Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/846a0172-c2de-319c-8d3c-0821de52d58e.roa
File:                     846a0172-c2de-319c-8d3c-0821de52d58e.roa (raw, json)
Hash identifier:          KZX1qBwt7E2m1011qZqdZ/l8GWGvPwjR88obNxeJwF0=
Subject key identifier:   24:CC:4B:E4:4E:DE:67:52:C7:23:E8:F6:68:2E:E8:8D:E1:49:26:88
Certificate issuer:       /CN=7e4eda42-1b89-4124-8a06-63381278375d
Certificate serial:       010D0C9F4328583861EDEAB03451B77B7D066880
Authority key identifier: 8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/846a0172-c2de-319c-8d3c-0821de52d58e.roa
Signing time:             Wed 16 Sep 2020 04:00:00 +0000
ROA not before:           Wed 16 Sep 2020 04:00:00 +0000
ROA not after:            Wed 01 Jan 2025 05:00:00 +0000
asID:                     398646
IP address blocks:        2602:fe6b:1020::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:61:ed:ea:b0:34:51:b7:7b:7d:06:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4eda42-1b89-4124-8a06-63381278375d
        Validity
            Not Before: Sep 16 04:00:00 2020 GMT
            Not After : Jan  1 05:00:00 2025 GMT
        Subject: CN=a202399d-eb45-4ac3-bf29-e4cc0da947c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f5:95:55:13:6b:3c:20:4e:73:35:c4:e9:cc:
                    ad:d2:05:b5:75:b4:86:be:75:cb:7d:12:73:2f:9b:
                    fb:01:fd:b6:95:53:c9:d4:66:28:9a:6e:f6:07:fc:
                    36:04:75:2f:fb:37:53:2c:6e:63:c9:f9:74:59:77:
                    1d:31:1d:e4:df:d5:0a:3d:bb:03:ba:ad:3a:8f:34:
                    6e:9c:d0:68:1a:91:cc:60:cc:a9:f8:38:43:08:6c:
                    bf:4a:b6:f0:1d:0e:d3:1a:38:ec:66:5a:cf:2e:30:
                    e0:25:dc:e6:1a:d4:a6:32:5f:ca:b9:69:4b:8d:d1:
                    db:ab:28:2d:d0:ca:86:2c:e8:a8:2a:e3:a8:02:31:
                    17:0e:f4:50:82:48:fd:38:0a:00:6f:24:43:38:e2:
                    31:21:a2:25:25:6a:00:33:d5:bc:3d:ff:bd:0a:df:
                    a1:df:01:78:e9:02:69:6e:3a:af:d1:b7:13:06:9c:
                    7b:89:b3:c8:bc:da:d7:39:bc:fa:e3:f4:79:c6:cc:
                    12:c1:bc:96:17:f0:bc:54:0b:bf:cc:22:11:64:25:
                    e0:21:05:b4:43:dd:17:e8:5d:30:07:23:b2:32:79:
                    36:45:c2:f7:54:83:05:72:72:42:76:09:c8:32:ba:
                    c4:bc:09:38:1e:0c:9c:8c:0a:a8:5e:ba:f0:e2:b3:
                    32:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CC:4B:E4:4E:DE:67:52:C7:23:E8:F6:68:2E:E8:8D:E1:49:26:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/846a0172-c2de-319c-8d3c-0821de52d58e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl

            X509v3 Authority Key Identifier:
                keyid:8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe6b:1020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:76:b3:f4:11:29:d7:ba:c4:e6:c8:39:85:b4:2d:f8:43:52:
         36:22:fa:ad:22:d4:3d:7a:e4:e2:8f:35:4a:5e:e3:f3:e4:f3:
         16:1a:c9:65:f1:1c:2e:96:12:14:11:be:8c:f6:21:6f:5e:78:
         b9:6a:06:84:da:23:ec:4c:c2:94:01:27:71:bb:d9:a3:96:d7:
         ea:da:a6:2d:47:af:70:06:da:8e:9c:93:0c:20:62:22:9a:b7:
         ca:14:f8:9b:0e:44:2a:ec:f6:eb:d8:31:ba:d0:c9:03:d8:3b:
         ff:14:4b:3e:8b:6c:14:16:15:c3:13:2b:bf:7b:32:0e:a9:61:
         b8:01:f1:02:81:e0:ce:80:41:af:0e:33:ad:cd:05:6b:ba:5b:
         d2:3e:0e:47:96:7c:3f:42:e8:e3:da:43:80:49:de:cb:dd:2f:
         1a:60:9b:b5:b5:67:0a:37:40:0f:33:a9:81:79:5a:2b:41:17:
         d8:3c:27:71:01:04:de:10:95:62:68:f2:6e:00:59:10:8d:95:
         c8:2d:14:4d:d6:c0:55:0f:10:ef:9d:ef:ac:a6:bd:a1:be:ec:
         a2:51:29:23:51:9e:59:12:ec:b1:00:b8:d2:de:7e:7d:29:65:
         19:49:dc:6a:c6:31:5d:7b:c0:3d:e3:52:d9:d6:ae:b4:23:ef:
         db:15:bf:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----