Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6079eed-a495-405f-87a5-c0ee09e31c75/652dbbc0-0e3d-31d2-adce-6927cd2cc5cf.roa
File:                     652dbbc0-0e3d-31d2-adce-6927cd2cc5cf.roa (raw, json)
Hash identifier:          ZnKYHGz9aLD8WBUvIn9ULzIoIUynVK/1MmPbT8o2J5I=
Subject key identifier:   5D:7A:EA:6F:24:B3:D8:70:B6:D6:DA:60:40:9D:B1:63:8B:5D:D7:3E
Certificate issuer:       /CN=d6079eed-a495-405f-87a5-c0ee09e31c75
Certificate serial:       010D0C9F4328584448B425EF3C2BD281B5876900
Authority key identifier: DC:6E:92:F8:0A:29:39:C2:7E:9A:03:AB:B6:BD:31:BD:D3:CB:72:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6079eed-a495-405f-87a5-c0ee09e31c75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6079eed-a495-405f-87a5-c0ee09e31c75/652dbbc0-0e3d-31d2-adce-6927cd2cc5cf.roa
Signing time:             Thu 21 Dec 2023 02:00:13 +0000
ROA not before:           Thu 21 Dec 2023 02:00:13 +0000
ROA not after:            Wed 20 Mar 2024 01:00:13 +0000
asID:                     203619
IP address blocks:        2602:faa5:5::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 31 Jan 2024 02:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:48:b4:25:ef:3c:2b:d2:81:b5:87:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6079eed-a495-405f-87a5-c0ee09e31c75
        Validity
            Not Before: Dec 21 02:00:13 2023 GMT
            Not After : Mar 20 01:00:13 2024 GMT
        Subject: CN=1bcec920-1bf3-4c4d-bf9a-90ccb360cde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4f:2f:3a:ea:2e:96:63:ef:70:6b:cb:f5:e8:
                    04:c2:c2:c1:aa:fe:e5:89:32:40:01:fb:38:fe:d4:
                    47:8f:8c:71:84:fb:7f:e2:bc:9b:02:04:c8:24:95:
                    b6:5b:b2:64:92:ca:c6:9d:c3:e1:95:9a:c3:ae:d1:
                    e5:a7:af:47:33:d2:57:15:46:98:b8:c9:f3:22:11:
                    25:a5:4d:5e:78:7a:1b:3d:e9:01:df:8a:72:41:db:
                    41:ad:3a:f0:36:40:9d:0f:e5:79:b2:de:2f:d5:3c:
                    70:2e:24:3d:97:01:03:35:c1:fe:f9:73:66:27:2e:
                    8f:a5:54:07:53:6a:35:69:8f:c7:fb:10:e0:f8:73:
                    13:a7:f5:52:dd:86:c2:86:4a:00:a7:4c:6e:43:6f:
                    d4:b0:bd:20:a9:4c:dd:88:cb:5d:49:a5:7f:83:db:
                    79:fd:eb:cf:2c:6f:b9:fe:7a:a5:6c:32:ab:66:b5:
                    1a:76:7c:82:f4:43:12:9f:c5:b6:27:2e:f9:93:22:
                    8d:d9:c0:0e:34:ad:27:cb:0a:b4:60:59:6a:46:d3:
                    cb:88:9d:c5:79:f4:03:74:25:c3:8c:26:4b:48:f5:
                    bd:16:ca:3d:33:fa:30:1f:ea:e7:91:65:4d:ef:e4:
                    81:a8:69:49:86:0d:1f:35:bf:8f:8b:1f:8c:06:71:
                    9d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7A:EA:6F:24:B3:D8:70:B6:D6:DA:60:40:9D:B1:63:8B:5D:D7:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6079eed-a495-405f-87a5-c0ee09e31c75/652dbbc0-0e3d-31d2-adce-6927cd2cc5cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6079eed-a495-405f-87a5-c0ee09e31c75/d6079eed-a495-405f-87a5-c0ee09e31c75.crl

            X509v3 Authority Key Identifier:
                keyid:DC:6E:92:F8:0A:29:39:C2:7E:9A:03:AB:B6:BD:31:BD:D3:CB:72:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6079eed-a495-405f-87a5-c0ee09e31c75.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:97:18:a5:3d:79:af:ad:f2:c9:ac:b0:a6:cd:c1:b3:d9:d6:
         2f:15:3c:f0:e9:b9:fb:35:2e:6e:de:dd:d4:39:e7:00:92:42:
         da:34:3a:07:ab:f2:f8:74:ee:9e:4c:39:ea:a4:4b:f4:66:04:
         f9:4e:3f:1b:3f:87:67:3c:3f:a6:a6:79:23:cf:4d:4e:03:a1:
         12:ab:ca:05:5d:59:6a:88:c2:d7:2c:2e:df:8e:b3:dd:a3:6c:
         aa:ee:0e:8d:de:89:08:11:eb:34:e9:a7:3b:6b:ca:96:6f:78:
         b8:e2:9d:30:db:fa:b4:94:f2:93:9b:01:f9:f5:77:a0:fd:77:
         db:06:78:94:8c:fe:1f:87:91:62:e4:68:6b:dd:13:46:11:fa:
         84:b6:fa:ef:ff:bd:f3:cd:cf:7e:b5:2d:58:94:e1:7e:94:92:
         0d:66:d0:89:5e:bb:45:76:11:a1:96:ef:fd:a6:b3:df:b8:8c:
         69:bf:77:7f:5e:b9:d7:b5:1c:00:1f:ff:b3:25:f5:fd:7d:9e:
         f8:a4:57:55:f8:70:5e:08:a5:b2:b4:94:69:b5:b2:ad:51:61:
         96:ab:cd:6f:a2:99:03:d5:0a:cb:1d:b7:fc:e9:01:0c:d0:56:
         8b:5c:c2:2a:59:8e:6d:d4:81:67:4d:e0:7a:eb:42:30:c9:d2:
         96:11:b8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----