Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/89edebd4-c271-330a-9d42-930f2a74ef64.roa
File:                     89edebd4-c271-330a-9d42-930f2a74ef64.roa (raw, json)
Hash identifier:          cpnCieqxmn83JdI224WApgcUNkGz+INARWDEIXmhFKk=
Subject key identifier:   6D:5C:09:4B:DA:7F:D3:BC:F3:C0:38:E8:79:BA:F9:23:27:AE:98:50
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F4328583DF687D6C97C5BEA5E5D159DC0
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/89edebd4-c271-330a-9d42-930f2a74ef64.roa
Signing time:             Wed 11 May 2022 16:21:07 +0000
ROA not before:           Wed 11 May 2022 16:21:07 +0000
ROA not after:            Thu 22 Aug 2024 04:00:00 +0000
asID:                     36231
IP address blocks:        2602:fd00:c00::/38 maxlen: 48

Validation:               Failed, certificate revoked on Mon 22 Aug 2022 22:08:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f6:87:d6:c9:7c:5b:ea:5e:5d:15:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: May 11 16:21:07 2022 GMT
            Not After : Aug 22 04:00:00 2024 GMT
        Subject: CN=945771a0-6c42-4860-8ea1-f1319344fc6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b5:f3:8a:4a:4c:32:cd:c1:23:8e:50:cb:cb:
                    7b:49:99:73:6e:52:6e:cf:b2:d7:98:f4:0d:1e:78:
                    02:a8:44:1d:ed:a7:45:a0:59:b8:43:a8:c9:5e:3a:
                    c5:ad:51:d6:55:aa:b7:44:58:36:c9:23:df:d8:44:
                    0f:09:58:44:cf:7c:29:4d:b7:93:2d:16:8c:89:ac:
                    fc:a4:5f:25:b2:02:bb:2d:38:3e:bf:cb:3b:26:7d:
                    0f:07:8c:60:9a:c1:e0:fa:40:80:41:9b:26:39:39:
                    7f:c4:2a:79:4c:9e:54:0c:02:ca:25:e4:ba:a1:ab:
                    45:f5:9a:a6:c6:5f:50:44:dd:9c:f8:31:75:63:b5:
                    79:0f:02:a4:0a:84:71:be:8f:54:f4:88:ec:93:40:
                    b1:b5:69:84:0a:e9:9a:63:2b:44:e1:6a:14:3b:c2:
                    3b:10:e2:a6:55:52:da:e9:f3:31:d1:a0:cf:7c:97:
                    19:2c:4a:18:60:74:5e:1b:2d:8f:13:d0:58:71:a7:
                    23:78:f6:df:6a:d1:2c:24:0e:0b:8a:52:d1:da:00:
                    d0:36:9f:53:f3:b5:7a:fd:34:0c:f6:26:85:45:06:
                    af:32:08:13:b8:22:0b:95:dc:09:04:83:c7:38:13:
                    7d:f3:1a:c5:78:f7:ed:b0:57:87:96:ee:61:a8:f3:
                    ae:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5C:09:4B:DA:7F:D3:BC:F3:C0:38:E8:79:BA:F9:23:27:AE:98:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/89edebd4-c271-330a-9d42-930f2a74ef64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd00:c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:5f:0d:4f:2d:37:7b:31:d6:e9:52:59:98:93:88:ac:dc:b2:
         ac:71:58:9f:87:ba:c3:6f:13:d7:ab:36:69:67:bf:35:a5:c6:
         33:4f:6d:2b:25:95:bc:ab:e5:67:7c:ab:e9:e8:49:da:40:6c:
         f0:da:6b:a3:68:bf:9b:75:c3:61:3e:90:c0:1d:4b:c1:97:7b:
         e9:11:f6:83:52:b6:2e:31:9a:4b:88:67:fe:24:7b:da:48:d3:
         35:41:fd:b7:9c:e9:51:ed:c9:ab:e0:0a:2a:d0:61:3a:77:97:
         ca:75:99:4b:26:23:25:6c:93:7c:3d:b2:ce:e6:ae:e5:05:f8:
         bd:ea:67:f8:a8:c7:ba:4a:6b:14:b4:38:7a:63:f7:2c:23:e9:
         28:97:61:43:10:76:8d:90:49:ef:3f:40:17:88:22:b0:19:9f:
         d3:15:55:bb:69:9d:1c:82:3d:1a:b3:ae:f6:ca:2b:2b:e7:3d:
         13:35:b0:52:66:70:cf:cb:e9:d1:b8:ef:41:e7:c8:bd:48:cd:
         61:34:70:e1:08:ae:2a:a8:35:4e:3f:a1:82:31:71:61:f7:e4:
         3c:c7:9b:0a:88:7c:67:ba:28:fb:78:af:b0:04:95:c5:2e:8a:
         3f:c1:95:de:58:15:94:21:29:89:b4:80:84:71:21:78:44:61:
         91:ab:df:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----