Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/a97a383d-e482-31bc-a34c-4853b4433051.roa
File:                     a97a383d-e482-31bc-a34c-4853b4433051.roa (raw, json)
Hash identifier:          XZZGc4bg+RCrvwPKrPoopbZ94YG1oqkaefM/PkQOq98=
Subject key identifier:   19:AE:57:A0:7A:06:18:64:CD:C1:97:E4:46:B2:E6:1E:68:66:F2:01
Certificate issuer:       /CN=733a751b-f4f7-4986-8389-8938fc4a481d
Certificate serial:       010D0C9F4328584471E9D369B93BBB5371A32F00
Authority key identifier: DE:D0:12:81:EE:5E:86:76:82:0F:04:E7:78:FE:09:C6:EE:75:69:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/a97a383d-e482-31bc-a34c-4853b4433051.roa
Signing time:             Thu 04 Jan 2024 20:16:37 +0000
ROA not before:           Thu 04 Jan 2024 20:16:37 +0000
ROA not after:            Wed 03 Apr 2024 19:16:37 +0000
asID:                     397735
IP address blocks:        2602:816:f000::/40 maxlen: 48

Validation:               Failed, certificate revoked on Sun 04 Feb 2024 03:18:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:71:e9:d3:69:b9:3b:bb:53:71:a3:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733a751b-f4f7-4986-8389-8938fc4a481d
        Validity
            Not Before: Jan  4 20:16:37 2024 GMT
            Not After : Apr  3 19:16:37 2024 GMT
        Subject: CN=8457b63a-b06e-42f5-a88d-4c7e348b9a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:04:e0:d6:58:bf:e9:90:91:24:a5:3a:e2:ea:
                    2c:59:54:b7:ee:2c:b1:72:64:78:b5:54:8b:c6:65:
                    08:57:d5:65:a9:b7:72:77:5f:c9:61:9e:3e:1d:28:
                    f1:66:c0:40:56:9e:86:e0:6b:2b:e5:5a:eb:21:9a:
                    c7:49:22:05:65:2d:c5:c8:cd:5d:22:b3:cc:d1:34:
                    93:ef:c9:17:50:ea:42:ba:87:54:ba:59:cb:7f:74:
                    30:a3:86:d8:73:74:d5:ab:0d:12:91:ff:ea:0b:c9:
                    66:71:aa:84:51:37:48:8e:bd:b0:7b:4e:e0:dd:fd:
                    f5:c9:ee:03:40:c8:e9:6a:f2:54:96:a2:ae:17:79:
                    02:1e:2f:4c:1f:90:c5:de:f2:91:c6:b3:fe:6d:ab:
                    01:8b:d5:e5:e0:26:e3:13:07:9e:88:62:4d:51:fb:
                    d7:1e:ea:b5:46:b4:88:02:f2:be:3c:43:40:3b:dd:
                    8c:b7:bc:9f:66:3b:32:c4:a6:f1:93:5e:84:ad:fc:
                    3a:f1:84:b1:ec:3a:48:ea:90:5f:2c:30:aa:be:b4:
                    7c:2f:ba:5d:5c:99:12:d7:20:7e:6f:41:f3:16:c8:
                    0a:fa:06:cc:92:e3:03:36:08:94:c9:db:87:30:d0:
                    3b:7f:03:9d:a9:50:a7:53:67:cc:45:85:c8:24:1f:
                    b5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AE:57:A0:7A:06:18:64:CD:C1:97:E4:46:B2:E6:1E:68:66:F2:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/a97a383d-e482-31bc-a34c-4853b4433051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/733a751b-f4f7-4986-8389-8938fc4a481d.crl

            X509v3 Authority Key Identifier:
                keyid:DE:D0:12:81:EE:5E:86:76:82:0F:04:E7:78:FE:09:C6:EE:75:69:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:816:f000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:53:3a:cc:e7:29:b0:10:ca:aa:c1:e1:cf:e2:59:20:13:91:
         81:90:12:18:39:a7:9a:aa:47:01:90:80:cd:67:d9:31:d8:7d:
         8c:c1:d6:5c:4b:41:cf:29:f7:37:4f:84:bb:88:45:d9:91:84:
         5a:68:12:7c:fa:2a:30:ae:0c:f8:6a:d2:76:ef:7e:9b:09:d5:
         44:5a:a1:80:23:9c:4c:c1:e1:71:9c:f2:a8:78:ae:7f:07:59:
         bb:50:ec:59:61:fd:ae:20:b0:6d:46:4b:17:e9:78:0e:af:e6:
         39:57:15:33:86:3b:c1:97:e5:97:7a:fc:62:9a:b3:c4:64:4b:
         7f:da:2a:d5:24:1f:82:e5:b2:da:86:52:07:6c:5b:5c:26:b4:
         a5:7e:a1:bd:ba:b2:f6:24:4c:fd:5c:a2:29:4a:bb:0d:9c:5b:
         c1:7b:2c:d8:7a:78:b6:37:b2:cd:9c:73:d4:d8:76:c2:bb:ee:
         99:fd:79:0a:2c:a2:1f:55:35:0f:de:b6:0e:45:af:37:6a:a4:
         12:b2:0c:d8:9f:99:06:35:81:07:4d:89:eb:9a:3e:ff:f7:a9:
         be:96:bb:1f:a8:7d:5d:c9:d3:cc:bf:11:c2:89:cf:2f:e0:3f:
         0b:97:5b:c9:98:ee:de:b6:f5:6b:9c:1b:80:83:bf:6c:ec:3c:
         65:38:8d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 4 04:01:32 2024 by rpki-client on console-fra.rpki-client.org