Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/c3a0c9ba-f1f9-39e9-9cd5-219cec8473ac.roa
File:                     c3a0c9ba-f1f9-39e9-9cd5-219cec8473ac.roa (raw, json)
Hash identifier:          QGbsmm0qrkkOiLh+tNhb3z5mghsDIhRnepAABmGujXI=
Subject key identifier:   24:2E:AC:55:A9:B3:05:13:95:17:7C:B0:1B:0A:14:64:F4:D0:4C:E3
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F4328583D52A2796F24051D473284EF20
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/c3a0c9ba-f1f9-39e9-9cd5-219cec8473ac.roa
Signing time:             Wed 06 Jan 2021 05:00:00 +0000
ROA not before:           Wed 06 Jan 2021 05:00:00 +0000
ROA not after:            Mon 24 Jun 2024 04:00:00 +0000
asID:                     14445
IP address blocks:        2606:18c0:12::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 02 Jun 2022 16:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:52:a2:79:6f:24:05:1d:47:32:84:ef:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Jan  6 05:00:00 2021 GMT
            Not After : Jun 24 04:00:00 2024 GMT
        Subject: CN=871f7d77-65b8-43b8-b3f4-5ebbd94e4172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:60:85:2e:59:d5:e1:eb:b9:0b:01:f7:60:f3:
                    b7:6b:f9:7e:a0:3a:24:8c:68:8d:da:38:c7:a3:1f:
                    2f:4d:89:4b:8e:1e:37:8a:d1:06:e6:01:cb:ac:7f:
                    b0:d5:1d:4a:45:6e:c1:2a:d8:4e:1e:d4:09:f3:bb:
                    4a:8f:7e:7f:34:5b:68:f8:63:55:d1:07:a6:f4:85:
                    18:22:cd:3d:95:64:60:82:4a:72:39:ce:66:a7:57:
                    ea:ea:ab:fd:79:fa:32:1f:2f:9f:fd:c9:29:90:d1:
                    5f:5d:df:16:1d:fa:49:64:7c:3e:79:4b:14:b9:e6:
                    f4:c2:d8:0d:8e:96:5d:92:dc:50:9a:de:c0:0f:1c:
                    bf:68:1e:e8:ee:df:d0:8b:8e:1c:4c:39:b3:ac:2e:
                    1c:ab:96:02:e3:eb:c4:47:79:43:28:df:54:ec:20:
                    46:94:63:5e:de:b8:89:1d:75:e7:99:2e:ab:3e:d4:
                    8c:d1:ed:d4:60:d3:8c:89:8d:27:21:0d:47:3a:46:
                    33:43:e3:1a:8e:f6:54:05:72:c9:91:79:84:b3:c0:
                    9b:4d:2f:51:cc:91:67:67:03:b5:c3:c7:8d:07:c3:
                    09:c1:ed:b9:07:4b:ed:b5:f3:11:36:b9:39:fb:22:
                    73:41:23:f6:c6:4a:c8:25:77:38:b1:a5:f6:56:64:
                    5a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2E:AC:55:A9:B3:05:13:95:17:7C:B0:1B:0A:14:64:F4:D0:4C:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/c3a0c9ba-f1f9-39e9-9cd5-219cec8473ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:18c0:12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:09:a5:b8:92:0c:03:e8:20:48:d4:96:5d:05:ca:7c:45:73:
         6f:58:b4:70:5e:eb:fa:1f:eb:e0:55:cf:3f:6a:fb:69:75:e5:
         fb:81:4a:91:98:53:d8:20:e0:8f:1a:74:46:8e:cb:02:e7:b2:
         72:6c:d9:d5:df:37:6c:69:85:8a:19:5b:36:a4:54:50:53:dc:
         d2:58:0b:3a:cc:ce:72:bb:da:5f:46:fc:8d:31:9c:99:af:a8:
         79:7a:20:91:ca:9e:03:2d:94:07:07:a8:b1:76:e7:41:00:05:
         64:0f:d3:b6:cd:da:07:5e:19:a6:3f:72:f7:82:17:ba:bb:94:
         e6:40:78:38:32:6e:4c:4d:c8:00:2f:6f:99:3a:f0:7a:d9:27:
         69:4d:d3:b9:f3:13:85:0b:eb:cd:1c:49:54:58:c7:ae:1a:e1:
         c2:2e:f8:ea:5c:07:63:29:fd:a2:45:43:1e:c5:4f:d7:b1:25:
         de:3c:01:07:36:60:75:9c:cc:39:ee:f3:27:36:0f:79:48:4d:
         8f:73:69:12:bc:bc:47:de:a5:01:63:0c:06:0b:62:79:69:b9:
         a9:04:57:62:58:a2:37:74:aa:bf:c4:f5:46:92:58:a6:20:d3:
         ba:fb:c6:e7:83:3d:6b:7a:5a:8e:b2:fa:97:8d:6e:8f:f9:d7:
         5d:c2:7d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----