Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/16bff0d9-f0f4-37fb-acfc-9714b409f78d.roa
File:                     16bff0d9-f0f4-37fb-acfc-9714b409f78d.roa (raw, json)
Hash identifier:          N+nv0dALgmLFBTdhz+wWiMu0nOhW/ZkAIJdOF0C2kBU=
Subject key identifier:   19:D2:EE:86:33:D3:8D:2B:2C:6F:D1:D0:3D:67:AA:F2:E1:69:33:68
Certificate issuer:       /CN=e1816ae6-5186-44f7-ae5b-ec1338b7a77a
Certificate serial:       010D0C9F4328584368FB88440FAB27E7C45A3080
Authority key identifier: CE:CE:00:83:A8:55:53:25:64:A0:C2:FB:A3:1C:CD:8A:BA:E6:9C:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/16bff0d9-f0f4-37fb-acfc-9714b409f78d.roa
Signing time:             Sun 01 Oct 2023 22:43:04 +0000
ROA not before:           Sun 01 Oct 2023 22:43:04 +0000
ROA not after:            Sat 30 Dec 2023 23:43:04 +0000
asID:                     16509
IP address blocks:        2602:fcee:400::/48 maxlen: 48
                          2602:fcee:404::/48 maxlen: 48
                          2602:fcee:408::/48 maxlen: 48
                          2602:fcee:ff4::/48 maxlen: 48
                          2602:fcee:ff5::/48 maxlen: 48
                          2602:fcee:ff6::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:68:fb:88:44:0f:ab:27:e7:c4:5a:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1816ae6-5186-44f7-ae5b-ec1338b7a77a
        Validity
            Not Before: Oct  1 22:43:04 2023 GMT
            Not After : Dec 30 23:43:04 2023 GMT
        Subject: CN=4f173b8a-885c-43a4-bb5e-2c00f9367e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:de:31:1e:40:17:9d:cf:30:e7:8c:4c:c0:aa:
                    f0:f7:4e:28:6f:79:2b:65:b5:e7:e9:1d:57:d3:cb:
                    e1:54:aa:57:1f:fb:b3:25:7b:72:1d:5c:95:3c:a6:
                    cf:0e:12:5e:37:3a:42:1d:fb:8d:fb:ee:33:be:f3:
                    26:b7:98:20:0e:57:07:7a:ff:d1:14:20:eb:94:69:
                    a2:cd:e6:d5:f7:d8:ab:ee:ac:68:54:cd:0b:02:82:
                    5d:1c:05:b7:ba:ba:2c:9d:8d:47:3c:f4:25:57:6e:
                    11:8a:72:6b:17:50:11:0a:68:f5:93:93:08:07:62:
                    5c:90:54:a3:34:26:c8:75:75:99:40:82:c1:a9:73:
                    b9:e3:5d:72:5c:68:a2:94:f6:ab:16:9c:92:d5:00:
                    f5:92:53:88:80:b0:40:2b:39:9d:61:ff:f2:ec:b2:
                    78:59:ae:5f:62:5a:b3:01:d0:e9:ba:69:ae:1a:7f:
                    04:d2:3d:64:90:0e:3c:a3:cd:e5:44:7b:e1:f4:a3:
                    77:c0:cc:15:87:c3:02:49:55:3e:42:7c:c5:44:d9:
                    f8:40:2a:79:39:77:06:61:7c:a4:0f:6c:52:f8:b1:
                    65:b2:a7:5f:98:e1:78:8c:0e:90:c1:7f:a0:38:67:
                    e4:f4:21:89:ae:0f:a4:61:1a:6b:7f:55:da:5c:16:
                    99:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D2:EE:86:33:D3:8D:2B:2C:6F:D1:D0:3D:67:AA:F2:E1:69:33:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/16bff0d9-f0f4-37fb-acfc-9714b409f78d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.crl

            X509v3 Authority Key Identifier:
                keyid:CE:CE:00:83:A8:55:53:25:64:A0:C2:FB:A3:1C:CD:8A:BA:E6:9C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcee:400::/48
                  2602:fcee:404::/48
                  2602:fcee:408::/48
                  2602:fcee:ff4::-2602:fcee:ff6:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:34:b2:28:ec:bc:96:7f:00:e9:c1:c3:c4:4f:f7:57:8b:8e:
         f0:a7:d1:d8:f4:31:aa:40:22:e1:af:59:d8:89:a8:df:01:7c:
         1a:1a:90:fa:0f:7b:49:d1:0e:56:ee:72:8c:0b:69:64:34:9c:
         10:ea:26:51:de:25:6e:00:11:e9:e4:84:98:70:f1:b7:45:e7:
         19:14:8e:7e:da:34:22:97:10:f2:92:8e:b4:cb:b8:40:d1:f5:
         1b:b6:5a:08:00:61:f8:a5:0d:d8:f3:61:62:29:1d:0e:c2:2d:
         f2:eb:d8:a5:b2:7c:34:5c:2e:31:f0:8f:b6:79:84:ea:b9:f1:
         7c:83:53:48:89:bb:24:59:8a:93:db:8d:1a:b2:06:09:8d:48:
         37:f5:d5:71:d7:4e:b8:93:80:02:7a:78:85:eb:a2:71:f0:ef:
         9f:b2:e1:4d:a4:cc:c8:e9:a9:42:70:f6:1d:22:6d:c8:23:f7:
         75:4b:34:ae:23:ed:43:6f:e4:a5:4b:2b:99:63:3b:90:25:0e:
         b8:f8:46:a8:45:f8:e7:3f:3c:1d:09:e5:87:14:5c:a3:7e:51:
         f3:32:99:1d:4b:1e:df:4e:f1:4c:c5:8a:51:68:c9:a9:3a:2e:
         4b:c9:7c:90:f9:c5:da:26:56:46:c2:c9:a9:bd:39:4d:dc:ed:
         a4:93:11:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----