Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/4d2ee43b-3cb1-3fb0-82c4-95d0871989a1.roa
File:                     4d2ee43b-3cb1-3fb0-82c4-95d0871989a1.roa (raw, json)
Hash identifier:          BcYQapvrqkU4T7n+HoVBVdXrFDL0jmGlOMKDI57H0b4=
Subject key identifier:   01:57:E4:64:4D:60:03:78:32:79:D7:BA:73:7A:D2:EB:5A:27:A5:25
Certificate issuer:       /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial:       010D0C9F43285843E935E04840D21BDF24A84B80
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/4d2ee43b-3cb1-3fb0-82c4-95d0871989a1.roa
Signing time:             Thu 16 Nov 2023 21:04:06 +0000
ROA not before:           Thu 16 Nov 2023 21:04:06 +0000
ROA not after:            Wed 14 Feb 2024 21:04:06 +0000
asID:                     65531
IP address blocks:        2602:fa2e::/37 maxlen: 37

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:e9:35:e0:48:40:d2:1b:df:24:a8:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
        Validity
            Not Before: Nov 16 21:04:06 2023 GMT
            Not After : Feb 14 21:04:06 2024 GMT
        Subject: CN=b562ca89-67c2-42e6-902f-216228624a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c3:64:b5:ca:ff:62:50:cb:ee:7f:2a:6d:0e:
                    8f:41:63:bb:ff:12:67:63:fe:8c:e8:7d:cf:1a:ac:
                    a3:5a:55:38:03:7b:b7:1f:69:18:be:f3:e6:95:a1:
                    8e:3f:d8:19:d4:f3:36:e4:40:36:7e:73:a4:14:d9:
                    02:03:bc:0c:89:b8:8d:41:72:79:53:80:a4:0a:f1:
                    07:e4:69:5e:de:e8:2f:b0:ea:7b:76:f6:65:86:06:
                    f8:22:f6:0d:83:1e:9d:9e:0e:7a:73:41:e6:15:d6:
                    6b:48:79:d5:9a:1e:c5:d4:22:d2:50:c8:e0:8e:83:
                    3b:88:5d:ca:8d:c9:3d:32:50:4e:f7:be:d8:27:49:
                    5e:26:31:3a:02:50:d8:86:29:37:ed:ad:88:f7:ab:
                    2c:41:39:67:d8:68:fa:06:f0:15:8c:1c:7c:59:34:
                    bb:fa:60:2c:4e:96:08:56:a5:d9:82:69:e8:4e:f5:
                    bd:00:ef:a7:67:db:80:e3:b3:14:6c:84:e0:6c:fd:
                    1b:b1:ec:77:be:66:3f:05:60:94:b6:bc:82:a2:1a:
                    b2:a7:f2:0a:67:ca:39:a6:b9:f6:a4:a3:f1:18:26:
                    0d:5c:74:ee:68:c2:0d:6a:de:95:a7:ed:10:90:f5:
                    42:76:b1:26:25:8e:6a:36:3e:95:08:d8:5e:0a:2c:
                    cd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:57:E4:64:4D:60:03:78:32:79:D7:BA:73:7A:D2:EB:5A:27:A5:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/4d2ee43b-3cb1-3fb0-82c4-95d0871989a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl

            X509v3 Authority Key Identifier:
                keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa2e::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:c7:b1:78:7b:6a:23:3b:ad:09:2f:53:7d:7f:3c:88:84:c8:
         d3:99:8e:de:84:b6:8d:94:a0:ee:fc:97:ad:2e:99:0c:e1:fa:
         db:0e:05:cc:89:05:5e:94:72:71:d2:a3:28:15:ea:21:dc:14:
         b2:bd:64:c0:19:e6:b5:a9:4e:22:1d:65:76:b4:43:be:bc:80:
         7b:8b:6a:8c:49:6c:a7:c8:81:59:45:ed:10:f4:49:4d:d6:fe:
         a0:e6:4b:28:89:9c:8f:44:29:5e:49:f9:2d:81:bb:7f:0b:b3:
         16:7d:c7:bf:0b:b2:d5:3c:a7:24:e3:75:11:2a:db:ca:68:19:
         fb:c0:a8:a4:9f:a1:58:b0:1c:13:17:24:f7:ed:a9:db:db:c7:
         e2:1f:e3:5b:95:89:b2:1a:41:41:80:64:d4:e2:54:00:0b:7e:
         94:59:fc:80:1f:24:b5:4f:fb:95:68:6f:04:cd:78:61:88:0d:
         77:e1:ee:5d:38:5e:77:2c:23:16:29:8e:f4:c6:43:c0:ba:a4:
         6a:dd:e1:30:37:1d:39:8b:4e:02:b6:40:f2:fe:fe:3d:82:35:
         f5:92:a7:c5:e1:65:98:f5:b8:6e:75:c4:32:3e:f4:a5:b2:c0:
         8f:e3:79:42:85:43:64:fe:fd:ca:b5:bd:bf:d9:1e:3d:4d:61:
         ae:58:7a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----