Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6079eed-a495-405f-87a5-c0ee09e31c75/8a7caf7b-ba9a-3471-ba6a-336a006035e5.roa
File:                     8a7caf7b-ba9a-3471-ba6a-336a006035e5.roa (raw, json)
Hash identifier:          TMBHs2j+7BInRfMQoaNCmhqOj5N+SyxdAju3r0RF8es=
Subject key identifier:   4C:C9:94:AE:0C:93:46:6B:48:61:46:5B:FB:68:97:D0:1A:6E:09:FC
Certificate issuer:       /CN=d6079eed-a495-405f-87a5-c0ee09e31c75
Certificate serial:       010D0C9F43285844798F272019A442789BA7BE40
Authority key identifier: DC:6E:92:F8:0A:29:39:C2:7E:9A:03:AB:B6:BD:31:BD:D3:CB:72:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6079eed-a495-405f-87a5-c0ee09e31c75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6079eed-a495-405f-87a5-c0ee09e31c75/8a7caf7b-ba9a-3471-ba6a-336a006035e5.roa
Signing time:             Sun 07 Jan 2024 14:00:20 +0000
ROA not before:           Sun 07 Jan 2024 14:00:20 +0000
ROA not after:            Sat 06 Apr 2024 13:00:20 +0000
asID:                     213219
IP address blocks:        2602:faa5:f0a::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 31 Jan 2024 02:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:79:8f:27:20:19:a4:42:78:9b:a7:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6079eed-a495-405f-87a5-c0ee09e31c75
        Validity
            Not Before: Jan  7 14:00:20 2024 GMT
            Not After : Apr  6 13:00:20 2024 GMT
        Subject: CN=86b647ad-cece-4441-8dba-c140b02ea0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:76:b2:3f:50:dd:5d:d4:c3:c8:85:70:3a:06:
                    e5:dc:54:3f:7e:50:7d:83:48:87:cc:99:30:f5:8b:
                    2b:e2:7c:3c:6f:a9:96:07:92:05:1d:1c:45:17:73:
                    27:8c:21:c4:51:1c:aa:11:b5:18:3a:2b:71:40:31:
                    52:83:d1:6f:56:76:85:98:a2:48:40:e9:5f:6b:1a:
                    c9:c4:99:50:90:95:37:ca:d5:fb:d9:b8:41:ed:2d:
                    bc:4a:16:ef:96:d7:88:1f:d7:13:81:34:f8:d4:0d:
                    af:44:5e:c4:81:b7:a2:91:75:71:56:6a:01:d1:36:
                    95:c1:b6:ae:69:5f:cf:40:fc:76:60:4a:86:01:17:
                    ff:60:00:2a:c1:ac:20:e0:f6:a9:ac:d8:1f:d1:63:
                    22:73:95:f4:a9:b7:54:b2:fe:9a:05:08:0d:74:94:
                    6e:96:4c:31:e2:3f:f8:c5:a7:f2:91:01:1c:f2:b0:
                    ef:74:e2:13:43:26:fa:50:50:04:f3:90:73:0d:d9:
                    d8:77:01:ae:77:d5:89:4b:f3:99:e4:40:18:47:0c:
                    9a:1e:ef:9d:83:e0:29:ca:a4:78:17:04:02:d1:2c:
                    ea:ac:bc:38:7d:d4:07:d7:42:d3:91:57:33:64:14:
                    10:e1:22:6d:61:dd:94:c7:0c:45:8d:e3:d7:27:5f:
                    68:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C9:94:AE:0C:93:46:6B:48:61:46:5B:FB:68:97:D0:1A:6E:09:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6079eed-a495-405f-87a5-c0ee09e31c75/8a7caf7b-ba9a-3471-ba6a-336a006035e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6079eed-a495-405f-87a5-c0ee09e31c75/d6079eed-a495-405f-87a5-c0ee09e31c75.crl

