Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/97f53afc-8741-3a93-b26b-9f1ecb846504.roa
File:                     97f53afc-8741-3a93-b26b-9f1ecb846504.roa (raw, json)
Hash identifier:          7kXBZjSk+Ftjs7M+9BJs7PE8LDX+fBr3uZED6yoEggA=
Subject key identifier:   CF:4F:E7:7C:C4:24:2D:13:12:05:1E:CE:5C:5C:8A:24:BE:48:E3:C0
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328583E1937AB9DCCC31FF40B754580
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/97f53afc-8741-3a93-b26b-9f1ecb846504.roa
Signing time:             Wed 14 Apr 2021 18:57:06 +0000
ROA not before:           Wed 14 Apr 2021 18:57:06 +0000
ROA not after:            Tue 03 Sep 2030 04:00:00 +0000
asID:                     11404
IP address blocks:        2605:9080::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:19:37:ab:9d:cc:c3:1f:f4:0b:75:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Apr 14 18:57:06 2021 GMT
            Not After : Sep  3 04:00:00 2030 GMT
        Subject: CN=cc7da188-185b-40ab-b9c7-6f08a7d1be86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6b:ff:8d:af:2d:e8:e2:70:a0:f6:9d:c5:cd:
                    5f:1b:ec:fe:56:bc:89:4c:89:96:72:8e:9d:46:53:
                    e5:dd:21:56:bd:cd:cf:b3:06:30:26:e8:19:c9:3e:
                    45:21:8d:e6:26:85:91:1a:b5:49:ff:45:da:7a:bc:
                    ba:37:96:e0:7d:34:58:15:e9:a5:a4:30:43:e8:3d:
                    a9:53:e6:e3:c0:2e:94:8b:11:51:0f:1c:d4:41:d9:
                    2c:88:1e:e0:67:e0:b3:ed:b3:f6:b5:66:5d:48:6f:
                    06:e8:be:4b:32:61:12:e7:dc:ac:4f:15:08:be:51:
                    70:92:fb:73:b7:d2:56:a2:ad:69:8f:d9:1d:af:d8:
                    a5:c1:50:48:ea:74:8e:76:26:0c:b4:21:d9:1c:ea:
                    92:8e:35:f7:5d:08:34:0f:6a:6f:ee:c5:94:5d:f3:
                    be:73:ab:36:42:bd:63:80:57:92:9a:a1:52:43:29:
                    13:29:38:9b:a2:7c:9a:56:36:9a:f1:be:df:92:24:
                    96:61:62:43:3e:97:3f:8c:30:df:52:06:e6:fc:bc:
                    7c:09:c1:8d:74:cb:b8:92:2b:b0:1c:21:76:b4:95:
                    a1:97:36:17:ac:26:8d:ec:a2:48:74:8c:25:fa:88:
                    5b:bb:05:15:14:09:b4:f6:ed:22:92:0f:e1:55:74:
                    85:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4F:E7:7C:C4:24:2D:13:12:05:1E:CE:5C:5C:8A:24:BE:48:E3:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/97f53afc-8741-3a93-b26b-9f1ecb846504.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9080::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:f3:7e:eb:bc:4b:f4:a9:cb:41:8d:d4:a4:f1:b8:c1:93:d2:
         68:19:b6:22:14:1d:a7:b1:98:25:a4:2b:ef:f6:b3:4a:19:ce:
         a7:66:6e:ea:18:31:cd:5e:f8:b5:e8:ee:2a:81:73:6e:13:1e:
         60:88:bc:14:4c:2f:64:d1:96:30:f4:68:2a:85:2f:5f:2a:eb:
         34:18:79:e8:4f:91:f7:81:b7:34:c0:f3:e2:db:29:4f:00:ce:
         53:5e:e0:c3:96:16:a8:6b:b1:20:ce:5f:82:4a:0d:50:4a:af:
         8a:b3:83:f2:f8:65:c0:5b:74:58:e9:db:b4:e4:d6:0d:dd:2b:
         1e:24:82:52:ed:eb:dd:a8:ab:ed:92:9d:b3:dd:b6:c6:f5:e2:
         fa:6f:8f:d3:0d:b9:a6:d1:12:c2:1b:84:c3:e6:0a:67:cf:73:
         cb:1f:fb:2e:81:c5:4a:fb:18:c2:fd:54:56:5c:7b:30:fd:34:
         df:d2:62:2c:48:48:57:16:6e:97:37:46:4d:81:1b:69:18:1e:
         16:1a:d9:d4:7c:50:3f:ac:50:1b:0e:ed:06:83:03:f1:36:f1:
         1a:a8:ae:e5:83:fb:e3:9e:2a:69:9c:8a:b7:4e:ec:12:1b:24:
         2f:c2:42:b1:4c:eb:4e:c9:55:f8:0d:4b:44:32:32:fc:56:ab:
         89:bc:9b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----