Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d/c05abeed-b843-34e2-b169-8fd492e12d9c.roa
File:                     c05abeed-b843-34e2-b169-8fd492e12d9c.roa (raw, json)
Hash identifier:          6xQqE+Yg48NpjkxdlADrrQ0ZaeIZHykJN9fa7xqWGVE=
Subject key identifier:   2D:22:C9:D0:1E:6A:25:2C:0A:C9:55:AE:0A:F4:3D:DD:17:BA:30:51
Certificate issuer:       /CN=9330b8fe-8cb9-471b-a186-5ab83c9e451d
Certificate serial:       010D0C9F43285843A5025BC45659683633A512C0
Authority key identifier: EE:AA:21:D4:C0:E7:3B:BA:82:BF:E0:45:1E:2B:CA:94:3E:1A:F5:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d/c05abeed-b843-34e2-b169-8fd492e12d9c.roa
Signing time:             Mon 23 Oct 2023 10:45:20 +0000
ROA not before:           Mon 23 Oct 2023 10:45:20 +0000
ROA not after:            Sun 21 Jan 2024 11:45:20 +0000
asID:                     393577
IP address blocks:        2602:291:1::/48 maxlen: 48
                          2602:291:69::/48 maxlen: 48
                          2602:291:66::/48 maxlen: 48
                          2602:291:77::/48 maxlen: 48
                          2602:291:99::/48 maxlen: 48
                          2602:291:ca::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:a5:02:5b:c4:56:59:68:36:33:a5:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9330b8fe-8cb9-471b-a186-5ab83c9e451d
        Validity
            Not Before: Oct 23 10:45:20 2023 GMT
            Not After : Jan 21 11:45:20 2024 GMT
        Subject: CN=278ad32d-3ac8-437c-aa65-acca1deb556b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bc:2e:11:d4:58:3c:7e:b8:60:dc:f8:a0:26:
                    f6:2b:b1:2a:34:de:b6:a1:8f:d2:50:41:92:13:b7:
                    99:4f:62:34:f6:24:32:0b:d2:10:91:17:ee:a5:bc:
                    d8:16:70:56:32:52:98:34:03:b4:a4:8a:aa:d0:aa:
                    10:c8:4f:49:e9:ba:4e:88:02:a8:01:8e:80:43:f0:
                    bb:a9:c7:4d:85:32:06:41:58:26:44:95:bf:33:15:
                    9c:22:bd:f9:6e:db:0c:f4:5d:09:c8:98:59:d0:e0:
                    d0:a5:6b:87:5e:ae:ad:8a:c3:35:53:46:c5:2d:a9:
                    46:e7:68:2d:38:95:f4:71:13:cc:ba:77:62:4a:48:
                    41:a1:a3:b0:ff:30:46:66:91:2f:5c:4d:53:80:b3:
                    d5:f0:cf:fb:8f:b1:7f:ff:96:c5:e5:b3:6a:3f:c6:
                    c5:fe:12:69:f6:a2:50:06:46:86:e7:c9:25:eb:e0:
                    91:4f:37:fd:7b:95:d9:45:64:34:0d:04:7e:8f:60:
                    85:60:ce:0c:6b:af:fe:ff:7a:88:44:e7:91:87:01:
                    1f:e4:56:25:8f:a6:25:3c:a5:ea:22:c0:37:7d:98:
                    ba:d5:92:be:da:48:a2:d7:98:4f:55:62:67:30:d1:
                    80:6b:8b:2c:e2:ce:0d:5c:4d:d6:e8:7c:f6:22:43:
                    19:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:22:C9:D0:1E:6A:25:2C:0A:C9:55:AE:0A:F4:3D:DD:17:BA:30:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d/c05abeed-b843-34e2-b169-8fd492e12d9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d/9330b8fe-8cb9-471b-a186-5ab83c9e451d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:AA:21:D4:C0:E7:3B:BA:82:BF:E0:45:1E:2B:CA:94:3E:1A:F5:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:291:1::/48
                  2602:291:66::/48
                  2602:291:69::/48
                  2602:291:77::/48
                  2602:291:99::/48
                  2602:291:ca::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:88:72:0a:b6:8c:c2:92:77:39:79:0c:0d:f7:23:3e:f9:08:
         39:a4:30:c4:6c:94:91:2f:ba:fa:75:df:31:46:4c:8d:f8:0f:
         69:6f:1a:1d:55:2b:a4:ae:3b:c7:2c:87:51:32:e2:31:95:a8:
         ab:5a:55:2b:cc:97:69:1f:1b:4b:75:a2:46:aa:58:87:7a:f1:
         4b:12:89:ab:38:fe:77:f6:db:d3:08:26:dc:f9:d0:0b:12:22:
         29:44:c3:43:51:63:6b:3d:68:16:6a:b3:4b:1f:9f:e9:c0:3f:
         a3:fd:df:8e:93:8d:f7:ca:b0:e8:08:73:96:86:03:44:5b:f6:
         28:94:5f:d3:55:53:42:57:82:38:10:0e:c6:36:8f:67:e8:c1:
         fc:2e:64:87:7d:a1:8f:5e:dc:b4:0f:0a:7e:00:b7:30:6f:bf:
         2f:9b:27:e7:a0:6b:79:d2:b3:f7:0c:7d:da:a6:24:05:95:77:
         9a:cf:7d:81:10:8b:c3:d8:80:20:86:38:1f:75:c7:e9:cb:fc:
         c2:d9:b4:bf:6f:41:76:09:7a:59:37:ab:ea:d8:90:df:84:c8:
         dd:da:7b:db:17:4c:1f:ab:05:59:01:e6:ab:b3:d3:bf:ce:75:
         45:c2:a0:7e:76:76:08:db:ed:15:f1:e5:73:d9:78:0f:d7:06:
         3d:a2:aa:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----