Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/d6af25b6-2213-3466-976d-9404fb378ce0.roa
File:                     d6af25b6-2213-3466-976d-9404fb378ce0.roa (raw, json)
Hash identifier:          QfcEgdpG6pXF+APx0HIwZ/VMZpEqQY/GW2nVVfw+V4w=
Subject key identifier:   38:11:B7:6E:54:9D:A4:E3:BD:12:B2:E3:25:9D:E7:38:71:14:D7:28
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584391BA9D483024A5961DA20300
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/d6af25b6-2213-3466-976d-9404fb378ce0.roa
Signing time:             Mon 16 Oct 2023 13:00:21 +0000
ROA not before:           Mon 16 Oct 2023 13:00:21 +0000
ROA not after:            Sun 14 Jan 2024 14:00:21 +0000
asID:                     206216
IP address blocks:        2602:fb54:147::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:91:ba:9d:48:30:24:a5:96:1d:a2:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Oct 16 13:00:21 2023 GMT
            Not After : Jan 14 14:00:21 2024 GMT
        Subject: CN=6aa12fa7-ff3f-47e0-a52e-feca898f63bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f1:31:64:de:a7:12:54:ea:3e:2d:a1:90:98:
                    8a:cd:7e:a2:d0:c7:ba:60:7a:b8:57:a7:ba:80:53:
                    21:1b:9b:65:c9:34:df:a4:15:dd:2d:22:3a:04:7d:
                    06:2d:e6:47:e4:18:b1:74:15:40:5b:b5:30:e9:a6:
                    74:55:c5:e2:2e:8e:3d:91:a4:1e:03:07:d3:8b:ed:
                    b3:55:5b:80:0a:83:80:2e:73:ba:89:7a:90:4c:70:
                    2f:21:54:73:62:33:44:28:ac:20:27:5b:84:ac:72:
                    e3:af:47:9a:c5:0e:1b:9b:df:90:04:f7:29:87:3b:
                    46:86:1f:36:68:d7:04:20:15:8f:87:b0:ad:51:46:
                    35:da:67:90:b9:a2:0e:bb:69:c1:3c:18:72:1e:bb:
                    d4:4a:9e:8a:bf:a7:d6:64:68:f9:e2:15:1c:fc:97:
                    2a:0e:61:0a:09:cc:e5:1d:56:9d:e7:e5:8d:73:cf:
                    5f:e1:85:94:5d:44:21:0f:38:15:25:54:d2:3a:c5:
                    97:02:e0:aa:0c:45:82:5f:12:f0:8a:44:66:4a:6b:
                    dc:73:75:94:27:80:f4:dd:8a:13:17:82:b8:ae:0e:
                    a1:fe:13:c1:60:ba:88:b8:3a:2a:af:a2:45:1b:40:
                    7c:5e:07:3a:e7:db:e5:b2:98:71:44:9b:1f:2f:ef:
                    ad:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:11:B7:6E:54:9D:A4:E3:BD:12:B2:E3:25:9D:E7:38:71:14:D7:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/d6af25b6-2213-3466-976d-9404fb378ce0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:147::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:f4:c3:92:21:22:8a:51:aa:86:a9:3b:59:a4:50:f5:36:44:
         81:ca:eb:76:99:5e:50:c3:d1:da:a0:33:b2:0c:c3:c5:9e:88:
         79:62:3c:cd:6d:17:ba:79:cf:e8:9f:e6:92:a5:07:6f:fb:b2:
         ca:12:a0:e8:89:19:24:80:31:6f:f8:77:bc:60:9d:e6:f7:3d:
         e1:47:45:cb:ad:a0:3f:ed:19:fe:75:8b:9c:97:a4:37:a6:61:
         60:73:96:41:e4:de:83:c4:ff:79:75:4e:a6:4b:5f:ea:c5:95:
         d8:35:46:50:b3:26:50:52:ca:73:ad:2b:3c:98:2c:78:38:00:
         a3:23:89:90:68:fa:95:f0:1e:13:6f:35:47:59:a8:b4:29:25:
         fa:6b:89:6f:93:a8:25:a6:dc:cc:14:03:8e:db:fd:8a:8c:86:
         5f:ce:64:90:0d:0d:5f:07:ee:74:86:53:26:a0:93:93:fa:75:
         1e:fd:d9:a5:c8:da:e5:d0:e8:34:7c:11:16:94:28:12:28:fb:
         cb:f3:65:11:07:dd:47:0a:68:d1:1a:63:55:da:4f:b1:7b:80:
         12:0a:ca:47:b4:36:46:83:94:27:fc:12:9f:f5:8c:56:71:e5:
         4b:36:fe:45:86:3a:6f:bb:72:28:71:ab:3b:d8:c5:7b:cf:0d:
         8b:2d:6b:df
-----BEGIN CERTIFICATE-----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