Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1831744e-4af9-3b39-a29f-c2e0a2b485bd.roa
File:                     1831744e-4af9-3b39-a29f-c2e0a2b485bd.roa (raw, json)
Hash identifier:          gZIsU5zNuZm+xrxrBBG9/D4YOEQfTWX8RqzX3/CVmLE=
Subject key identifier:   29:DA:84:90:23:6B:1F:4F:D2:21:F3:2E:BD:C4:30:80:D0:FA:B1:46
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328583E1BC9CE40EFA4F01783F6DA78
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1831744e-4af9-3b39-a29f-c2e0a2b485bd.roa
Signing time:             Wed 01 Jun 2022 12:00:00 +0000
ROA not before:           Wed 01 Jun 2022 12:00:00 +0000
ROA not after:            Thu 25 May 2028 04:00:00 +0000
asID:                     11404
IP address blocks:        2001:1868::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1b:c9:ce:40:ef:a4:f0:17:83:f6:da:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun  1 12:00:00 2022 GMT
            Not After : May 25 04:00:00 2028 GMT
        Subject: CN=f3739310-19d1-476b-a762-06f110067f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c7:34:30:25:36:79:47:27:cf:78:bd:6c:38:
                    6a:ff:88:f2:7c:0e:7f:3c:06:b1:cd:03:90:56:78:
                    b9:0e:57:1b:2d:b0:3d:12:db:e2:88:b1:07:ac:53:
                    ad:3f:44:f5:9e:c7:29:2f:eb:e9:02:d9:67:24:27:
                    64:94:af:a0:32:74:56:54:1d:8d:95:df:c4:e0:4e:
                    5b:ea:76:6b:1d:dc:71:73:48:59:28:1b:00:37:e7:
                    03:2a:bb:91:93:4e:ba:2f:b5:c1:65:4d:f7:70:a9:
                    a6:7e:36:a9:b2:58:cb:53:3a:e7:e4:3b:7a:f0:55:
                    77:ee:c3:dd:de:eb:39:c5:dc:3f:37:a2:a4:f1:22:
                    c7:03:3b:65:61:01:d2:53:a0:d8:67:6d:f6:40:14:
                    1d:6c:95:a9:0e:f0:aa:58:89:e3:c6:25:cd:ab:c5:
                    e9:40:ef:4e:bd:38:0e:05:1c:eb:e3:be:75:b1:70:
                    2c:26:68:1b:3e:45:f8:de:61:5b:54:45:63:aa:22:
                    c8:8a:7a:83:5d:de:74:c5:7b:9a:7e:02:62:c7:86:
                    42:ff:83:83:f3:92:ed:9f:d3:a5:b3:1e:01:10:b8:
                    1f:aa:c8:75:a9:52:55:c2:be:62:39:f7:48:14:ed:
                    04:68:86:f0:2b:92:c2:bc:b4:e3:9e:e0:d6:77:ce:
                    b2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DA:84:90:23:6B:1F:4F:D2:21:F3:2E:BD:C4:30:80:D0:FA:B1:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1831744e-4af9-3b39-a29f-c2e0a2b485bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1868::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:fe:5a:99:89:0a:8d:1a:39:dc:89:57:22:05:d0:a4:ab:ab:
         5f:ca:e0:9a:f5:fc:e3:b3:af:c8:91:6f:5a:54:7f:3f:d0:ec:
         4e:66:04:28:c4:75:4e:ab:e1:7e:45:49:fb:07:ad:90:99:ea:
         a8:6c:00:bd:3e:41:d2:2f:01:ca:bb:d3:58:c7:b2:cc:51:4b:
         71:ab:43:58:c4:d4:f5:eb:2f:20:6a:72:f3:f6:05:52:58:4b:
         fb:d5:6c:bb:f7:9f:41:48:6b:f7:ec:33:94:c3:75:43:4a:d3:
         89:9f:d5:9f:08:4c:22:7a:05:db:64:78:9e:35:d2:c9:77:2e:
         72:61:45:26:14:5e:1b:16:e1:d3:0b:c2:56:69:d0:ca:ef:49:
         87:89:1f:83:98:bb:a2:33:ad:db:16:cd:67:19:a9:33:2f:ea:
         65:e8:16:30:23:1a:a2:7d:ba:37:ca:64:9a:fa:56:23:15:ac:
         5f:57:7b:f5:94:b9:a1:5f:c4:7b:0f:e5:27:45:fe:1a:b1:1f:
         f0:94:90:d6:c1:23:d6:52:19:8d:b0:62:8c:05:42:03:27:4d:
         55:b0:4f:da:8b:ba:94:06:35:ab:c9:c0:38:39:3c:12:2a:15:
         23:de:87:bc:96:c6:40:00:1d:a0:9e:4a:0b:f6:b7:8d:c7:fb:
         28:d5:1d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----