Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/f1c33010-2a68-3fdb-bab1-bc31d11e3e6b.roa
File:                     f1c33010-2a68-3fdb-bab1-bc31d11e3e6b.roa (raw, json)
Hash identifier:          3BO6zJGirv4p2EuCFIwpqq13rnZ0Ppwrzkjj4PoOix0=
Subject key identifier:   16:5E:4C:17:EC:06:1D:A1:6D:D2:84:46:70:79:C7:6A:BD:97:32:CF
Certificate issuer:       /CN=127554ab-f00f-4fb5-b5e3-6fc443aa30ed
Certificate serial:       010D0C9F43285842B263DA9E767BD5BB617D4D40
Authority key identifier: FB:07:BF:2F:8D:D0:E4:55:B4:5B:26:B3:7F:A2:2F:2F:0C:68:BD:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/f1c33010-2a68-3fdb-bab1-bc31d11e3e6b.roa
Signing time:             Fri 28 Jul 2023 13:00:19 +0000
ROA not before:           Fri 28 Jul 2023 13:00:19 +0000
ROA not after:            Thu 26 Oct 2023 13:00:19 +0000
asID:                     62833
IP address blocks:        2600:cc0c:e000::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b2:63:da:9e:76:7b:d5:bb:61:7d:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127554ab-f00f-4fb5-b5e3-6fc443aa30ed
        Validity
            Not Before: Jul 28 13:00:19 2023 GMT
            Not After : Oct 26 13:00:19 2023 GMT
        Subject: CN=e64e0a5b-1c2a-4b1d-ae98-66693bf5c8c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:32:24:6e:5b:4b:c0:aa:66:ef:3a:74:cf:30:
                    88:ea:23:38:f7:29:48:37:5c:fd:b3:11:e1:a7:43:
                    e7:d5:0c:9b:be:2e:f8:16:03:36:ab:0b:9f:0c:ad:
                    13:19:48:6e:b0:cc:41:57:5e:21:65:1f:96:2b:93:
                    4e:5d:6d:2f:56:55:15:b9:d7:9f:c6:63:0e:d5:1b:
                    12:b7:8c:71:fe:87:7d:8c:d1:d6:a0:0f:29:b2:e4:
                    85:dc:c2:ac:3c:1d:64:a4:94:9d:a0:73:ba:10:b1:
                    8f:58:b0:92:b5:85:15:81:e3:2b:3a:39:52:44:2a:
                    fa:00:5f:f4:37:06:9b:39:95:1b:86:ab:ba:1c:1e:
                    77:a5:72:2a:12:39:25:0d:f6:bc:38:a9:2c:92:37:
                    f8:15:c4:84:fd:cb:f2:e1:9d:0d:aa:8a:f6:ff:a4:
                    a0:21:6b:14:bb:97:ea:04:87:b0:5a:cd:24:3f:03:
                    0f:58:03:b1:fe:0d:4e:66:4d:87:e1:35:d9:21:c7:
                    b1:d9:cf:df:5b:7d:b6:ef:41:48:5d:3b:c8:82:87:
                    41:00:60:06:46:4e:54:70:c8:7b:08:fe:fa:e8:41:
                    5b:5a:61:73:41:fb:39:3b:7c:26:99:93:71:f9:59:
                    b1:c3:c1:2e:c6:2d:b4:c2:87:0a:20:33:6b:a3:75:
                    dd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5E:4C:17:EC:06:1D:A1:6D:D2:84:46:70:79:C7:6A:BD:97:32:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/f1c33010-2a68-3fdb-bab1-bc31d11e3e6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.crl

            X509v3 Authority Key Identifier:
