Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/7eabc012-f18b-3f80-bc95-7519a0c2722a.roa
File:                     7eabc012-f18b-3f80-bc95-7519a0c2722a.roa (raw, json)
Hash identifier:          QzwnMpWuqZr6dFkuxC656RR+OMzFa9BA6usHzNa8oJA=
Subject key identifier:   BF:6B:E5:77:C4:EA:27:C7:CD:B2:20:58:65:56:BC:B2:F3:BB:8A:C9
Certificate issuer:       /CN=cf35609e-0e1f-484a-af8f-815006d97f11
Certificate serial:       010D0C9F432858433283CA2F0A5B070AF4ADB7C0
Authority key identifier: CE:9A:08:7C:21:06:9C:08:3D:C6:79:BA:DB:B2:28:34:71:1B:2F:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/7eabc012-f18b-3f80-bc95-7519a0c2722a.roa
Signing time:             Tue 12 Sep 2023 10:28:09 +0000
ROA not before:           Tue 12 Sep 2023 10:28:09 +0000
ROA not after:            Mon 11 Dec 2023 11:28:09 +0000
asID:                     14694
IP address blocks:        2602:fa5c::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:32:83:ca:2f:0a:5b:07:0a:f4:ad:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf35609e-0e1f-484a-af8f-815006d97f11
        Validity
            Not Before: Sep 12 10:28:09 2023 GMT
            Not After : Dec 11 11:28:09 2023 GMT
        Subject: CN=89e50db7-c425-4414-a513-7b7a69674de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c1:ce:e3:4c:d4:d8:cf:b9:be:5f:11:d7:d0:
                    f7:ee:e0:26:91:8e:47:75:5b:1f:2c:43:d2:51:be:
                    a7:bb:16:81:3b:be:44:31:fd:a6:ba:a1:73:b7:c6:
                    46:9c:c8:35:e5:79:28:84:0b:d9:64:c9:2c:c1:55:
                    8a:a2:cc:35:6c:d5:3d:18:27:8b:ed:5d:28:f0:f4:
                    33:b9:04:32:b3:ae:01:77:6e:27:18:de:92:5b:09:
                    03:71:88:38:53:37:2a:13:f3:78:f6:d2:21:38:c4:
                    d7:ff:9e:88:23:91:74:a0:34:a8:ab:43:23:d5:37:
                    37:1a:ea:bc:8f:1d:67:59:00:33:b5:94:1a:00:19:
                    06:59:27:14:11:25:0b:1c:95:be:c4:bf:e4:39:95:
                    72:7b:ad:b5:d6:9c:75:4f:64:e4:b7:63:e4:f2:7d:
                    de:19:a3:61:38:30:1e:af:00:34:ff:29:cf:d5:b9:
                    f2:a6:27:35:e3:ee:b4:c5:85:6e:81:a8:b2:0d:51:
                    f8:15:5e:ed:9d:10:97:08:0d:cf:a0:c5:17:7f:a5:
                    f3:c3:3d:78:54:4b:60:75:30:9b:fd:b1:36:e4:b0:
                    e0:da:57:e8:8f:e5:60:5a:3e:5c:02:93:8c:8d:44:
                    34:94:a4:c5:2f:a6:0f:dc:0c:11:98:b7:d5:9a:28:
                    f9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6B:E5:77:C4:EA:27:C7:CD:B2:20:58:65:56:BC:B2:F3:BB:8A:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/7eabc012-f18b-3f80-bc95-7519a0c2722a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/cf35609e-0e1f-484a-af8f-815006d97f11.crl

            X509v3 Authority Key Identifier:
                keyid:CE:9A:08:7C:21:06:9C:08:3D:C6:79:BA:DB:B2:28:34:71:1B:2F:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa5c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:3a:25:d7:e4:6e:d1:02:27:ad:e2:79:2b:5a:44:97:39:d6:
         23:be:34:4f:48:68:2a:48:07:09:1b:c4:89:b6:92:05:63:c1:
         49:d1:ab:4a:27:df:a7:28:6b:54:88:82:09:a1:48:49:c2:8a:
         95:7c:64:65:1b:c6:4a:b5:63:45:53:89:42:94:b0:ef:1c:03:
         2f:21:4a:50:0f:0b:62:89:b2:d2:1e:91:e2:8a:13:91:17:6f:
         7f:da:a5:b4:85:ad:b5:a9:7c:a8:dd:73:11:5a:bd:08:01:fc:
         38:58:9a:41:79:55:d0:fc:ee:18:21:23:cb:ab:91:c1:53:6b:
         03:14:07:ca:df:45:b8:19:62:d0:91:b1:2d:2a:86:a6:bd:82:
         97:4f:f9:a5:50:60:bc:c8:18:5c:cb:a9:72:02:be:28:c1:8d:
         fc:fc:de:49:1a:47:6f:ff:50:8d:ae:88:53:15:91:5b:44:35:
         0a:a0:2d:11:f6:f7:0b:aa:e8:c2:a0:85:6b:f9:63:19:6d:26:
         06:a1:dd:50:f6:44:53:ec:b1:5d:bb:b0:b9:42:e0:23:21:e9:
         5d:d9:96:65:f7:17:bb:a0:31:7c:cf:f0:31:b0:f4:01:aa:1e:
         42:19:8b:0a:35:21:19:9e:c6:70:3b:94:0a:27:d6:25:76:a3:
         15:75:b5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----