Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/daa3419e-a799-44bc-aaed-506eaf5314b0/8eeed3fc-c234-3dcd-aa4f-d09b00daf940.roa
File:                     8eeed3fc-c234-3dcd-aa4f-d09b00daf940.roa (raw, json)
Hash identifier:          J04Ts3U5Ls416es/atLuTBjIrF/z9Myi8+nAjtacwhc=
Subject key identifier:   11:8B:87:52:C6:5B:21:D8:2B:9E:02:E2:B3:B9:29:F4:6D:AE:09:E0
Certificate issuer:       /CN=daa3419e-a799-44bc-aaed-506eaf5314b0
Certificate serial:       010D0C9F432858450C201A980F6A26EAB4EAA3C0
Authority key identifier: 06:9F:E9:64:2F:4E:43:DA:8A:95:33:9B:1A:69:62:D5:62:FD:01:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/daa3419e-a799-44bc-aaed-506eaf5314b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/daa3419e-a799-44bc-aaed-506eaf5314b0/8eeed3fc-c234-3dcd-aa4f-d09b00daf940.roa
Signing time:             Thu 29 Feb 2024 02:00:27 +0000
ROA not before:           Thu 29 Feb 2024 02:00:27 +0000
ROA not after:            Wed 29 May 2024 01:00:27 +0000
asID:                     701
IP address blocks:        2602:fad8::/40 maxlen: 40

Validation:               Failed, certificate revoked on Tue 02 Apr 2024 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0c:20:1a:98:0f:6a:26:ea:b4:ea:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa3419e-a799-44bc-aaed-506eaf5314b0
        Validity
            Not Before: Feb 29 02:00:27 2024 GMT
            Not After : May 29 01:00:27 2024 GMT
        Subject: CN=80b6989c-792e-47a2-b33f-e85ac8470746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d7:6b:c0:51:28:42:7c:ac:f5:dc:83:6f:2b:
                    4f:27:21:fc:7f:ea:4e:34:d0:96:de:ee:cd:2f:a3:
                    77:3d:b6:73:c6:51:bd:32:de:05:95:ee:f6:1d:4a:
                    c4:c1:b8:fc:a1:1d:ce:78:05:d0:79:25:06:8d:4e:
                    f7:79:a2:c9:b1:db:7d:03:95:7b:ca:46:2f:8a:39:
                    b8:5b:7c:b6:5c:ab:b5:ed:b4:43:e3:1a:66:36:95:
                    d8:b8:01:06:36:ff:4a:26:75:77:4b:91:e6:55:cb:
                    7f:aa:a3:6b:c0:89:cb:8c:43:13:1d:49:3f:d5:8c:
                    db:19:47:00:47:c8:96:92:84:3d:af:66:9c:89:23:
                    fe:94:d7:4b:23:96:1b:9c:9a:23:d8:87:ed:00:f2:
                    25:51:06:d7:0f:c3:cd:2a:c0:bb:25:d1:70:0b:75:
                    38:ba:cf:26:5c:a4:1d:05:54:c9:b8:c9:d7:01:ba:
                    45:b6:66:b7:2e:85:ea:53:9e:3f:0c:09:76:42:4b:
                    38:35:5a:d4:59:ac:b7:01:62:89:7b:d6:64:5e:2b:
                    4c:37:f6:78:b8:09:13:80:19:43:eb:66:a3:cc:9b:
                    40:dd:0b:16:86:7c:04:c3:f2:59:c4:11:22:d6:b3:
                    fb:b0:7e:79:d5:0b:30:0d:8c:13:b1:5f:53:bd:f1:
                    41:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8B:87:52:C6:5B:21:D8:2B:9E:02:E2:B3:B9:29:F4:6D:AE:09:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/daa3419e-a799-44bc-aaed-506eaf5314b0/8eeed3fc-c234-3dcd-aa4f-d09b00daf940.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/daa3419e-a799-44bc-aaed-506eaf5314b0/daa3419e-a799-44bc-aaed-506eaf5314b0.crl

            X509v3 Authority Key Identifier:
                keyid:06:9F:E9:64:2F:4E:43:DA:8A:95:33:9B:1A:69:62:D5:62:FD:01:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/daa3419e-a799-44bc-aaed-506eaf5314b0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad8::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:85:ff:64:04:4a:fd:b3:96:b7:5e:93:b5:3c:9b:f7:8e:94:
         89:4f:56:fd:b5:eb:e4:94:fb:9a:a3:bd:82:d0:10:ca:a4:e0:
         82:01:f5:e3:c0:b9:32:22:2f:02:18:60:a2:4b:9f:87:16:2f:
         f9:53:7e:2d:d2:ed:9b:14:cf:0e:c8:d3:4e:b9:ec:ef:77:7c:
         d9:4b:12:88:22:a5:ce:95:58:49:7e:07:85:4b:89:d8:53:ca:
         c7:df:3d:79:b2:d5:9e:fd:ea:d5:ae:10:4f:17:32:50:e4:1f:
         41:22:f0:cf:27:f8:4f:51:59:66:f5:55:23:f9:3a:70:fc:c9:
         7c:e9:e9:53:ca:71:7d:f5:50:f7:5c:a9:06:65:34:01:5e:db:
         99:b8:f0:e2:43:e0:0d:58:b4:15:93:68:a5:1a:fa:58:46:9f:
         9d:51:23:c7:a5:34:c6:ff:97:17:35:e4:62:f8:75:c4:5c:eb:
         2e:de:d3:25:aa:73:df:0d:3d:c5:68:7a:80:7e:fb:c4:a1:61:
         58:10:f5:c2:9b:b4:69:ac:51:a2:56:91:4c:0a:77:31:49:43:
         1e:eb:dd:a0:55:fa:93:c1:51:c8:02:c4:00:42:ef:dc:e7:b9:
         63:fd:23:6e:e4:df:49:2f:66:45:ef:c0:e8:e0:ea:d2:ec:c1:
         95:29:c3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----