                keyid:FB:07:BF:2F:8D:D0:E4:55:B4:5B:26:B3:7F:A2:2F:2F:0C:68:BD:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:cc0c:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:00:0f:59:ba:7b:57:9f:11:23:22:79:60:05:7a:a9:90:d3:
         1a:a9:42:a9:4e:6b:d3:7b:c2:d0:d6:42:de:bb:8c:96:64:68:
         00:be:fc:da:09:e2:1c:b5:92:d6:70:a3:89:c8:3f:d3:e7:a5:
         29:4d:ba:ec:dd:0f:f9:e5:2f:01:0e:e2:c2:6b:2c:69:95:8a:
         c5:cb:f3:69:be:a3:f5:57:09:54:64:83:85:84:d3:e4:bd:d2:
         a0:a3:d8:d9:4c:b6:45:98:a4:39:75:a4:3a:ff:1c:65:a9:4a:
         b3:f0:1b:ca:cc:2c:43:14:d5:d0:63:5b:a0:6b:2e:1b:cc:70:
         a0:1b:77:26:67:f6:ec:8c:7c:ad:d7:d8:42:31:40:c6:38:c6:
         d2:00:c0:a5:52:4e:c4:87:5b:da:77:97:ed:4d:7b:fd:f4:51:
         58:dd:d7:ce:55:98:38:0a:c8:17:5e:33:82:95:b0:8a:fe:4d:
         80:a2:fc:70:0a:b8:c7:92:14:30:23:fd:cd:ce:55:ed:24:ab:
         53:51:85:23:e1:d6:d0:69:46:52:82:1b:33:ce:98:62:2c:23:
         4e:83:b0:ec:ec:af:d9:c6:08:08:5e:5c:28:57:1d:8e:71:fb:
         70:e9:53:9b:13:94:7f:6a:02:3c:c4:7b:96:e5:cc:2a:00:36:
         bd:90:fd:af
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEKyY9qednvVu2F9TUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTI3NTU0YWItZjAwZi00ZmI1LWI1ZTMtNmZjNDQzYWEz
MGVkMB4XDTIzMDcyODEzMDAxOVoXDTIzMTAyNjEzMDAxOVowLzEtMCsGA1UEAxMk
ZTY0ZTBhNWItMWMyYS00YjFkLWFlOTgtNjY2OTNiZjVjOGM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjIkbltLwKpm7zp0zzCI6iM49ylIN1z9sxHh
p0Pn1Qybvi74FgM2qwufDK0TGUhusMxBV14hZR+WK5NOXW0vVlUVudefxmMO1RsS
t4xx/od9jNHWoA8psuSF3MKsPB1kpJSdoHO6ELGPWLCStYUVgeMrOjlSRCr6AF/0
NwabOZUbhqu6HB53pXIqEjklDfa8OKkskjf4FcSE/cvy4Z0Nqor2/6SgIWsUu5fq
BIewWs0kPwMPWAOx/g1OZk2H4TXZIcex2c/fW32270FIXTvIgodBAGAGRk5UcMh7
CP766EFbWmFzQfs5O3wmmZNx+Vmxw8Euxi20wocKIDNro3XdcwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBZeTBfsBh2hbdKERnB5x2q9lzLPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMjc1
NTRhYi1mMDBmLTRmYjUtYjVlMy02ZmM0NDNhYTMwZWQvZjFjMzMwMTAtMmE2OC0z
ZmRiLWJhYjEtYmMzMWQxMWUzZTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTI3NTU0YWItZjAwZi00ZmI1LWI1
ZTMtNmZjNDQzYWEzMGVkLzEyNzU1NGFiLWYwMGYtNGZiNS1iNWUzLTZmYzQ0M2Fh
MzBlZC5jcmwwHwYDVR0jBBgwFoAU+we/L43Q5FW0Wyazf6IvLwxovcIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMjc1NTRhYi1mMDBmLTRmYjUtYjVlMy02ZmM0
NDNhYTMwZWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgDMDOAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEANAAPWbp7V58RIyJ5YAV6qZDTGqlCqU5r03vC0NZC3ruMlmRoAL78
2gniHLWS1nCjicg/0+elKU267N0P+eUvAQ7iwmssaZWKxcvzab6j9VcJVGSDhYTT
5L3SoKPY2Uy2RZikOXWkOv8cZalKs/AbyswsQxTV0GNboGsuG8xwoBt3Jmf27Ix8
rdfYQjFAxjjG0gDApVJOxIdb2neX7U17/fRRWN3XzlWYOArIF14zgpWwiv5NgKL8
cAq4x5IUMCP9zc5V7SSrU1GFI+HW0GlGUoIbM86YYiwjToOw7Oyv2cYICF5cKFcd
jnH7cOlTmxOUf2oCPMR7luXMKgA2vZD9rw==
-----END CERTIFICATE-----