Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b566ce9f-e3cc-460b-b121-95e5f4415e64/a609a85a-d8a0-3e6c-bf91-8c14db565d97.roa
File:                     a609a85a-d8a0-3e6c-bf91-8c14db565d97.roa (raw, json)
Hash identifier:          H13Zg7+4bBqv5dDj7eE6Luk84tMxXbYvSS736sqOImk=
Subject key identifier:   B2:16:DE:94:69:6C:06:34:EA:04:C6:82:CD:40:AA:64:C2:73:E6:FA
Certificate issuer:       /CN=b566ce9f-e3cc-460b-b121-95e5f4415e64
Certificate serial:       010D0C9F4328583DC74998145CE6BAB0A51FC130
Authority key identifier: F9:57:AF:7C:0E:B3:5E:48:B7:3C:D0:C8:A6:66:21:B7:21:FD:9C:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b566ce9f-e3cc-460b-b121-95e5f4415e64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b566ce9f-e3cc-460b-b121-95e5f4415e64/a609a85a-d8a0-3e6c-bf91-8c14db565d97.roa
Signing time:             Mon 02 May 2022 11:37:00 +0000
ROA not before:           Mon 02 May 2022 11:37:00 +0000
ROA not after:            Sat 20 Apr 2030 04:00:00 +0000
asID:                     16509
IP address blocks:        2602:fb7b::/36 maxlen: 36

Validation:               Failed, certificate revoked on Tue 03 May 2022 19:44:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c7:49:98:14:5c:e6:ba:b0:a5:1f:c1:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b566ce9f-e3cc-460b-b121-95e5f4415e64
        Validity
            Not Before: May  2 11:37:00 2022 GMT
            Not After : Apr 20 04:00:00 2030 GMT
        Subject: CN=72df3724-ca19-4cf8-8031-cb86f637b269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3a:bd:67:e5:62:7e:f5:02:9b:db:30:8d:ea:
                    af:35:60:83:7c:da:68:22:45:cc:6e:20:62:a2:42:
                    7c:c2:d2:f5:e2:62:bf:ab:fb:33:70:01:6f:05:50:
                    f8:2d:80:0b:ab:6e:29:f3:77:e3:96:85:af:93:42:
                    c6:01:eb:eb:2f:96:3b:de:78:68:58:d6:c1:52:85:
                    af:33:ed:82:f1:09:ff:ec:06:9c:e4:90:fa:67:fb:
                    12:4e:8b:86:39:aa:19:a2:56:18:f5:0c:34:3c:8d:
                    20:ff:69:37:a6:d6:6a:5b:ca:cc:88:aa:3f:07:70:
                    d4:7f:e5:8d:47:e4:1c:3f:59:cc:d6:a8:79:82:21:
                    15:bf:3f:50:7f:ea:84:a4:5b:cc:9a:67:dc:7e:74:
                    67:d2:a7:4b:5d:9f:1f:43:4d:5e:97:3a:01:8d:9d:
                    56:6f:3a:85:8f:51:b4:47:9b:6a:26:07:40:84:aa:
                    b0:4e:66:30:d1:a5:50:39:1c:40:19:98:2b:02:5b:
                    2e:07:5d:77:2d:60:f9:16:4f:07:53:31:38:e5:ab:
                    83:e9:a4:86:7c:fb:1d:bb:5a:36:50:bc:df:69:80:
                    df:c6:33:58:95:a9:84:78:5a:7d:3a:63:22:f9:bc:
                    2a:01:9a:84:98:3b:85:01:1d:60:a9:13:e0:7f:8d:
                    b4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:16:DE:94:69:6C:06:34:EA:04:C6:82:CD:40:AA:64:C2:73:E6:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b566ce9f-e3cc-460b-b121-95e5f4415e64/a609a85a-d8a0-3e6c-bf91-8c14db565d97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b566ce9f-e3cc-460b-b121-95e5f4415e64/b566ce9f-e3cc-460b-b121-95e5f4415e64.crl

            X509v3 Authority Key Identifier:
                keyid:F9:57:AF:7C:0E:B3:5E:48:B7:3C:D0:C8:A6:66:21:B7:21:FD:9C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b566ce9f-e3cc-460b-b121-95e5f4415e64.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb7b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:b4:db:3a:77:0e:56:87:3f:3f:47:d6:9d:e1:d5:c0:b5:48:
         46:d3:a5:5d:d6:7b:f8:fa:b7:0b:9b:7f:fc:cc:ed:a3:93:fa:
         5e:ba:20:ac:66:7a:cc:fc:e9:94:8b:1d:49:cf:6d:a0:21:88:
         c2:0c:db:18:34:22:00:16:71:e7:75:ec:58:37:38:79:54:01:
         47:cd:51:fa:58:53:11:d8:e8:7c:f8:f1:fe:9c:24:c4:0d:0a:
         0b:af:39:b8:8b:32:35:d0:ed:4c:5e:5d:63:e4:85:e0:a3:12:
         f8:0b:d3:29:25:2c:df:67:03:6a:bd:dc:96:c3:5e:ed:a2:c8:
         32:c9:a8:d6:65:17:72:bd:80:e8:19:5d:8d:ff:80:3f:7a:2c:
         53:d6:24:92:d4:7e:4b:ec:1f:0f:18:c0:3f:ef:08:b0:e2:71:
         cd:3d:c3:06:dc:c0:5d:af:5f:51:19:76:8c:fd:13:09:61:0b:
         82:74:dc:3f:64:f8:e8:6a:eb:7b:5f:21:65:6c:14:39:43:3d:
         bf:50:dc:e3:b7:d5:ee:f7:33:22:a8:29:01:23:33:22:a0:87:
         d4:29:c8:6a:17:b0:d7:8e:18:13:27:52:c3:a8:82:20:48:6e:
         c2:6e:79:b9:38:f6:55:2b:51:56:fa:fd:76:f2:7b:8e:5b:1d:
         4d:c5:68:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----