Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/35992ec4-082b-3738-ab78-e4ba97a2fb0a.roa
File:                     35992ec4-082b-3738-ab78-e4ba97a2fb0a.roa (raw, json)
Hash identifier:          S7vXJ4/Nt8ksZgD1ysrGz8bb5XreCeO060r14adycnk=
Subject key identifier:   EB:66:41:C2:EB:D1:1B:04:9E:98:35:B8:96:58:12:AD:10:8A:93:AE
Certificate issuer:       /CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
Certificate serial:       010D0C9F43285839D3A9F317E396C3B2E956D847
Authority key identifier: 17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/35992ec4-082b-3738-ab78-e4ba97a2fb0a.roa
Signing time:             Thu 21 May 2020 04:00:00 +0000
ROA not before:           Thu 21 May 2020 04:00:00 +0000
ROA not after:            Tue 08 Aug 2023 04:00:00 +0000
asID:                     12129
IP address blocks:        2602:80a:2000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:d3:a9:f3:17:e3:96:c3:b2:e9:56:d8:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
        Validity
            Not Before: May 21 04:00:00 2020 GMT
            Not After : Aug  8 04:00:00 2023 GMT
        Subject: CN=ecdfe30e-a0ea-4af7-aae9-cc874dcd7a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:57:c6:15:ca:01:0a:60:fd:3a:f5:7b:bf:b9:
                    f1:9d:d2:05:fe:0f:75:73:ff:8d:c1:d2:4a:2a:98:
                    e8:28:10:fd:cd:3b:cf:e6:82:f4:db:60:a3:b7:fe:
                    ce:0f:8b:83:6b:37:a0:e0:f9:c7:04:69:db:c7:84:
                    4f:24:19:42:77:f5:45:b5:fa:2b:e3:64:35:9d:37:
                    6b:c0:93:eb:84:da:34:fc:57:b1:6b:3d:31:ca:1e:
                    e6:8f:f0:65:8f:c1:5e:f2:ee:8a:43:eb:32:a1:8d:
                    13:19:bc:f2:bc:17:fe:c1:45:60:b8:c1:58:00:e9:
                    9b:cf:17:0c:d2:78:44:5f:0b:88:57:c8:1a:a9:9f:
                    9e:66:15:8d:45:24:96:d8:df:33:5f:84:fe:ba:95:
                    a4:a3:51:ff:ba:8b:d6:4c:9c:76:80:ed:02:f1:73:
                    cc:44:ac:5f:33:e5:74:82:1b:d8:80:f4:62:dd:43:
                    76:bd:41:d3:31:e6:22:36:c1:34:86:c0:8e:37:f9:
                    47:b7:97:90:0c:92:dd:6e:54:5e:c9:0f:91:f1:6d:
                    0b:a8:69:6e:c2:ee:ad:e6:78:17:fe:1f:ec:06:d0:
                    7c:f8:cd:c4:b4:52:be:64:5d:07:ff:cc:a5:cd:af:
                    14:82:93:16:d7:2f:8c:fa:67:9b:a1:50:f1:32:8e:
                    f0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:66:41:C2:EB:D1:1B:04:9E:98:35:B8:96:58:12:AD:10:8A:93:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/35992ec4-082b-3738-ab78-e4ba97a2fb0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl

            X509v3 Authority Key Identifier:
                keyid:17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:92:9a:e1:07:c2:5e:d2:1e:a6:93:f2:80:f2:5b:bd:5e:0e:
         6a:d3:64:0a:db:81:23:02:8a:52:1a:e3:1b:51:b3:8b:12:99:
         5d:28:02:e0:e8:bf:f1:7d:51:39:4a:9c:c0:9d:e7:43:5e:08:
         5e:e5:28:8b:a7:5a:b6:cd:a3:2b:b3:13:eb:7b:86:de:f2:0e:
         fe:e6:73:3c:bf:e0:61:c6:aa:65:4f:f0:b1:65:fe:13:ea:17:
         5f:94:ab:38:22:76:38:48:11:ec:0e:fd:ca:47:d3:e2:1b:fd:
         bc:6c:58:7f:0e:8f:ac:44:41:a4:79:d4:be:e9:1b:6b:7b:f9:
         5c:a1:79:49:33:3b:76:de:b9:79:6c:a8:99:53:fe:a8:c6:bb:
         ce:eb:c3:18:ca:fa:e9:46:38:19:c1:9c:8e:02:49:b0:da:db:
         4b:63:12:f5:df:13:22:37:87:4a:03:63:3a:71:e0:33:3a:21:
         2f:26:59:4f:4e:d2:33:25:8c:87:74:d5:a2:16:0a:ab:bd:12:
         cb:6c:a8:39:aa:f7:33:ea:18:10:fb:dd:d8:5d:e7:2d:b8:9e:
         64:e7:d2:55:96:a3:1d:45:07:53:c6:e3:46:b4:29:8f:bf:cb:
         ae:13:a6:7c:72:66:3c:b5:9d:c4:b6:a5:5c:db:ca:bc:37:5f:
         89:4d:a1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----