Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/bbd31c3b-6dbe-372b-a808-7d6583b28274.roa
File:                     bbd31c3b-6dbe-372b-a808-7d6583b28274.roa (raw, json)
Hash identifier:          bBOvJkLImwyfS3DTXq5XoYhTvzqpxtqjxn5yEyO2Ccw=
Subject key identifier:   E3:4D:2B:C6:FC:72:EF:D6:4A:7D:E6:11:3D:8A:9B:3F:F9:47:98:7A
Certificate issuer:       /CN=50f21827-6d64-4880-9e46-c3d13313c975
Certificate serial:       010D0C9F43285845ECE24170F68777522ADB09C0
Authority key identifier: EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/bbd31c3b-6dbe-372b-a808-7d6583b28274.roa
Signing time:             Sun 19 May 2024 14:12:43 +0000
ROA not before:           Sun 19 May 2024 14:12:43 +0000
ROA not after:            Sat 17 Aug 2024 14:12:43 +0000
asID:                     23347
IP address blocks:        2602:f921::/36 maxlen: 36

Validation:               Failed, certificate revoked on Sun 02 Jun 2024 14:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ec:e2:41:70:f6:87:77:52:2a:db:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f21827-6d64-4880-9e46-c3d13313c975
        Validity
            Not Before: May 19 14:12:43 2024 GMT
            Not After : Aug 17 14:12:43 2024 GMT
        Subject: CN=ae667a91-832f-40a4-9b30-be79eb85b2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:20:17:15:cd:56:30:e1:64:65:dd:b6:53:c4:
                    95:b9:32:e3:26:de:36:e2:e3:a7:a6:b2:8b:d0:d9:
                    ad:de:ab:fb:fe:e6:33:ac:0a:24:d5:0a:a9:0d:b0:
                    16:ff:a5:56:8c:fb:2b:95:6b:ca:11:45:88:2d:5f:
                    87:6a:54:f9:03:8f:ed:64:72:b3:b2:61:2a:1b:4e:
                    ea:ea:33:25:be:c4:5c:cd:b2:31:40:4d:3e:f2:96:
                    99:9d:1b:0f:e6:1c:28:90:2c:32:2f:44:5e:15:bd:
                    10:67:9e:b2:01:55:2f:cf:e8:5d:e7:be:a0:41:87:
                    0d:7c:94:97:ab:81:93:ca:df:53:de:a4:4b:1b:7f:
                    97:09:7a:c5:c5:a4:30:fb:13:85:32:9a:7d:d3:ff:
                    0c:7f:5e:72:25:3a:c6:f2:96:bd:cf:fd:97:3d:f2:
                    f0:dc:aa:c5:c4:30:b0:2d:fa:af:fc:a3:0b:1d:bf:
                    b5:e7:4d:2f:8d:7c:f3:d7:02:a6:33:d9:a0:45:18:
                    37:c6:7e:4d:ee:08:f7:b3:f2:da:6f:3e:7f:2d:4a:
                    55:f7:94:33:ba:f4:ec:c8:49:d1:f4:e3:d3:7c:4e:
                    b1:58:d1:4f:4a:b4:d7:2f:03:6c:f9:21:92:c4:ce:
                    57:fe:e1:fa:8f:17:c8:b4:8f:cc:72:a7:59:3c:4d:
                    36:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4D:2B:C6:FC:72:EF:D6:4A:7D:E6:11:3D:8A:9B:3F:F9:47:98:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/bbd31c3b-6dbe-372b-a808-7d6583b28274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl

            X509v3 Authority Key Identifier:
                keyid:EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f921::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:cb:13:e1:21:ee:da:52:cb:2c:6b:0a:23:6d:f8:9e:7e:4b:
         cf:d2:33:a7:c0:44:32:32:18:e2:21:97:43:e3:4b:f4:18:86:
         a9:fe:80:3d:2a:51:f7:9d:a7:25:44:ac:c6:36:8a:a3:68:3f:
         40:7e:15:09:f2:87:b4:70:34:e5:d6:2a:bb:b9:44:06:0b:c3:
         d5:4f:bc:50:32:85:d7:ab:12:4f:64:89:92:f0:80:db:d8:98:
         58:f1:13:68:54:1d:21:58:54:64:17:39:4a:57:de:e2:4c:54:
         da:8b:79:6c:52:9b:13:3d:9a:8e:b4:2b:4e:35:1b:10:4c:04:
         40:a1:8c:4f:00:38:67:ad:cf:91:b8:3f:02:78:a5:62:6c:fd:
         f8:a3:62:8e:aa:1e:97:44:95:83:4c:b3:9b:92:aa:e9:93:c4:
         3c:07:62:60:39:31:49:90:09:c0:18:03:b3:14:cf:ea:6a:2c:
         bd:4d:65:1c:01:50:71:67:0d:92:31:27:5d:b1:b0:e2:a0:c5:
         00:1a:da:23:07:a7:cf:dc:30:38:59:fe:5a:c6:c1:84:83:e6:
         00:1b:17:9c:8e:7f:64:60:43:97:af:ff:0d:de:d8:1a:2a:5e:
         b5:0b:43:1e:6a:7b:cf:3c:36:a8:fe:87:f1:38:bf:cb:2e:d8:
         6c:9b:88:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----