Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bc4f8c34-c1da-3c04-9c06-cfc44a47eaf0.roa
File:                     bc4f8c34-c1da-3c04-9c06-cfc44a47eaf0.roa (raw, json)
Hash identifier:          CwmZ8q0lnw8C23pUmy3KBmSPh3OFhGyMKw4/+guDf5w=
Subject key identifier:   AF:13:23:AE:32:40:65:87:30:43:BB:96:D1:D3:6E:F9:1F:E7:4D:04
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285842C145D68335CBFC5BB844F600
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bc4f8c34-c1da-3c04-9c06-cfc44a47eaf0.roa
Signing time:             Wed 02 Aug 2023 20:56:59 +0000
ROA not before:           Wed 02 Aug 2023 20:56:59 +0000
ROA not after:            Tue 31 Oct 2023 20:56:59 +0000
asID:                     33363
IP address blocks:        2605:a40e::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:c1:45:d6:83:35:cb:fc:5b:b8:44:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Aug  2 20:56:59 2023 GMT
            Not After : Oct 31 20:56:59 2023 GMT
        Subject: CN=db0868d6-5a05-4539-938f-bf49dea995f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f9:08:6e:35:e4:5d:42:25:91:95:eb:f2:fd:
                    5c:b6:68:56:55:17:ac:dd:cb:51:52:78:19:d7:be:
                    02:d1:b4:a5:b9:68:91:8e:7c:ce:0e:9f:77:84:43:
                    96:33:fc:69:ea:e8:bc:33:e7:b1:66:26:54:b7:8f:
                    95:63:06:21:7a:0e:c2:a8:41:3d:77:56:ba:09:6b:
                    c0:62:20:65:09:19:64:5b:ca:13:68:07:8a:9b:2f:
                    99:20:64:24:2f:c4:21:5a:55:99:4f:34:1b:8f:b3:
                    a0:02:d1:d9:29:07:eb:ce:18:62:7b:f7:7c:46:6d:
                    78:8f:94:fb:2b:12:54:22:a8:4d:5b:12:56:4d:d0:
                    cb:c2:61:b6:cb:c0:2d:36:f7:0f:28:2a:8d:e8:41:
                    a5:5a:85:97:3c:76:a2:b0:c8:bc:0b:8d:b6:d3:77:
                    1e:fe:23:ea:c7:c4:9b:b9:8a:aa:71:4a:28:52:cb:
                    eb:52:3f:ff:c7:46:10:7a:f7:8f:38:15:ac:d5:9f:
                    1c:3e:56:f0:37:d2:24:a3:78:58:df:d5:de:33:ec:
                    49:6e:e2:b8:57:7e:ae:e5:70:81:38:59:d9:bf:d5:
                    92:21:5b:24:aa:3c:fb:3c:b1:f2:6c:e6:1d:8a:b2:
                    a1:6f:e6:76:1a:09:2c:d4:ac:a4:d8:43:32:00:a9:
                    14:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:13:23:AE:32:40:65:87:30:43:BB:96:D1:D3:6E:F9:1F:E7:4D:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bc4f8c34-c1da-3c04-9c06-cfc44a47eaf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a40e::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:87:3a:8b:33:42:7d:11:c2:c3:a3:b8:b5:3d:c2:a0:33:ae:
         9c:9a:b1:b0:25:d5:ca:14:71:5e:52:08:c7:37:0a:0b:c0:d7:
         39:e9:c8:37:15:0e:66:81:02:dd:a9:ab:31:57:6b:ad:3d:28:
         10:f2:5c:2d:8a:b5:d8:e2:64:15:13:3a:f0:c0:c8:b2:b1:98:
         f3:b3:20:f7:9b:82:88:7e:96:a5:ff:be:c8:39:1c:d9:f1:0b:
         3c:92:98:a2:f1:b2:04:3f:03:60:bc:8f:4c:be:bd:c3:ad:df:
         f2:dd:c7:c3:95:45:8e:dd:39:82:ce:b8:e1:56:4e:93:26:18:
         39:1c:00:ea:e3:13:6f:f4:64:50:ea:13:5d:69:ff:fc:26:e3:
         d8:a0:7f:ad:fc:05:e1:5b:32:4a:60:ea:20:6a:84:20:ff:1c:
         cb:0c:44:a1:3a:a0:08:d6:de:65:42:8d:c2:f6:f7:78:67:96:
         88:aa:58:06:10:82:0f:ae:01:38:6a:f6:b1:53:88:62:22:d9:
         4f:85:24:54:73:10:36:ec:24:d4:90:e7:66:21:90:a4:3f:b5:
         66:36:59:1e:19:65:fd:d0:c7:19:55:db:66:ca:4e:e6:d1:25:
         3b:30:b8:82:63:79:1f:92:7d:fc:27:05:b2:12:98:cb:53:29:
         e5:84:24:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----