Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/92713a0b-7026-36a2-a349-bae45b93a2f8.roa
File:                     92713a0b-7026-36a2-a349-bae45b93a2f8.roa (raw, json)
Hash identifier:          XpyTC/c+3f3p2Qh3M0NbVJtcc87iWV6ZIp/Db/EJ/gg=
Subject key identifier:   05:E4:F4:EE:7D:74:16:A5:1F:2C:9B:A0:53:A5:1F:7E:10:F8:07:FD
Certificate issuer:       /CN=733a751b-f4f7-4986-8389-8938fc4a481d
Certificate serial:       010D0C9F432858446C1479071CBA275E16315B39
Authority key identifier: DE:D0:12:81:EE:5E:86:76:82:0F:04:E7:78:FE:09:C6:EE:75:69:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/92713a0b-7026-36a2-a349-bae45b93a2f8.roa
Signing time:             Tue 02 Jan 2024 18:07:41 +0000
ROA not before:           Tue 02 Jan 2024 18:07:41 +0000
ROA not after:            Mon 01 Apr 2024 17:07:41 +0000
asID:                     20473
IP address blocks:        2602:816:f000::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:6c:14:79:07:1c:ba:27:5e:16:31:5b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733a751b-f4f7-4986-8389-8938fc4a481d
        Validity
            Not Before: Jan  2 18:07:41 2024 GMT
            Not After : Apr  1 17:07:41 2024 GMT
        Subject: CN=5ea89435-f1ae-411e-944b-b0b8e2119731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0a:b7:fd:42:e4:0d:88:6e:f9:46:90:99:20:
                    d3:f3:f1:68:76:d7:7b:d7:c5:fc:1b:ba:6b:24:ce:
                    1a:7d:cc:1a:64:34:e8:64:7f:11:47:0a:c4:29:7f:
                    06:db:18:0f:ac:20:82:40:a0:76:4e:cf:fe:f7:3b:
                    74:6a:f1:29:04:3d:89:17:a8:42:d0:4d:54:88:60:
                    a7:23:7c:a7:6a:8d:af:33:e9:c2:5f:83:08:38:85:
                    ba:61:6e:f8:54:40:1e:04:31:57:5a:b2:44:a4:54:
                    f3:63:ec:6f:e7:99:d9:37:1e:2f:05:6a:c3:8d:55:
                    ba:53:cb:ae:27:d9:24:3a:34:92:04:9a:5d:77:a5:
                    5e:a6:1d:e6:92:4a:2b:48:6b:b6:f2:3d:42:1e:51:
                    94:15:52:c9:e3:80:d8:44:ea:3b:52:87:59:fa:07:
                    5b:db:1b:41:22:2d:c3:a2:cf:12:62:04:e3:e8:c1:
                    24:d7:c8:f1:9e:1c:56:2d:21:32:4d:be:73:42:aa:
                    19:7a:77:ee:49:96:1e:4e:e3:5b:14:3f:8b:b8:29:
                    71:d1:85:6b:48:c6:7e:4f:ff:b4:f8:44:92:56:7f:
                    2b:a2:e7:7c:40:26:be:43:54:c3:f4:bc:50:f8:8b:
                    b1:02:2c:06:f8:51:8b:25:ff:f1:11:dc:60:d1:58:
                    a4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E4:F4:EE:7D:74:16:A5:1F:2C:9B:A0:53:A5:1F:7E:10:F8:07:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/92713a0b-7026-36a2-a349-bae45b93a2f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/733a751b-f4f7-4986-8389-8938fc4a481d.crl

            X509v3 Authority Key Identifier:
                keyid:DE:D0:12:81:EE:5E:86:76:82:0F:04:E7:78:FE:09:C6:EE:75:69:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:816:f000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:1e:8b:42:7a:36:93:21:05:3e:91:75:52:3d:88:4e:cd:53:
         4b:df:da:72:cf:76:60:d2:fc:3b:07:df:11:9a:d4:6b:57:c9:
         f8:27:ce:91:02:8a:3f:48:ac:87:34:dc:8f:bd:30:3a:18:da:
         50:da:33:95:6b:82:92:13:6c:0f:6d:e1:98:c9:fd:79:6e:3b:
         cc:57:94:83:29:9f:87:81:6c:7b:6f:b5:a6:95:0a:b9:fa:8a:
         ea:38:95:00:33:e2:f2:87:9d:81:6c:4d:a1:79:3f:de:9f:bd:
         23:4f:04:9f:16:3c:c7:e9:58:03:6e:b0:c9:7e:98:b0:3a:13:
         f9:44:66:2a:dc:3c:c0:36:9f:f1:ba:74:dd:2e:ff:4f:a2:d8:
         6d:cd:4c:5c:06:6f:5a:ba:39:df:55:24:7e:1f:5f:38:18:d2:
         42:a7:34:43:78:e4:2a:a4:45:ef:f4:ad:81:d9:c9:8b:98:e4:
         5f:36:fc:0e:e6:b9:ba:5f:0b:61:d9:5a:f7:5b:77:69:3e:27:
         76:64:6a:89:d2:98:d9:2f:ff:61:79:0d:48:31:a5:96:9f:07:
         92:d3:af:30:da:35:34:47:6b:2d:6d:d9:38:2d:13:b8:21:fd:
         8b:67:fa:4e:1d:2e:c8:e8:d3:fe:75:94:65:16:c3:c8:84:86:
         96:e3:c4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----