Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16/610acded-4eed-3803-a036-2bd43392840d.roa
File:                     610acded-4eed-3803-a036-2bd43392840d.roa (raw, json)
Hash identifier:          tokXSPcBQklcXqLYJrYgXArnWdTWxzVDuXxwxtk6Tdg=
Subject key identifier:   A0:49:76:48:7E:18:A4:B4:A7:AB:BC:36:DA:7E:1A:65:11:88:C1:83
Certificate issuer:       /CN=bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16
Certificate serial:       010D0C9F4328584111300F9821D1F92871F9B180
Authority key identifier: EE:70:3D:40:DA:37:1C:84:70:75:A1:4D:9A:FC:98:73:DD:0B:8F:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16/610acded-4eed-3803-a036-2bd43392840d.roa
Signing time:             Tue 28 Feb 2023 22:08:25 +0000
ROA not before:           Tue 28 Feb 2023 22:08:25 +0000
ROA not after:            Mon 02 Jun 2025 04:00:00 +0000
asID:                     379270
IP address blocks:        2602:fa9a::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:11:30:0f:98:21:d1:f9:28:71:f9:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16
        Validity
            Not Before: Feb 28 22:08:25 2023 GMT
            Not After : Jun  2 04:00:00 2025 GMT
        Subject: CN=e2de19e6-cf89-4525-8873-fd47ba1f4765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a4:ac:8e:0e:d8:61:2f:56:d7:2f:81:40:8f:
                    fe:9b:10:3b:e8:a5:fc:84:c1:07:0f:28:07:06:61:
                    fa:16:fc:e4:76:a3:62:e2:22:50:5c:f2:f7:88:59:
                    40:ff:03:5b:06:97:aa:b4:53:0f:67:47:be:08:d3:
                    ed:ef:91:bd:4f:bc:72:dc:ea:c8:5d:db:93:0e:df:
                    91:f6:4d:5c:bd:be:2b:63:e0:87:5f:fe:88:96:ad:
                    4a:9c:fb:1d:b5:a3:4f:a0:94:92:c8:0e:a0:f4:23:
                    36:79:f5:76:80:4a:46:6d:88:85:19:35:c1:6b:3f:
                    bf:71:7d:6b:89:84:e7:b1:c0:a6:40:81:d7:82:9c:
                    9d:40:d0:a9:96:fa:3e:40:a1:00:1c:89:22:96:24:
                    a1:f8:1a:02:d0:f2:33:08:2e:39:36:bd:b5:7c:5a:
                    b2:4f:7e:ba:b5:d9:3c:1d:a7:12:26:eb:ac:e4:e3:
                    63:df:67:17:14:e4:5a:6f:42:8f:09:7c:85:82:5b:
                    03:25:32:55:00:c0:5e:f3:04:e2:04:48:e5:18:5d:
                    19:01:b2:53:1d:7d:70:84:3a:0e:6a:b2:5d:9d:4b:
                    d4:d6:e3:bd:9b:90:6e:82:e9:85:36:7f:dc:77:77:
                    d9:59:67:f2:00:a9:2b:c6:e4:3e:6f:34:9c:8e:dd:
                    ea:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:49:76:48:7E:18:A4:B4:A7:AB:BC:36:DA:7E:1A:65:11:88:C1:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16/610acded-4eed-3803-a036-2bd43392840d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16.crl

            X509v3 Authority Key Identifier:
                keyid:EE:70:3D:40:DA:37:1C:84:70:75:A1:4D:9A:FC:98:73:DD:0B:8F:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:d2:44:dd:ad:12:d7:83:c0:99:86:6d:f0:53:fb:05:c9:b4:
         5a:8d:fa:f0:f4:3f:a2:19:6d:88:89:41:51:da:5e:4c:f9:c4:
         e4:57:26:d2:eb:0a:3d:72:d6:75:d7:15:a5:fb:23:57:5d:11:
         53:83:12:58:a6:30:1a:88:4f:52:3c:ae:df:a4:ad:ed:d3:e8:
         b5:8f:ff:25:c1:59:59:c7:20:6d:6a:d7:f3:2e:cb:60:2f:ac:
         2d:99:5b:c7:df:f0:c7:e7:c7:bb:7b:13:40:fa:85:57:6a:5d:
         97:fa:90:5a:e5:5d:75:fb:7f:52:dd:a7:00:cd:52:f9:71:55:
         09:37:ed:2b:49:1b:fa:4e:7b:cc:b9:a1:9d:ee:04:33:27:cc:
         02:f6:89:13:e3:78:a3:24:ef:a6:1b:fc:6e:5b:20:8d:b4:65:
         7c:ce:d8:8d:46:7c:50:5c:5f:da:9c:12:6b:5f:70:55:f3:69:
         74:e1:a0:d1:62:01:5e:b0:d1:4a:35:6d:e7:dd:e9:2e:4c:09:
         33:99:1f:e4:92:be:41:26:2a:9d:3b:cc:61:40:c6:a5:cb:94:
         3e:3a:c1:c7:ba:f3:8e:7e:6a:bc:c9:32:78:a2:f9:77:00:0a:
         14:ce:c4:96:c5:53:d6:39:76:9b:77:ed:6e:3a:a9:d6:6d:eb:
         69:57:59:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----