Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/523397e8-ddf4-36e8-903c-7f61b6baffef.roa
File:                     523397e8-ddf4-36e8-903c-7f61b6baffef.roa (raw, json)
Hash identifier:          RKcswGmVcD9lR4LIOzF7wNBXOh0q3Og2KCvxlGpeIoY=
Subject key identifier:   A3:8C:A1:DE:63:75:7B:03:D4:59:51:D7:55:B0:93:FF:DE:17:06:8B
Certificate issuer:       /CN=c5c851da-daf3-4388-8104-40baa3dc3939
Certificate serial:       010D0C9F43285845B3CB15575D6EF749F401B480
Authority key identifier: A6:C4:8B:86:65:14:F3:B2:66:77:64:A4:DE:C5:2C:8D:CB:35:13:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/523397e8-ddf4-36e8-903c-7f61b6baffef.roa
Signing time:             Mon 29 Apr 2024 03:24:57 +0000
ROA not before:           Mon 29 Apr 2024 03:24:57 +0000
ROA not after:            Sun 28 Jul 2024 03:24:57 +0000
asID:                     23459
IP address blocks:        2602:f90f:2::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 29 Apr 2024 07:39:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:cb:15:57:5d:6e:f7:49:f4:01:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5c851da-daf3-4388-8104-40baa3dc3939
        Validity
            Not Before: Apr 29 03:24:57 2024 GMT
            Not After : Jul 28 03:24:57 2024 GMT
        Subject: CN=892ee5fe-fd99-4a79-b27d-2aebae764342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:88:c9:fb:ad:52:c2:c3:09:c1:f8:bc:44:7c:
                    6b:de:23:21:c7:1d:07:dc:b9:9a:be:da:32:89:54:
                    03:ed:f8:30:50:f1:eb:04:ab:21:8a:2a:05:2e:a4:
                    9e:28:bc:ff:e5:d1:04:56:1c:f6:02:aa:4f:98:c8:
                    fd:7f:12:6d:54:14:30:bc:ae:6b:8d:2c:5c:b2:51:
                    87:cc:f7:01:a4:ee:d9:3b:d2:8b:97:16:77:b1:86:
                    b1:49:1d:f5:f6:04:6e:a9:83:c0:df:53:3d:5d:08:
                    7b:c4:c4:4f:79:88:4c:e0:69:7c:0f:d2:db:4e:c2:
                    6b:13:3d:f6:fc:d2:ae:b0:7e:51:f0:39:cf:bd:56:
                    ce:e2:a3:d6:8b:01:e9:42:6e:f9:4e:11:e6:b4:62:
                    9b:66:f1:07:8f:4b:5e:b7:f7:da:48:69:ee:d2:4e:
                    72:8a:c2:c2:2a:48:19:09:15:d8:1d:ff:3f:e5:76:
                    74:18:ca:6b:64:ca:99:84:d9:ca:57:36:86:b4:d4:
                    98:30:8e:33:cb:19:cd:e2:8e:8b:34:77:ac:a6:ac:
                    82:37:b8:5e:02:63:0a:10:21:93:a7:87:c4:ca:a3:
                    d5:af:1c:f2:32:a6:71:99:c8:d7:02:95:c9:21:08:
                    27:e2:db:2d:16:a8:90:e5:82:9d:d9:57:0f:10:a4:
                    29:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8C:A1:DE:63:75:7B:03:D4:59:51:D7:55:B0:93:FF:DE:17:06:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/523397e8-ddf4-36e8-903c-7f61b6baffef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/c5c851da-daf3-4388-8104-40baa3dc3939.crl

            X509v3 Authority Key Identifier:
                keyid:A6:C4:8B:86:65:14:F3:B2:66:77:64:A4:DE:C5:2C:8D:CB:35:13:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f90f:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:1a:02:c0:ad:6e:31:5e:c7:fa:23:b5:32:68:a3:90:d6:d3:
         73:d7:d5:50:ea:a4:98:58:08:47:04:18:78:36:4b:9d:eb:25:
         02:19:53:ff:96:f0:ef:75:98:01:20:09:81:88:63:04:7f:53:
         94:ea:6d:05:53:4f:18:29:37:1a:a9:39:63:33:35:a8:f5:b5:
         20:0c:b0:12:37:a5:b2:44:39:66:51:3b:11:dd:75:d7:34:66:
         e1:3a:00:5e:2a:d7:e1:f4:52:7a:65:30:4f:db:d9:07:dd:ac:
         99:37:0b:cf:d9:a7:ab:d1:4a:7d:de:ac:4d:01:d4:77:1a:bc:
         ba:4f:fe:4d:e7:47:ec:cc:82:8a:c1:6c:27:10:4f:9c:11:22:
         e3:bf:2b:78:81:16:f0:1e:cd:d3:85:e1:86:00:24:4e:27:1c:
         ef:1c:9d:6d:72:f0:b6:a0:34:91:bd:c3:db:67:a6:ce:5b:40:
         f1:49:07:fc:9a:8e:73:81:7d:dd:92:7c:7b:9c:0e:3b:83:05:
         2d:b9:fe:68:cb:b3:6c:96:f7:04:56:14:fc:cc:ba:8e:3e:71:
         a2:02:3d:c8:8b:f7:20:9a:7d:05:c6:ff:4f:e3:7e:a9:a4:e9:
         af:02:04:98:d0:15:1b:80:29:55:7c:9a:65:32:11:8d:7e:1b:
         22:50:5e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----