Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/5d208cc4-5506-3f26-bbc2-2a092d9f6140.roa
File:                     5d208cc4-5506-3f26-bbc2-2a092d9f6140.roa (raw, json)
Hash identifier:          fwd3qfvE7MphNnMTytZcxe2Too0z6nuxZ99Wi13XWv0=
Subject key identifier:   12:86:49:5B:3F:4A:57:81:CD:C2:8E:82:8A:A5:72:5D:4C:E3:AD:06
Certificate issuer:       /CN=b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de
Certificate serial:       010D0C9F4328584086D0E6B40AF9486815AD9600
Authority key identifier: ED:70:2C:A6:48:67:EF:6F:70:AD:9F:77:F4:71:49:6F:6C:DD:64:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/5d208cc4-5506-3f26-bbc2-2a092d9f6140.roa
Signing time:             Thu 20 Oct 2022 13:38:09 +0000
ROA not before:           Thu 20 Oct 2022 13:38:09 +0000
ROA not after:            Wed 22 Jan 2025 05:00:00 +0000
asID:                     150698
IP address blocks:        2602:fafe:6::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 06 Mar 2023 09:15:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:86:d0:e6:b4:0a:f9:48:68:15:ad:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de
        Validity
            Not Before: Oct 20 13:38:09 2022 GMT
            Not After : Jan 22 05:00:00 2025 GMT
        Subject: CN=0df5b94c-91b1-4108-a961-5bde1365206b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:58:f3:75:d3:f2:3d:52:50:ec:5e:d3:36:ce:
                    13:69:77:5a:d0:f7:27:c2:0e:72:57:1b:a6:25:68:
                    76:40:9f:0d:28:1d:9b:88:34:a6:52:91:88:9a:1c:
                    d2:38:d0:e2:9b:de:3c:e7:17:49:22:3c:52:6d:dc:
                    ad:e2:f3:5b:b3:a8:c1:13:f1:ff:86:dc:f8:2e:5b:
                    7f:0b:56:41:30:97:0d:6c:fd:46:a5:a5:b9:64:32:
                    b1:13:eb:f3:d7:1b:11:12:fb:63:c0:e3:e6:96:4d:
                    c7:75:4c:f9:25:8b:07:a6:28:70:5f:08:34:6b:fb:
                    de:39:35:95:c1:c2:68:43:75:9a:c6:0d:d8:5e:56:
                    d3:7d:dd:c3:e7:87:d9:02:83:b6:61:ea:0f:ea:f1:
                    d6:c9:f8:5b:09:d9:25:d8:23:55:7b:4d:ae:f1:68:
                    76:2d:98:ea:5a:b7:94:3a:79:da:71:0c:31:38:a5:
                    87:e5:e2:24:46:bb:70:0c:51:07:69:92:e0:60:50:
                    b5:89:7f:54:df:d7:2a:3b:50:70:f0:f1:73:dd:c5:
                    8f:2c:df:f9:e6:bb:48:4b:14:7a:02:ce:07:ea:33:
                    2b:79:a8:81:55:3f:d7:b6:ec:b1:c5:55:97:a3:5f:
                    c4:c5:e6:9b:16:82:f8:5d:bc:22:1b:c7:5a:9e:4e:
                    29:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:86:49:5B:3F:4A:57:81:CD:C2:8E:82:8A:A5:72:5D:4C:E3:AD:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/5d208cc4-5506-3f26-bbc2-2a092d9f6140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.crl

            X509v3 Authority Key Identifier:
                keyid:ED:70:2C:A6:48:67:EF:6F:70:AD:9F:77:F4:71:49:6F:6C:DD:64:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafe:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:cb:7f:00:1e:aa:38:c3:e1:68:7c:c2:dc:4f:20:92:b8:fa:
         8d:c7:90:46:a7:d2:4d:73:5b:73:9f:07:39:1c:66:b2:1b:c9:
         f8:10:87:ac:56:2a:06:a0:ee:f9:64:74:dd:42:16:d6:e7:be:
         33:5e:64:93:63:a0:b8:b8:f3:bb:7e:76:28:49:58:2f:8b:5a:
         11:51:aa:68:9a:b3:b8:c0:d4:30:97:cb:7a:21:b7:c2:3f:5c:
         d2:e0:84:73:93:a0:64:56:e5:e8:41:e0:bf:c1:51:f5:6a:81:
         4b:8a:66:7f:bd:e8:61:84:8f:b2:f0:39:14:05:2e:d3:4b:2d:
         a4:55:a6:45:74:8c:97:30:41:f8:a0:e5:11:59:c9:e1:35:b5:
         90:58:0f:e4:21:69:68:fa:0f:79:84:6b:c6:e5:fb:7f:37:d9:
         ce:54:61:a4:f6:f3:4e:18:be:c1:79:76:6a:f0:92:57:33:00:
         f2:12:68:1d:fa:ec:c7:cf:4b:47:5a:e5:a5:59:b7:6d:d3:a7:
         bd:3f:59:8f:2f:33:9f:f0:5c:31:d3:a2:97:0a:1e:5c:bd:af:
         08:03:a1:3c:3f:db:45:19:53:99:54:0b:fa:0d:71:de:46:bd:
         47:1e:a3:19:9a:fd:82:af:b7:24:a0:c5:9a:6a:7f:2f:9b:5c:
         58:55:da:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----