Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/0e5d0aa2-8c1a-3a0f-9399-5cddcd94fe07.roa
File:                     0e5d0aa2-8c1a-3a0f-9399-5cddcd94fe07.roa (raw, json)
Hash identifier:          dOrsgmxFUcfitloCnv8+nwfy/464Eb3eHZMZJ0W8H/o=
Subject key identifier:   4B:D6:71:3B:91:27:B7:4F:EE:83:70:D1:92:DE:E2:CD:E9:5F:82:66
Certificate issuer:       /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
Certificate serial:       010D0C9F43285842A7CD339969E44B02C1A84D80
Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/0e5d0aa2-8c1a-3a0f-9399-5cddcd94fe07.roa
Signing time:             Mon 24 Jul 2023 17:58:43 +0000
ROA not before:           Mon 24 Jul 2023 17:58:43 +0000
ROA not after:            Sun 22 Oct 2023 17:58:43 +0000
asID:                     199656
IP address blocks:        2602:814:f000::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:a7:cd:33:99:69:e4:4b:02:c1:a8:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
        Validity
            Not Before: Jul 24 17:58:43 2023 GMT
            Not After : Oct 22 17:58:43 2023 GMT
        Subject: CN=62de378c-6fb7-40fb-9f8d-6045d88b67ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c7:9a:72:92:de:07:e7:50:bf:e0:78:b4:75:
                    22:18:32:4c:d5:9c:1d:dd:ca:24:43:84:92:e6:a8:
                    10:26:fc:df:b6:8a:85:67:84:8e:39:f7:14:eb:48:
                    8d:a5:19:f5:9e:63:5a:2b:b7:12:2e:2f:4f:8d:93:
                    5c:0a:ff:46:5f:ac:8d:2e:32:07:cd:42:97:53:69:
                    7b:e4:b6:57:40:f8:8c:bc:c7:19:87:c3:ae:15:43:
                    6c:f2:27:27:ec:78:e9:2b:6c:24:1d:89:a9:bb:5b:
                    6e:58:54:0e:a0:dd:c4:d0:90:99:49:c9:ba:ca:2a:
                    4f:78:cf:40:01:a8:14:ac:d2:71:af:05:a9:72:30:
                    be:dc:b3:ff:93:15:d3:48:54:54:c5:b1:25:d3:53:
                    66:42:c9:a6:2c:c2:72:1e:60:dd:f6:06:b8:8e:26:
                    2d:28:16:aa:00:55:69:1c:3d:bb:49:e1:80:97:9d:
                    67:16:a3:26:bd:4e:5b:5c:f2:b1:71:73:b4:5a:6b:
                    c3:29:e0:45:03:fd:7b:a2:13:da:25:8d:7e:d3:65:
                    3c:23:78:54:70:c6:93:34:41:90:96:ad:7c:4e:16:
                    51:43:5a:f8:92:94:e9:2c:a9:fb:ae:92:9f:c2:d4:
                    52:b3:ba:41:4c:bb:7e:2a:45:a0:00:38:a6:06:c5:
                    ec:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D6:71:3B:91:27:B7:4F:EE:83:70:D1:92:DE:E2:CD:E9:5F:82:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/0e5d0aa2-8c1a-3a0f-9399-5cddcd94fe07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl

            X509v3 Authority Key Identifier:
                keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:f000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:4b:07:67:29:15:7d:4b:fa:27:cb:f5:c7:8b:ca:f2:44:64:
         66:6b:4b:f3:d9:2d:b1:50:ec:5e:8a:44:6e:54:06:e7:00:6d:
         79:b1:27:68:c5:7c:80:f4:0d:4c:6c:23:8c:81:09:89:be:45:
         72:1e:ef:eb:81:a1:1f:86:97:4a:5c:4b:15:a1:40:50:f3:01:
         d2:18:b3:f3:98:4a:2e:5c:a5:2e:a8:d8:cf:08:9f:65:4a:50:
         ee:b4:c3:87:af:c2:45:36:8d:25:30:39:46:0f:1a:f1:a2:f0:
         9f:39:e2:42:46:57:90:7e:d1:97:8c:ad:a2:63:c0:6d:f4:d6:
         f6:84:13:ce:58:39:81:cb:45:6f:e2:81:b4:61:49:fc:b1:9c:
         e8:27:35:89:9c:48:f3:4b:cc:64:78:fe:76:54:e9:98:15:12:
         80:3c:1f:a9:51:0d:0e:ca:00:19:9d:f7:9a:c2:be:32:96:8c:
         98:b7:51:3d:0b:a8:43:12:c4:bf:4b:bb:32:8e:31:f9:43:31:
         12:a6:d2:6f:85:a9:d4:44:38:a0:d2:d1:32:f1:17:19:8d:29:
         0e:55:4a:b5:e0:29:53:ee:66:ff:56:53:6f:da:c4:05:de:31:
         4b:06:09:03:c3:f8:ef:e6:33:a6:21:d7:b8:27:ca:40:e5:f0:
         1e:56:df:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----