Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21c1b7e6-de31-3d1f-9f75-6d2d65502930.roa
File:                     21c1b7e6-de31-3d1f-9f75-6d2d65502930.roa (raw, json)
Hash identifier:          pg8P1qGyxFiyRfSnAoRi7M/bz5a72dr+3z324Boet7M=
Subject key identifier:   0D:9C:DD:A3:E4:91:82:34:F2:D8:54:14:D1:FD:15:DC:6F:5E:35:7C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583F07328B52D5BFD67CFECC1C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21c1b7e6-de31-3d1f-9f75-6d2d65502930.roa
Signing time:             Thu 25 Aug 2022 12:00:00 +0000
ROA not before:           Thu 25 Aug 2022 12:00:00 +0000
ROA not after:            Sun 24 Aug 2025 04:00:00 +0000
asID:                     701
IP address blocks:        2600:4040:5000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Tue 05 Dec 2023 19:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:07:32:8b:52:d5:bf:d6:7c:fe:cc:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 25 12:00:00 2022 GMT
            Not After : Aug 24 04:00:00 2025 GMT
        Subject: CN=57112d4a-a214-45a2-8e9c-5ec6a0a0671f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f0:27:f5:6e:b7:75:3b:6c:23:15:37:4c:77:
                    0a:ae:8f:1d:49:ef:7a:f2:30:7c:49:02:9f:25:e9:
                    d4:4e:88:22:e7:86:ce:6d:41:a4:93:5a:16:00:82:
                    1b:57:98:cf:68:89:80:77:c6:72:c3:ed:3b:60:81:
                    ef:e8:cf:ff:cd:8f:be:00:32:3f:e6:53:a0:37:01:
                    27:75:2b:0b:19:53:13:05:ca:99:23:36:10:1a:74:
                    8b:34:15:f7:00:0c:9f:10:be:4e:19:25:82:a9:f3:
                    c4:29:01:37:23:64:33:fa:40:75:b2:6b:d0:1d:7a:
                    07:68:f5:2c:9b:5d:cb:86:95:39:0c:14:ac:8f:3e:
                    cb:bf:d7:c7:9f:ad:df:7a:f3:4e:0a:fe:67:d2:f1:
                    e5:a0:a9:be:60:1b:58:85:f4:d7:ef:c2:cf:e0:a4:
                    37:d8:27:06:3b:ed:20:20:79:db:01:07:ac:ea:13:
                    79:77:fa:97:05:0b:a0:e5:23:a3:9c:76:a0:f4:49:
                    ac:97:58:3a:db:f4:19:30:47:7f:83:28:d0:73:3d:
                    b2:83:6d:30:ab:33:60:0a:f0:00:8f:89:a3:a3:ac:
                    86:0d:f2:ee:c3:7f:f2:57:e9:5f:7a:ab:bc:e6:e1:
                    cd:0e:dd:ce:43:18:ce:13:15:ec:45:98:79:c0:b7:
                    34:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9C:DD:A3:E4:91:82:34:F2:D8:54:14:D1:FD:15:DC:6F:5E:35:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21c1b7e6-de31-3d1f-9f75-6d2d65502930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:4040:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:73:56:45:e9:95:78:7d:67:49:ed:95:23:e0:10:a5:1d:bf:
         e4:33:d6:f1:97:87:f7:0b:32:14:14:82:ad:5d:4a:eb:53:46:
         08:96:84:e9:26:60:03:30:94:f7:50:3d:91:40:6e:e6:64:73:
         c6:ec:33:3c:3f:b8:53:cb:86:a8:5e:76:94:87:36:61:b8:43:
         98:eb:f8:0f:ea:92:99:61:77:12:95:43:ae:d2:0d:75:3d:5d:
         8f:0e:f7:f5:a5:70:f9:46:9c:f7:71:82:75:9f:5e:a3:e0:44:
         31:86:e3:c0:9c:fc:5e:cf:f4:c8:90:c1:7d:a2:c7:a2:f7:37:
         ec:a5:be:82:a5:05:1f:bb:b3:d6:40:59:21:83:a8:53:51:ab:
         1a:eb:0d:f0:e3:fd:38:0f:4e:11:f8:41:79:80:70:2a:82:01:
         ca:13:81:d3:8f:29:b1:6b:d2:24:3d:8f:ad:26:d3:b7:70:cc:
         de:4c:0d:c1:9c:f0:4a:2d:2e:e3:39:17:e7:4e:9d:6b:b7:d1:
         42:e6:c0:be:9e:01:f5:e9:00:85:7c:15:48:df:40:43:15:6a:
         54:2e:57:cf:cb:c2:ff:a1:d7:a3:b5:8a:e5:21:9e:5b:69:4d:
         fb:cb:72:e2:28:43:aa:b4:2c:b7:82:be:96:03:df:ef:0b:02:
         8e:c5:36:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----