Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/85b96ccc-f4c5-30c9-8f42-381111d093b8.roa
File:                     85b96ccc-f4c5-30c9-8f42-381111d093b8.roa (raw, json)
Hash identifier:          7XLHb99NMx6K5/w2RhNEzxU8xu7RpFeKezQNzUFV4Lo=
Subject key identifier:   98:01:CF:25:20:67:85:5F:64:EF:DA:73:F2:4F:C2:B1:BF:C6:F5:22
Certificate issuer:       /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial:       010D0C9F432858430A305B9ADBC159BDAD2FAD00
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/85b96ccc-f4c5-30c9-8f42-381111d093b8.roa
Signing time:             Mon 28 Aug 2023 23:47:43 +0000
ROA not before:           Mon 28 Aug 2023 23:47:43 +0000
ROA not after:            Mon 27 Nov 2023 00:47:43 +0000
asID:                     64496
IP address blocks:        2620:bd:a000::/48 maxlen: 52

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:30:5b:9a:db:c1:59:bd:ad:2f:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
        Validity
            Not Before: Aug 28 23:47:43 2023 GMT
            Not After : Nov 27 00:47:43 2023 GMT
        Subject: CN=fd000e41-01be-494e-a331-0dc932d3bbd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fa:14:17:e1:94:e8:75:c0:44:e0:4b:9d:57:
                    88:96:38:89:14:e1:9a:52:78:93:87:95:e3:7d:9e:
                    c1:1d:28:22:db:0c:39:cc:03:d2:48:16:28:44:be:
                    3b:4e:2f:8c:5c:59:d8:a2:29:a2:13:c9:e4:43:56:
                    f0:d1:5e:fc:81:4a:ea:75:81:ee:b1:b4:12:56:80:
                    22:f8:e9:c5:53:62:48:5e:31:5e:16:27:a6:fc:36:
                    50:86:fa:6e:cb:c5:66:0f:58:99:c0:50:a4:5b:d5:
                    b5:44:dd:97:2c:94:a0:d7:ce:37:1d:17:24:e9:75:
                    0e:00:2b:3e:db:ce:9c:59:16:08:94:25:fe:39:da:
                    bc:5e:30:cd:5c:e3:f5:94:62:a9:ea:89:f6:f7:ce:
                    93:e3:1e:4b:97:45:bb:b4:9f:69:27:d2:a2:ad:22:
                    59:c2:eb:ec:68:8a:dd:55:29:c3:17:4e:a0:18:74:
                    23:e2:b4:00:15:16:b1:8e:c1:73:fb:f5:f6:5c:51:
                    bc:35:9e:7c:5c:1c:ac:5c:f3:2e:9c:1b:23:0b:a2:
                    3b:fb:d6:c7:1f:3c:e0:d9:88:cf:93:e0:9a:0d:17:
                    11:99:5e:9d:82:40:23:c4:d9:b7:4a:fa:35:f6:0a:
                    60:22:50:f7:88:49:0d:f1:46:9d:00:d5:29:05:a9:
                    01:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:01:CF:25:20:67:85:5F:64:EF:DA:73:F2:4F:C2:B1:BF:C6:F5:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/85b96ccc-f4c5-30c9-8f42-381111d093b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl

            X509v3 Authority Key Identifier:
                keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:bd:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:f3:f8:a0:5f:d1:ff:a2:e0:f8:84:13:b5:4a:8d:9d:33:df:
         08:15:44:6b:b8:86:49:5c:af:59:c4:f0:4f:4b:30:be:9b:37:
         a8:28:ec:28:16:c7:45:b1:ee:a2:99:db:db:7b:bf:37:39:90:
         ce:72:a5:7c:a7:26:39:dd:13:cd:a4:36:79:68:8a:64:1c:a2:
         f1:79:e9:61:21:96:98:8a:ab:62:e1:41:62:08:24:31:e8:6e:
         d7:2f:8d:0b:ca:63:5e:cf:88:be:bc:56:d5:e0:65:ea:db:11:
         b5:73:11:0d:3a:89:f8:08:36:a4:bd:9d:a1:c5:5c:d6:2c:fa:
         ed:b8:9c:9e:f7:75:66:24:b5:f9:ad:5c:11:24:98:6b:75:45:
         18:e1:21:c0:87:0b:75:03:2b:8a:75:28:8a:87:75:49:c6:37:
         13:a1:de:72:37:ec:d0:be:2b:a0:5e:34:91:ad:5f:95:77:0e:
         a6:f8:3f:0b:1c:c8:ca:74:b0:00:da:77:e4:4c:9c:8f:96:3f:
         8c:21:49:45:a1:b5:05:13:3a:d8:c7:2e:31:2c:83:f0:62:34:
         e7:89:0e:37:9e:09:ad:f1:fc:01:02:fe:5e:3f:c8:88:15:81:
         76:f2:57:f1:e1:67:5d:b0:0d:46:e4:21:af:1d:16:91:e9:b4:
         e7:57:39:2f
-----BEGIN CERTIFICATE-----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