ec:
                    21:01:c6:e6:4e:31:42:02:93:2e:b2:0b:8a:72:9d:
                    73:12:cd:6a:76:52:08:72:5b:ee:50:7a:da:8c:f6:
                    e8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AF:EE:95:22:1A:2D:96:72:70:A0:C7:2F:5A:B0:01:A4:A4:E3:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/a97fc857-7676-316a-91a1-4e58703d4d60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl

            X509v3 Authority Key Identifier:
                keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ca40:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:6d:5a:c2:2b:65:80:fe:f5:a3:bb:b8:5e:36:52:1d:75:09:
         c8:91:56:3c:6e:8f:69:40:2f:7b:58:92:17:aa:44:f1:74:e4:
         57:61:40:9e:24:ce:6e:3e:cb:c7:7e:b2:53:8d:c1:ef:ec:45:
         78:8a:d7:7e:11:57:5f:b9:6f:d3:80:04:cb:12:95:80:3f:65:
         91:6f:a9:9c:3e:e6:e8:b6:8d:98:c9:5e:3e:58:15:ca:9a:5e:
         b4:c7:c6:c2:81:b7:1c:00:c0:cd:28:38:07:03:c2:f4:af:0c:
         84:6a:61:8d:66:8e:83:1c:e6:5b:c5:2d:d4:21:fb:00:ff:80:
         6e:6b:b3:3f:0f:53:56:32:1f:f2:29:ff:51:8c:b7:23:84:1a:
         90:e6:1c:e8:8c:89:4c:a1:57:1c:a8:8d:ba:2b:4d:e5:42:21:
         f2:96:71:68:88:3b:0d:56:5b:7f:70:44:24:fd:97:fe:0d:92:
         b5:12:f6:e9:50:b0:64:a8:25:94:4a:60:ce:e8:a4:ef:06:a6:
         e2:bd:08:ac:1c:c4:78:c0:a7:87:b0:61:4d:38:8c:3e:7f:b8:
         b7:6a:12:cd:f3:77:36:9f:53:8b:54:f6:c9:72:32:c6:c5:8e:
         9c:33:cb:d2:95:47:97:8a:95:bf:52:c5:4c:e3:cc:81:6b:fe:
         0d:2a:a4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----