Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/901b43bb-3da8-3565-b538-921aa81ed69f.roa
File:                     901b43bb-3da8-3565-b538-921aa81ed69f.roa (raw, json)
Hash identifier:          3ULvqUJrwgtQbyARIbGgJrQpjbgGkLOfIil3WEM6U3I=
Subject key identifier:   2D:1B:83:3A:78:D4:39:15:1D:FE:1B:9C:FC:5B:9F:18:52:D8:53:63
Certificate issuer:       /CN=07c482f6-0e64-42ff-a503-75a85635277e
Certificate serial:       010D0C9F43285842C9AE64703790787877BB6C00
Authority key identifier: 9B:60:17:6F:03:4D:1C:65:68:81:31:15:5C:0D:5C:45:58:67:C1:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/901b43bb-3da8-3565-b538-921aa81ed69f.roa
Signing time:             Sat 05 Aug 2023 21:14:07 +0000
ROA not before:           Sat 05 Aug 2023 21:14:07 +0000
ROA not after:            Fri 03 Nov 2023 21:14:07 +0000
asID:                     16509
IP address blocks:        2607:5f40::/36 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:c9:ae:64:70:37:90:78:78:77:bb:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c482f6-0e64-42ff-a503-75a85635277e
        Validity
            Not Before: Aug  5 21:14:07 2023 GMT
            Not After : Nov  3 21:14:07 2023 GMT
        Subject: CN=ca38ab31-015e-410c-894d-a4adb059f46a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c7:26:8a:e0:19:2e:0b:be:74:e9:79:6a:7d:
                    5b:6d:6e:a5:e3:5f:8b:44:93:88:0f:23:64:91:fc:
                    58:af:8a:b7:a9:f7:5d:eb:f3:71:45:33:b6:50:15:
                    8b:3f:8c:8e:e3:64:0b:f7:81:14:d0:a3:91:73:1f:
                    96:4f:a7:4f:05:8a:ba:ef:63:61:bf:05:bc:d6:93:
                    e3:09:f4:93:b2:81:0b:6b:6c:50:f1:5c:06:bf:7d:
                    b1:4f:33:3d:9b:c5:dd:17:aa:d2:ae:05:78:36:79:
                    f2:d6:b3:82:9d:50:e3:70:58:10:35:a1:79:2f:0f:
                    8b:94:0e:e1:7a:1a:fb:50:da:54:fb:f7:a1:a2:5c:
                    32:1b:de:db:b3:b1:ac:bb:c2:57:9c:a7:c0:39:e6:
                    f6:91:17:fd:b2:2c:18:49:a3:b6:39:8f:0e:36:c9:
                    4c:e8:ad:42:16:db:6f:24:60:8f:87:a5:2d:41:db:
                    1b:f6:f5:f1:5f:d4:a3:c4:3a:d5:25:e0:81:97:29:
                    2b:10:2e:87:83:00:d2:cf:ad:40:f7:13:a5:f3:34:
                    b3:c7:e2:47:c3:92:30:07:e8:c0:16:e1:bc:08:13:
                    05:35:3d:0f:e8:80:fd:cc:97:6d:47:10:3f:22:69:
                    61:15:a4:8a:44:b1:e9:cf:3b:c1:04:1b:c7:5a:de:
                    6f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1B:83:3A:78:D4:39:15:1D:FE:1B:9C:FC:5B:9F:18:52:D8:53:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/901b43bb-3da8-3565-b538-921aa81ed69f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/07c482f6-0e64-42ff-a503-75a85635277e.crl

            X509v3 Authority Key Identifier:
                keyid:9B:60:17:6F:03:4D:1C:65:68:81:31:15:5C:0D:5C:45:58:67:C1:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5f40::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:b9:f7:c0:af:ee:97:16:b1:a1:b0:92:a8:e8:35:ae:58:af:
         ca:de:6c:ea:eb:f6:3d:be:63:2f:85:7f:56:1f:f3:5c:79:a5:
         a2:d1:7d:bd:78:79:b9:67:f9:af:4e:cb:c0:b9:38:86:c6:41:
         c0:d3:90:9b:de:0e:af:29:ec:da:c6:ce:ea:ff:a4:eb:7d:11:
         34:b3:ce:d0:43:08:bf:85:38:1a:e8:58:d4:04:b5:5e:d3:1b:
         02:43:2c:54:0f:47:57:5d:80:5a:7b:7e:d8:f0:6d:67:8d:37:
         9a:70:6b:9f:a6:42:14:bc:2c:6a:b3:92:b1:d7:97:a5:cd:8c:
         5a:35:23:30:84:eb:da:c4:19:a3:dc:c1:17:b1:44:07:ac:8a:
         69:e3:74:d4:84:fa:4f:86:56:8f:1f:7b:84:60:76:0d:8d:6a:
         7a:19:05:11:ce:8d:cd:5e:9f:35:25:16:22:f8:6c:90:f2:bf:
         b1:3d:3e:4c:d5:54:bb:4b:e5:ac:be:c3:9b:ff:34:40:84:15:
         e8:13:a8:11:0f:83:f7:c3:92:93:39:34:19:e7:f4:51:d8:7d:
         c4:98:d3:aa:86:7e:8b:78:90:44:da:19:6c:ce:b5:50:c5:83:
         0e:99:1c:03:80:1a:cc:d2:43:f6:30:ce:b9:51:52:45:90:5f:
         aa:2e:17:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----