Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/a65e02b0-ca76-32b4-b5aa-480c62a042d8.roa
File:                     a65e02b0-ca76-32b4-b5aa-480c62a042d8.roa (raw, json)
Hash identifier:          ie/8L7t77hBMNHzQr7gUMqeCRbMTeB9MrbmFlvauKWk=
Subject key identifier:   54:C1:F6:26:11:F2:03:BA:84:0B:F6:AB:81:4C:D7:E8:A2:1C:D6:22
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F4328583D399A7E681CC0921313925660
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/a65e02b0-ca76-32b4-b5aa-480c62a042d8.roa
Signing time:             Wed 06 Jan 2021 05:00:00 +0000
ROA not before:           Wed 06 Jan 2021 05:00:00 +0000
ROA not after:            Sat 15 Jun 2024 04:00:00 +0000
asID:                     14445
IP address blocks:        2606:18c0:4::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 02 Jun 2022 16:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:39:9a:7e:68:1c:c0:92:13:13:92:56:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Jan  6 05:00:00 2021 GMT
            Not After : Jun 15 04:00:00 2024 GMT
        Subject: CN=b3609dac-f828-4c72-98b8-1fada64e166e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0f:8f:11:4a:00:59:bc:e6:dc:fe:0d:92:7c:
                    71:13:85:7f:ad:08:27:d5:96:21:47:bd:97:2b:1f:
                    0f:bd:92:58:fd:77:73:48:86:37:2c:4c:f2:23:61:
                    50:6c:08:32:36:33:a3:c7:02:dd:c1:51:d0:3a:c8:
                    81:62:2d:94:99:34:43:6b:25:0b:87:7d:20:de:53:
                    6e:0a:fe:4c:7b:e1:24:36:33:68:2e:e4:7f:8d:f4:
                    4a:b2:f1:87:44:47:5b:9c:97:b9:50:4c:0b:a2:6d:
                    a9:57:bf:0d:f0:30:59:24:c6:d3:af:38:db:59:ff:
                    4e:89:a8:ac:05:8c:22:03:f7:16:99:1c:74:0d:07:
                    e1:87:d6:ae:d7:65:bb:60:91:f6:c2:6a:e6:56:d4:
                    97:5e:73:46:f5:16:eb:6f:da:04:19:4d:62:5a:86:
                    3c:26:ab:32:64:e9:94:b0:2b:f3:70:5a:39:42:40:
                    57:fd:fb:d6:1a:68:45:6c:b8:0e:5d:2d:08:1b:41:
                    7f:89:ec:32:59:b6:4d:10:61:6e:61:a2:7a:85:63:
                    7a:96:0b:d6:ce:36:57:8c:51:72:5c:13:41:9b:31:
                    c7:21:95:f4:1f:31:ed:45:d2:a6:95:d6:64:e9:b2:
                    7b:a5:1b:a1:47:80:1a:ff:4c:80:6d:63:ff:22:6f:
                    be:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C1:F6:26:11:F2:03:BA:84:0B:F6:AB:81:4C:D7:E8:A2:1C:D6:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/a65e02b0-ca76-32b4-b5aa-480c62a042d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:18c0:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:d8:fa:fb:5b:7a:52:9a:aa:8d:04:c3:93:4b:e5:d6:ec:99:
         b7:62:58:12:d1:51:35:f0:7f:38:41:99:3b:9e:d0:d3:e2:bd:
         63:c4:d5:4b:e1:e7:f5:41:84:70:21:da:26:67:22:19:6d:a8:
         b3:80:55:d3:d8:f8:97:6e:37:bb:e2:eb:c8:02:6c:22:ce:10:
         ec:ec:c3:ea:b3:f8:80:66:cf:1e:3e:6b:92:16:2c:e6:29:1d:
         2b:6a:74:e3:ad:5f:7a:d3:ec:58:f0:8f:61:52:3a:a5:87:af:
         09:1c:4b:f4:dc:cb:09:c3:e1:c3:0a:2f:78:5c:55:a5:83:aa:
         b3:c9:b2:4e:d9:7a:8c:25:d4:f8:eb:e0:d2:3c:19:ac:7b:73:
         b5:90:b7:50:56:57:06:83:2d:90:c6:13:73:39:77:a8:0b:45:
         28:53:d4:e8:46:e8:ac:c1:de:51:67:20:65:c1:69:b9:f9:66:
         1b:d2:c5:ad:83:e0:c2:18:76:b3:60:d1:b2:72:77:64:33:57:
         db:11:ac:bc:5e:55:e6:9e:a2:92:3d:e3:8c:14:af:c6:2d:a5:
         b6:0a:47:66:e2:fe:13:8f:5c:d4:6a:a1:f8:86:b4:5b:02:02:
         fd:b1:1c:d1:4f:b5:00:d2:19:ef:b7:22:fc:0a:90:2a:7c:a9:
         5f:2c:31:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----