Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/e029fcd8-aeaf-3e78-8f69-3a1fa75fb244.roa
File:                     e029fcd8-aeaf-3e78-8f69-3a1fa75fb244.roa (raw, json)
Hash identifier:          S/zVkTd8nA2MQTe/pmpkekrRefWuQSh2VaMpLLs+Xow=
Subject key identifier:   80:44:DC:F0:72:F0:17:E7:B4:81:FE:EE:34:97:70:96:02:D9:AB:55
Certificate issuer:       /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
Certificate serial:       010D0C9F4328584312AC6BFFCB4F650AF6899E00
Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/e029fcd8-aeaf-3e78-8f69-3a1fa75fb244.roa
Signing time:             Fri 01 Sep 2023 00:44:10 +0000
ROA not before:           Fri 01 Sep 2023 00:44:10 +0000
ROA not after:            Thu 30 Nov 2023 01:44:10 +0000
asID:                     59473
IP address blocks:        2602:2d4:800::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:12:ac:6b:ff:cb:4f:65:0a:f6:89:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
        Validity
            Not Before: Sep  1 00:44:10 2023 GMT
            Not After : Nov 30 01:44:10 2023 GMT
        Subject: CN=927e15ce-9a22-4c7e-ba03-b5ace97fac9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ab:13:23:53:89:c9:d9:b2:87:98:32:91:10:
                    ad:97:85:19:ed:51:5c:15:8d:91:31:a0:18:99:66:
                    78:21:db:bc:ea:71:50:ff:41:cc:a9:d7:65:e9:ab:
                    9e:7c:fc:a3:25:c4:db:5c:63:b8:31:c7:57:2a:45:
                    63:b8:0f:66:81:64:75:40:5c:7f:86:09:b3:21:20:
                    1b:cb:1d:55:63:35:e6:7f:80:e4:7e:75:5d:7c:78:
                    0f:61:83:66:4e:8a:70:17:34:de:a8:15:d8:b8:28:
                    34:96:3f:1d:ff:17:a2:47:09:37:7d:c3:79:6a:ff:
                    24:5b:76:c0:b5:a2:29:4f:83:64:bc:55:0a:b8:96:
                    b3:7e:5a:ed:c8:fb:17:a8:9a:75:b8:25:c1:53:7c:
                    98:48:10:19:9c:07:7c:8e:5f:f6:56:e3:05:f0:3c:
                    b2:26:cb:76:2c:f8:03:73:ef:0d:4b:12:26:46:7a:
                    ec:29:a0:df:33:0d:9f:94:46:ff:8c:32:7c:8b:c7:
                    3f:13:60:17:17:69:bb:cf:a6:52:25:51:95:6d:3b:
                    11:e9:67:ce:8c:04:cf:9c:6a:43:a3:65:87:db:f1:
                    89:e9:52:3b:51:5a:d3:3f:fb:1f:f3:be:d3:73:fd:
                    3b:71:96:cd:a0:98:d6:e0:9c:5a:f2:0e:2d:c3:52:
                    cd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:44:DC:F0:72:F0:17:E7:B4:81:FE:EE:34:97:70:96:02:D9:AB:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/e029fcd8-aeaf-3e78-8f69-3a1fa75fb244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2d4:800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:9b:ed:a4:d1:66:79:f7:c4:5d:04:2b:48:0b:95:b1:f1:d5:
         55:f7:09:b4:92:50:48:ac:34:34:c7:5d:6a:1b:b7:58:a7:72:
         ef:17:62:02:71:2f:eb:67:8a:5e:b9:9d:91:f2:bc:28:c7:7f:
         ce:78:d0:de:a1:ab:dd:ec:c8:6b:db:07:19:25:1d:6f:12:0f:
         c0:3c:6b:eb:c1:73:5d:85:a6:ed:f7:28:8f:3f:4d:16:4c:4e:
         d2:0f:a8:38:92:2e:cf:1f:b2:17:c3:b1:de:01:83:2f:9d:9b:
         94:bf:36:fb:1a:b1:9a:6c:37:43:20:b8:62:2c:d6:e5:e0:d5:
         33:d8:27:ba:70:05:9f:39:af:eb:13:f3:31:b6:d0:1e:fc:08:
         3f:f4:ec:2c:87:40:8d:ef:8e:a8:5c:7f:ed:23:d5:e7:5b:2d:
         6f:b3:12:04:d5:6f:dc:80:25:54:c0:d4:bf:13:02:0f:2f:3c:
         47:c9:98:8a:12:db:f7:e6:da:51:05:a9:c2:6a:97:24:fc:4d:
         59:0a:40:db:ce:2b:25:d6:cc:a2:12:c7:55:f7:b1:08:ae:52:
         db:5a:c1:99:67:51:0d:69:7e:50:54:97:36:2e:25:3d:18:16:
         2e:ee:1e:86:01:04:8e:a6:f0:fa:ac:4e:d3:a5:8e:2e:9d:47:
         b8:5d:fb:71
-----BEGIN CERTIFICATE-----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