Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/10471d64-f299-389f-b863-eda6e5ad2393.roa
File:                     10471d64-f299-389f-b863-eda6e5ad2393.roa (raw, json)
Hash identifier:          3MYue2LlhtraX4LP6lRpF7UW6MPEmKFQfrGPXDjKkjA=
Subject key identifier:   1B:D3:B8:CD:4D:D7:7A:5A:91:3F:3E:D9:EB:AB:83:E6:86:F1:CF:F9
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F43285837D7E3B1BA69D1DE3402D3FA80
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/10471d64-f299-389f-b863-eda6e5ad2393.roa
Signing time:             Tue 11 Aug 2020 04:00:00 +0000
ROA not before:           Tue 11 Aug 2020 04:00:00 +0000
ROA not after:            Mon 11 Aug 2025 04:00:00 +0000
asID:                     62513
IP address blocks:        2602:fd50:100::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d7:e3:b1:ba:69:d1:de:34:02:d3:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Aug 11 04:00:00 2020 GMT
            Not After : Aug 11 04:00:00 2025 GMT
        Subject: CN=e376cab0-3a4a-4a65-bb51-0f363ff82376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a2:fb:f3:c2:5d:8f:69:2e:dd:80:9b:f0:e4:
                    b5:72:3f:32:0a:92:42:b9:7a:24:91:bf:ec:f4:50:
                    e7:b0:aa:2d:52:90:35:aa:6f:ef:43:29:5f:97:a2:
                    b2:20:c4:94:3f:3f:27:47:c1:8f:e2:3e:e3:fe:c8:
                    5c:2a:7e:35:f8:8a:6b:2b:e1:2a:55:b5:84:3a:7d:
                    01:71:0d:ab:ab:e1:c5:6a:7a:32:80:39:a8:2b:f3:
                    34:07:33:d4:e0:69:f0:86:b2:51:8b:f5:c3:60:f0:
                    fe:32:2e:5f:0c:ed:45:c0:0b:b6:19:ee:94:47:e3:
                    58:af:3a:f0:a5:0f:83:00:12:57:ca:c9:19:0f:fb:
                    8a:62:ea:dc:1e:af:46:af:96:c9:35:f3:da:2e:78:
                    1e:4b:84:08:e7:74:30:0d:94:4f:1f:dc:32:f6:c5:
                    28:3d:6b:6e:f3:d7:ec:42:2d:9a:ce:1b:ca:64:1a:
                    4e:7c:f7:4b:5f:f1:c7:a6:41:64:36:6b:d1:ea:d7:
                    2b:ce:0e:c8:40:8f:d8:33:f6:20:08:b3:6f:82:04:
                    b2:57:ec:15:f9:96:ac:f0:60:b0:8c:13:34:50:28:
                    f9:ed:5f:56:eb:af:6d:4b:92:77:9c:c5:d3:64:5a:
                    d8:1d:3f:74:9d:96:74:ee:8b:30:33:87:98:c9:b4:
                    69:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D3:B8:CD:4D:D7:7A:5A:91:3F:3E:D9:EB:AB:83:E6:86:F1:CF:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/10471d64-f299-389f-b863-eda6e5ad2393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd50:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:f1:61:7c:f3:37:80:51:fe:8e:ab:32:d0:9c:08:ff:4f:73:
         39:f7:6f:00:50:15:a3:0a:cc:46:aa:41:ba:1e:f6:dd:3b:31:
         0c:a0:f6:2b:d4:34:f8:af:70:6b:d9:d0:9c:ce:22:12:f6:47:
         3d:3e:69:49:42:06:93:32:b2:19:3c:10:5b:c0:56:89:70:70:
         13:b8:d8:dd:5a:be:9e:ab:6f:0e:59:66:b9:73:6e:98:08:c4:
         7f:dd:32:84:13:28:3d:ed:25:f2:8d:17:25:05:56:f3:09:5a:
         d9:2f:e4:0a:69:69:96:46:17:e5:28:7b:0d:7b:1a:8b:b7:d8:
         ea:c2:51:9f:72:1f:af:51:65:eb:a6:ec:e3:6d:24:f9:be:ad:
         76:8f:4f:dd:1b:9a:9b:77:63:6a:3a:36:0e:ec:24:ec:41:a0:
         07:e7:ae:c9:29:50:d5:76:42:ef:10:53:fd:e6:a5:a0:29:5f:
         9e:b7:8b:c0:28:86:bd:a5:8a:7b:2b:a1:16:9c:db:ed:e8:4b:
         1d:09:29:b5:21:65:0f:13:58:49:01:61:ef:a1:4c:2f:36:1d:
         5c:f1:18:f7:fe:5d:b6:ef:1e:ad:a6:38:41:15:3d:24:56:8d:
         01:c5:7b:99:62:bb:60:93:58:2d:a0:fe:2e:a7:4f:1e:67:4c:
         c5:0e:31:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----