Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/b4a66563-be53-3455-864a-d1a64a2d6b85.roa
File:                     b4a66563-be53-3455-864a-d1a64a2d6b85.roa (raw, json)
Hash identifier:          d2ZRUXoI4dgD8kNKBIHWROqvtCn00IUMsPO+cok8NE4=
Subject key identifier:   53:CA:A2:4F:75:CD:C5:03:C6:BD:B5:3C:93:A1:BC:29:2D:66:67:38
Certificate issuer:       /CN=6cc439a1-f5ed-4937-b478-64da6b4fe887
Certificate serial:       010D0C9F43285841A712C76BFF72FB56D17F3D00
Authority key identifier: E7:83:AE:C7:57:FE:F1:A6:B6:C9:1C:98:59:EA:54:F2:4D:1E:59:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/b4a66563-be53-3455-864a-d1a64a2d6b85.roa
Signing time:             Tue 21 Mar 2023 12:00:00 +0000
ROA not before:           Tue 21 Mar 2023 12:00:00 +0000
ROA not after:            Mon 22 Mar 2027 04:00:00 +0000
asID:                     212643
IP address blocks:        2602:fd09::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 28 Apr 2023 14:56:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:a7:12:c7:6b:ff:72:fb:56:d1:7f:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc439a1-f5ed-4937-b478-64da6b4fe887
        Validity
            Not Before: Mar 21 12:00:00 2023 GMT
            Not After : Mar 22 04:00:00 2027 GMT
        Subject: CN=0f675188-0aba-4006-9467-51c7046898cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f8:50:06:fe:b6:2e:be:72:fa:e4:ac:be:62:
                    1c:86:8e:5d:33:d1:22:0f:5b:62:41:a6:4f:a1:c4:
                    59:7f:36:5c:06:ff:13:32:53:45:96:9c:b2:17:67:
                    bb:31:1f:47:5e:f3:83:6c:11:1c:23:51:10:2c:71:
                    b8:8f:2f:60:7b:a6:d1:73:33:dd:d2:9a:98:d2:e2:
                    56:cd:2d:52:5b:5a:02:7e:e7:bb:cb:a0:7b:49:6a:
                    8b:7f:68:dc:7d:fc:5d:f0:f8:a7:ff:36:0c:1a:30:
                    89:ce:95:8f:f2:51:ca:75:ca:7f:25:a3:38:2f:2e:
                    2f:21:d0:21:41:f7:5b:22:e0:4b:29:2a:d5:af:a7:
                    9a:97:64:21:e3:00:a6:6b:68:b3:d2:30:03:68:42:
                    4c:26:4d:17:90:ff:81:3c:3c:8d:ce:4b:7a:77:19:
                    b6:49:49:29:ce:16:2c:f9:62:3d:a2:4d:86:f9:b5:
                    84:dd:83:85:20:47:12:50:d4:53:f9:1c:94:8f:3d:
                    27:86:f5:65:6c:44:86:32:3a:30:4c:56:37:b9:b1:
                    df:76:f9:9c:aa:93:06:27:03:9a:20:6a:54:e3:8a:
                    2e:b3:fa:90:5d:13:a5:97:32:cd:92:48:61:d5:6e:
                    e9:bf:f0:18:92:46:08:91:ad:f3:0e:4e:b7:4a:58:
                    a3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CA:A2:4F:75:CD:C5:03:C6:BD:B5:3C:93:A1:BC:29:2D:66:67:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/b4a66563-be53-3455-864a-d1a64a2d6b85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.crl

            X509v3 Authority Key Identifier:
                keyid:E7:83:AE:C7:57:FE:F1:A6:B6:C9:1C:98:59:EA:54:F2:4D:1E:59:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd09::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:7d:af:b0:09:b1:e2:ac:0a:9a:32:d3:ff:10:ae:7e:d7:1d:
         d0:c5:8b:2c:e7:be:35:b3:9f:8d:3f:d6:48:6f:97:03:aa:5e:
         7b:aa:1d:7c:cc:b1:e5:e1:50:d8:67:86:a4:4e:7d:9a:0b:f2:
         7a:27:55:7f:5e:b0:2a:b1:b3:8c:c2:de:1a:67:d3:26:7c:74:
         c5:83:28:4c:8c:43:91:47:8d:57:48:88:53:99:b2:b4:f7:2f:
         c7:2f:18:d7:bd:e5:37:8e:74:96:a5:98:8a:cd:fd:1d:6f:14:
         cd:62:f0:3e:65:17:f4:3b:c7:ea:54:50:f0:13:85:92:06:05:
         45:36:28:18:d3:4d:5a:9b:2b:7c:0e:0d:c5:70:1c:22:40:06:
         ba:18:4c:b0:92:26:3c:3a:1b:d5:64:81:bd:08:62:30:b8:01:
         3a:7a:c7:a4:16:1f:38:41:3b:64:44:ff:6c:6d:8b:24:b4:e7:
         0e:9e:30:d0:4f:a1:ba:db:0b:94:b0:e7:31:e3:e2:0d:be:cc:
         c2:a0:05:a2:76:65:d8:79:d4:3e:8f:96:02:12:64:88:3e:63:
         31:be:26:c0:06:b0:fa:bf:83:7c:43:40:84:90:31:5f:0c:10:
         36:90:9f:72:7d:60:94:fb:fd:91:74:4c:1a:59:91:e4:62:fb:
         db:89:20:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----