Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/39c90cb7-abfa-3487-a25a-b299f80d423d.roa
File:                     39c90cb7-abfa-3487-a25a-b299f80d423d.roa (raw, json)
Hash identifier:          oPVsQnawNa44A4XSP9bLu8PeqHTB05/ERzAEX2Wz910=
Subject key identifier:   E1:37:E7:BF:53:8B:E4:39:34:59:E4:6D:B5:3B:F2:42:85:ED:89:F4
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328583E1937528685B1C36DE5E72580
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/39c90cb7-abfa-3487-a25a-b299f80d423d.roa
Signing time:             Wed 14 Apr 2021 18:57:06 +0000
ROA not before:           Wed 14 Apr 2021 18:57:06 +0000
ROA not after:            Tue 03 Sep 2030 04:00:00 +0000
asID:                     11404
IP address blocks:        2605:1f80::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:19:37:52:86:85:b1:c3:6d:e5:e7:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Apr 14 18:57:06 2021 GMT
            Not After : Sep  3 04:00:00 2030 GMT
        Subject: CN=614e5c7f-9377-4b15-bb0d-f50e09d3281e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f5:6c:35:44:d2:57:fb:50:c5:f4:ea:64:d5:
                    f3:a9:81:bb:16:1d:f2:28:7e:f8:57:1f:07:a3:88:
                    99:b6:39:b5:19:97:ca:34:1d:28:2e:33:61:59:a0:
                    59:7b:dc:84:52:bf:40:eb:dc:40:a7:1d:60:66:e7:
                    5e:65:0a:73:c1:d9:7e:7a:56:03:9d:9b:a3:1d:25:
                    6a:12:1f:a9:db:23:3d:8b:1e:83:7e:d9:4e:92:c2:
                    a8:d3:e1:10:74:a9:7d:ae:b7:61:60:0c:7e:04:20:
                    ef:ee:87:cd:7f:34:54:1c:2c:c2:0d:44:38:3b:36:
                    8f:5c:49:7d:b6:2d:0f:e2:2a:42:8f:1f:39:53:58:
                    ff:63:32:1e:78:4c:f1:35:6c:13:a8:9c:07:8b:75:
                    b6:e3:b1:c4:58:93:15:5b:64:00:6e:86:79:e8:65:
                    d6:99:8e:5c:84:f5:8b:50:dd:b8:14:53:0d:d9:14:
                    19:94:d9:3d:3b:1f:da:90:01:27:a9:68:09:0a:f1:
                    24:5c:05:33:06:50:4b:0d:d5:34:50:4b:ff:df:d3:
                    05:7e:31:41:fe:5f:4a:8c:2b:44:da:7a:28:fe:1e:
                    e2:63:eb:ca:40:54:1c:21:df:01:67:04:b4:64:a1:
                    16:76:5d:62:61:f8:44:8e:fc:b8:85:45:2c:1d:d9:
                    f3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:37:E7:BF:53:8B:E4:39:34:59:E4:6D:B5:3B:F2:42:85:ED:89:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/39c90cb7-abfa-3487-a25a-b299f80d423d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1f80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:05:c6:c4:04:0c:11:fe:b1:4b:ab:ce:98:c4:4f:a8:df:79:
         7f:31:7c:aa:24:a1:e5:64:73:d6:1d:e3:ad:12:2f:36:7d:22:
         6e:db:8f:4c:a1:12:c8:3b:7b:42:03:9c:37:f5:25:7d:85:8c:
         60:44:cb:04:12:2c:e8:6f:e8:16:df:93:ad:35:b1:df:ae:ff:
         05:71:b3:39:ee:0f:8b:44:88:a0:92:bc:63:50:d2:c7:ce:d2:
         08:5a:f0:6f:45:21:43:01:e6:ef:be:00:6c:50:27:6b:7a:b1:
         31:eb:09:1d:f4:e4:d2:20:f4:8f:81:ef:fe:c2:e4:de:35:3a:
         b2:ff:36:64:05:87:3c:c5:12:e6:75:8c:21:1a:6a:8f:70:84:
         64:d5:b3:a2:62:e7:98:ea:12:e4:d0:f1:6f:40:46:15:fc:e0:
         c9:07:72:69:5a:15:4c:31:57:c3:bc:00:63:87:d4:cb:36:a2:
         5d:09:19:a8:67:44:50:bc:fc:d3:4a:cd:b7:62:79:0a:03:bf:
         ff:00:0f:c7:94:6a:e2:e3:b1:f7:24:d5:12:3e:ac:a9:cb:54:
         30:83:93:e0:0c:8a:ab:5b:62:14:88:52:b0:a4:e0:3c:de:03:
         cd:e1:e1:d2:35:8b:86:8d:cd:37:c4:61:21:a5:3e:71:f3:98:
         a7:01:a1:13
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWD4ZN1KGhbHDbeXnJYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTIxMDQxNDE4NTcwNloXDTMwMDkwMzA0MDAwMFowLzEtMCsGA1UEAxMk
NjE0ZTVjN2YtOTM3Ny00YjE1LWJiMGQtZjUwZTA5ZDMyODFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvVsNUTSV/tQxfTqZNXzqYG7Fh3yKH74Vx8H
o4iZtjm1GZfKNB0oLjNhWaBZe9yEUr9A69xApx1gZudeZQpzwdl+elYDnZujHSVq
Eh+p2yM9ix6DftlOksKo0+EQdKl9rrdhYAx+BCDv7ofNfzRUHCzCDUQ4OzaPXEl9
ti0P4ipCjx85U1j/YzIeeEzxNWwTqJwHi3W247HEWJMVW2QAboZ56GXWmY5chPWL
UN24FFMN2RQZlNk9Ox/akAEnqWgJCvEkXAUzBlBLDdU0UEv/39MFfjFB/l9KjCtE
2noo/h7iY+vKQFQcId8BZwS0ZKEWdl1iYfhEjvy4hUUsHdnzGQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOE3579Ti+Q5NFnkbbU78kKF7Yn0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMzljOTBjYjctYWJmYS0z
NDg3LWEyNWEtYjI5OWY4MGQ0MjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUfgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAnBcbEBAwR/rFLq86YxE+o33l/MXyqJKHlZHPWHeOtEi82fSJu249M
oRLIO3tCA5w39SV9hYxgRMsEEizob+gW35OtNbHfrv8FcbM57g+LRIigkrxjUNLH
ztIIWvBvRSFDAebvvgBsUCdrerEx6wkd9OTSIPSPge/+wuTeNTqy/zZkBYc8xRLm
dYwhGmqPcIRk1bOiYueY6hLk0PFvQEYV/ODJB3JpWhVMMVfDvABjh9TLNqJdCRmo
Z0RQvPzTSs23YnkKA7//AA/HlGri47H3JNUSPqypy1Qwg5PgDIqrW2IUiFKwpOA8
3gPN4eHSNYuGjc03xGEhpT5x85inAaET
-----END CERTIFICATE-----