            X509v3 Authority Key Identifier:
                keyid:DC:6E:92:F8:0A:29:39:C2:7E:9A:03:AB:B6:BD:31:BD:D3:CB:72:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6079eed-a495-405f-87a5-c0ee09e31c75.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:f0a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:2d:18:0d:35:04:53:07:4f:5b:08:10:c9:d8:ab:46:57:95:
         a0:a9:de:d6:e4:42:59:4b:dc:39:64:cc:58:60:36:99:e2:65:
         28:3b:f9:17:12:ee:c4:98:6e:3c:0d:ba:f2:01:39:89:af:5c:
         b1:43:59:11:f4:0a:cf:35:f0:64:37:49:90:e4:e8:13:88:2f:
         9c:9c:cd:5d:ca:bc:45:a7:79:63:af:ba:14:4b:09:66:c7:28:
         6d:5b:eb:7b:20:05:19:8d:4b:fa:61:82:3c:e0:db:1c:ad:54:
         ee:d7:76:23:d8:6a:04:eb:46:33:03:c9:e7:2c:a7:99:e4:04:
         9e:e4:59:71:d6:77:7a:f7:d4:f9:5c:df:4c:75:3a:8b:76:ab:
         b5:2a:9d:09:8b:fa:6a:82:f4:70:87:3c:39:ee:94:24:de:88:
         9b:78:57:68:df:a8:3c:7c:e4:e1:06:b8:15:f2:7f:86:1d:e6:
         2a:de:a0:f9:c6:fb:a7:65:0b:38:37:76:71:01:61:63:58:27:
         53:33:c7:09:48:c5:2e:85:02:c6:f0:db:f3:1b:3e:28:16:6b:
         9c:df:31:2c:60:50:55:3b:4c:70:93:f4:d4:08:97:5f:e6:f6:
         75:5a:ec:ea:77:f4:19:c2:78:19:25:e4:21:eb:49:31:cf:22:
         ca:c3:ec:fe
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWER5jycgGaRCeJunvkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDYwNzllZWQtYTQ5NS00MDVmLTg3YTUtYzBlZTA5ZTMx
Yzc1MB4XDTI0MDEwNzE0MDAyMFoXDTI0MDQwNjEzMDAyMFowLzEtMCsGA1UEAxMk
ODZiNjQ3YWQtY2VjZS00NDQxLThkYmEtYzE0MGIwMmVhMGQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXayP1DdXdTDyIVwOgbl3FQ/flB9g0iHzJkw
9Ysr4nw8b6mWB5IFHRxFF3MnjCHEURyqEbUYOitxQDFSg9FvVnaFmKJIQOlfaxrJ
xJlQkJU3ytX72bhB7S28ShbvlteIH9cTgTT41A2vRF7EgbeikXVxVmoB0TaVwbau
aV/PQPx2YEqGARf/YAAqwawg4PaprNgf0WMic5X0qbdUsv6aBQgNdJRulkwx4j/4
xafykQEc8rDvdOITQyb6UFAE85BzDdnYdwGud9WJS/OZ5EAYRwyaHu+dg+ApyqR4
FwQC0SzqrLw4fdQH10LTkVczZBQQ4SJtYd2UxwxFjePXJ19oMwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEzJlK4Mk0ZrSGFGW/tol9Aabgn8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNjA3
OWVlZC1hNDk1LTQwNWYtODdhNS1jMGVlMDllMzFjNzUvOGE3Y2FmN2ItYmE5YS0z
NDcxLWJhNmEtMzM2YTAwNjAzNWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDYwNzllZWQtYTQ5NS00MDVmLTg3
YTUtYzBlZTA5ZTMxYzc1L2Q2MDc5ZWVkLWE0OTUtNDA1Zi04N2E1LWMwZWUwOWUz
MWM3NS5jcmwwHwYDVR0jBBgwFoAU3G6S+AopOcJ+mgOrtr0xvdPLciIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kNjA3OWVlZC1hNDk1LTQwNWYtODdhNS1jMGVl
MDllMzFjNzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6pQ8K
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABgtGA01BFMHT1sIEMnYq0ZXlaCp3tbkQllL3DlkzFhgNpniZSg7
+RcS7sSYbjwNuvIBOYmvXLFDWRH0Cs818GQ3SZDk6BOIL5yczV3KvEWneWOvuhRL
CWbHKG1b63sgBRmNS/phgjzg2xytVO7XdiPYagTrRjMDyecsp5nkBJ7kWXHWd3r3
1Plc30x1Oot2q7UqnQmL+mqC9HCHPDnulCTeiJt4V2jfqDx85OEGuBXyf4Yd5ire
oPnG+6dlCzg3dnEBYWNYJ1MzxwlIxS6FAsbw2/MbPigWa5zfMSxgUFU7THCT9NQI
l1/m9nVa7Op39BnCeBkl5CHrSTHPIsrD7P4=
-----END CERTIFICATE-----