Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/36bd985c-f94a-3144-b755-77ed1d704847.roa
File:                     36bd985c-f94a-3144-b755-77ed1d704847.roa (raw, json)
Hash identifier:          PptawxJm/cmJotKPhujXNwQlVsq+UMeobETCLIQKg1M=
Subject key identifier:   5F:DC:1E:E8:A8:B0:21:2D:1B:75:2D:9D:67:8F:17:C4:6C:7C:40:A9
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328583E1BC87CD12656262D5B3AD300
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/36bd985c-f94a-3144-b755-77ed1d704847.roa
Signing time:             Wed 01 Jun 2022 12:00:00 +0000
ROA not before:           Wed 01 Jun 2022 12:00:00 +0000
ROA not after:            Thu 25 May 2028 04:00:00 +0000
asID:                     54858
IP address blocks:        2605:1f80::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1b:c8:7c:d1:26:56:26:2d:5b:3a:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun  1 12:00:00 2022 GMT
            Not After : May 25 04:00:00 2028 GMT
        Subject: CN=03e67573-0744-4e99-bc35-e6be08bac6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5a:4d:28:cb:3b:96:56:01:82:a2:e1:64:5b:
                    44:b9:c5:22:41:fe:eb:24:75:f8:e6:9c:a2:45:7a:
                    85:6e:ec:c8:3e:54:3d:a8:1c:ac:86:b6:9e:c0:d5:
                    e4:05:c9:87:63:62:b0:09:37:5e:2d:75:31:b4:16:
                    3b:28:ec:f5:64:92:92:e2:89:a1:75:2f:ad:91:7a:
                    d2:6e:1a:57:05:2b:b7:70:d7:f9:b7:f9:9b:1e:e5:
                    a6:6c:e5:01:20:70:7d:69:3e:34:c2:03:a2:a8:b0:
                    fb:45:1e:07:6b:47:ae:8e:5c:ee:aa:f4:b2:2d:64:
                    db:74:5d:41:b6:a4:99:f3:02:6c:37:04:40:a6:98:
                    90:63:a1:38:0d:14:d0:5d:42:7d:60:2f:32:e2:b0:
                    3d:7b:4e:8d:e2:f3:60:9f:37:42:50:c6:aa:b1:d1:
                    8f:eb:5e:ba:29:aa:fe:9f:1b:17:2d:02:f9:87:bf:
                    e5:2c:5f:c8:7a:10:d2:41:3d:d8:d3:02:2e:78:15:
                    f0:69:34:00:e3:ff:55:cd:19:e7:23:02:5b:ba:4c:
                    31:86:67:70:12:2b:f8:a5:14:a4:81:6c:e3:d3:31:
                    cf:a1:38:fa:48:b9:c7:24:1c:b6:23:55:80:55:91:
                    db:1d:cb:cb:00:83:14:9c:f2:4d:02:21:b6:3a:cf:
                    6b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DC:1E:E8:A8:B0:21:2D:1B:75:2D:9D:67:8F:17:C4:6C:7C:40:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/36bd985c-f94a-3144-b755-77ed1d704847.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1f80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:73:13:ff:12:f5:2c:83:a4:25:72:11:0d:f9:d7:15:9d:2b:
         63:05:b5:49:b4:b8:fd:3b:df:e0:12:d8:ef:12:01:c0:6b:ce:
         9c:fc:4f:f3:94:3f:fc:65:8c:ad:75:ef:8c:46:a6:85:1e:42:
         47:53:7c:9f:6f:2a:40:0e:4c:d2:a7:c5:ae:42:1c:24:b8:51:
         da:5d:2f:1a:27:e5:bd:03:6d:92:3d:03:8b:bd:83:c2:37:2b:
         5d:ff:e4:5a:9d:21:01:dc:3c:6d:20:e0:73:6d:a6:76:d1:72:
         ff:56:b4:e6:62:fd:c2:c6:22:94:f0:e5:f7:cf:58:4c:b3:34:
         9b:ee:d0:38:fd:4c:6b:1b:5b:bd:a0:13:5a:44:b1:e4:c4:c2:
         1a:01:e6:fa:e8:43:84:e2:a2:7b:9d:cc:b2:42:f6:f7:8e:e2:
         a1:33:9c:84:6b:85:04:a0:eb:12:76:d6:fc:d5:cf:9e:0f:b3:
         d0:2d:ac:66:79:5b:f7:81:60:fa:1e:7d:df:6a:ae:a7:ee:4a:
         f2:d5:cb:15:17:6b:12:a0:3d:cf:1a:b0:8f:6d:27:c8:5d:1d:
         fd:6b:0a:97:d1:51:13:8e:52:06:cf:1e:cc:90:a9:84:cd:9b:
         3d:bf:f5:f7:db:8e:6c:c1:d3:c6:c8:59:7b:53:88:a8:e0:a5:
         be:4e:a6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----