Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cfa4ea28-0ca8-3d40-b5e1-0f7877cdca34.roa
File:                     cfa4ea28-0ca8-3d40-b5e1-0f7877cdca34.roa (raw, json)
Hash identifier:          3PdyqDFCr/j3A3CLTk+TmSnn4jDEAUnG1mgNNqh9nVQ=
Subject key identifier:   B7:9B:3B:DC:44:15:DD:EC:7B:0F:61:68:AE:0A:0C:BD:01:3E:19:F4
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F43285842B064C49A7AE78F1A41B17E80
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cfa4ea28-0ca8-3d40-b5e1-0f7877cdca34.roa
Signing time:             Wed 26 Jul 2023 12:00:00 +0000
ROA not before:           Wed 26 Jul 2023 12:00:00 +0000
ROA not after:            Mon 29 Jul 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        2620:120:e000::/40 maxlen: 40

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:23:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b0:64:c4:9a:7a:e7:8f:1a:41:b1:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 26 12:00:00 2023 GMT
            Not After : Jul 29 04:00:00 2024 GMT
        Subject: CN=242d9a91-4f12-41fe-9b7a-be8cd35376d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ab:04:c1:b6:65:e6:5b:78:d1:24:11:69:07:
                    7d:c5:8c:29:e1:ad:19:ed:f0:93:e9:b1:0f:b3:31:
                    f5:7e:92:20:7b:a6:5c:80:82:93:e8:8a:c3:07:11:
                    65:f8:e1:e8:d3:5e:64:91:f0:28:52:0f:c1:9f:61:
                    fd:80:89:19:60:bc:28:50:03:3d:82:a1:81:5b:9f:
                    8c:01:a0:db:c8:b6:30:2c:95:47:8d:a3:b8:39:78:
                    ab:07:a6:36:be:f4:64:06:fa:82:86:8c:80:3d:4c:
                    06:97:b8:60:65:52:29:c9:c2:79:77:ee:72:c3:91:
                    01:41:80:29:a1:ae:40:d0:07:1a:ac:65:b6:5e:1f:
                    c8:7c:76:4f:0d:77:76:73:72:ec:6a:ff:90:6d:3c:
                    c8:f6:e5:07:82:c0:94:e4:ca:71:70:f7:bd:dc:c2:
                    bc:12:f5:95:0b:05:45:b3:0a:a2:4a:e1:2a:38:68:
                    ae:c0:a8:a5:f9:02:9e:0b:8b:aa:71:01:a1:89:a1:
                    1a:54:9d:67:19:a5:3c:80:4c:50:b1:58:98:74:b6:
                    d1:bc:04:7b:59:a4:b7:19:a6:b2:99:b5:4a:60:3e:
                    cd:3c:71:69:94:ff:ec:9b:6c:cb:39:14:b1:32:be:
                    bb:be:7a:86:c4:4c:1b:a0:84:45:4e:e1:66:16:55:
                    c2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9B:3B:DC:44:15:DD:EC:7B:0F:61:68:AE:0A:0C:BD:01:3E:19:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cfa4ea28-0ca8-3d40-b5e1-0f7877cdca34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:120:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:cb:7a:71:80:14:59:e1:b3:45:a2:70:e8:7e:81:dd:9e:e2:
         de:31:af:b2:44:2b:31:7f:f4:53:d7:60:13:4f:8e:84:0d:f0:
         0c:d8:0a:66:36:77:4e:82:81:bb:b8:5e:42:f0:d6:be:98:81:
         4c:31:c5:e3:28:1f:86:ba:01:57:73:1b:cc:72:b9:99:a1:4c:
         9c:c6:a2:bc:e9:2b:a9:2a:b6:c6:98:38:4e:9b:e8:6b:33:eb:
         68:a2:94:b2:6f:d9:2f:2d:c5:0a:e7:16:92:c9:81:5c:79:c7:
         ab:e4:21:c7:83:f3:4e:2c:12:a4:2c:46:a7:be:7d:61:ee:ae:
         91:06:9f:21:da:79:10:d5:a3:75:3c:ea:5a:ef:88:0a:41:8c:
         28:5d:d9:cc:1e:c3:3b:71:3e:92:b2:78:f7:46:ae:d0:89:ed:
         99:e0:17:c4:3d:a5:2b:1d:f1:0e:2b:50:f9:12:20:79:39:0e:
         64:49:64:4d:c6:6c:9c:92:23:6e:07:cb:38:dd:2c:7e:cd:09:
         89:04:32:bb:7a:4a:8e:f8:01:23:17:a6:6d:6c:1e:01:7a:f0:
         18:67:31:c3:3a:f8:1d:8e:5f:db:a7:04:cb:f5:86:98:8c:1a:
         e7:19:c9:3d:73:f1:bd:8d:01:21:a4:d4:f2:09:87:97:7e:c8:
         7b:17:3b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----