Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/68769a07-faff-4fc9-92ac-0487571d9f26/d0cb7602-c858-3396-9703-5b1a5ed0acb5.roa
File:                     d0cb7602-c858-3396-9703-5b1a5ed0acb5.roa (raw, json)
Hash identifier:          IiWI0RlD5GikuvJT+5lNGY3YirIwUgCczxdOM4COXoE=
Subject key identifier:   43:C2:A9:9C:48:48:C9:E5:B2:A5:7D:9B:AA:B2:82:1C:88:5A:24:A4
Certificate issuer:       /CN=68769a07-faff-4fc9-92ac-0487571d9f26
Certificate serial:       010D0C9F4328584546DA75FC7C04618E48C36FE0
Authority key identifier: 85:22:E0:14:98:4B:69:56:39:DB:27:8B:CE:91:19:82:2C:89:81:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/68769a07-faff-4fc9-92ac-0487571d9f26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/68769a07-faff-4fc9-92ac-0487571d9f26/d0cb7602-c858-3396-9703-5b1a5ed0acb5.roa
Signing time:             Thu 21 Mar 2024 02:52:50 +0000
ROA not before:           Thu 21 Mar 2024 02:52:50 +0000
ROA not after:            Wed 19 Jun 2024 02:52:50 +0000
asID:                     33535
IP address blocks:        2602:2e6:3::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 14 Apr 2024 04:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:da:75:fc:7c:04:61:8e:48:c3:6f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68769a07-faff-4fc9-92ac-0487571d9f26
        Validity
            Not Before: Mar 21 02:52:50 2024 GMT
            Not After : Jun 19 02:52:50 2024 GMT
        Subject: CN=75b75891-708d-4a82-80b3-ff3bf71399ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e1:26:37:84:de:ca:07:11:53:8a:3b:96:71:
                    5f:ba:84:5a:1b:65:c5:96:3d:13:40:af:e7:17:28:
                    72:91:d5:3c:48:07:c7:16:bf:cb:ad:43:cd:69:77:
                    10:f2:ec:ae:e1:ff:37:aa:0a:a0:bc:6b:43:fd:10:
                    96:84:33:80:72:e6:15:79:93:c9:ea:e7:8a:4a:4b:
                    b2:75:fc:ea:63:42:30:1e:3c:61:11:82:46:2e:39:
                    ae:01:8d:eb:50:0c:44:c1:bd:a8:43:1c:83:17:37:
                    03:83:e4:5a:36:53:75:36:ec:19:cb:b2:e6:f3:99:
                    45:20:32:38:74:5f:b8:5f:85:4e:9b:92:4a:63:b0:
                    b6:27:ef:ec:b5:f8:8f:2e:83:d5:ed:60:03:cb:d3:
                    94:b1:59:96:2e:08:e8:cb:bb:98:08:2a:68:dc:7e:
                    b6:db:19:07:c5:1a:43:31:6c:52:64:a2:d6:43:39:
                    98:99:8b:69:80:b2:b1:a5:70:70:39:0c:b4:c4:cc:
                    97:c0:2b:84:98:5f:54:0d:81:10:54:44:98:e5:b0:
                    07:5f:2f:ab:f9:f5:89:e3:29:b7:1e:6d:5f:31:e2:
                    f9:c8:62:3f:a1:c3:74:81:cb:84:34:65:36:46:87:
                    53:cf:23:1f:19:4b:39:04:8c:1a:85:08:5d:00:b7:
                    99:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C2:A9:9C:48:48:C9:E5:B2:A5:7D:9B:AA:B2:82:1C:88:5A:24:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/68769a07-faff-4fc9-92ac-0487571d9f26/d0cb7602-c858-3396-9703-5b1a5ed0acb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/68769a07-faff-4fc9-92ac-0487571d9f26/68769a07-faff-4fc9-92ac-0487571d9f26.crl

            X509v3 Authority Key Identifier:
                keyid:85:22:E0:14:98:4B:69:56:39:DB:27:8B:CE:91:19:82:2C:89:81:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/68769a07-faff-4fc9-92ac-0487571d9f26.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2e6:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:78:e6:c4:52:d6:ca:e6:af:4e:a6:77:04:67:40:be:18:99:
         d7:c3:50:7f:25:5a:e1:54:95:78:c7:ce:07:62:f7:ef:ba:99:
         74:6f:dd:ba:19:9a:29:d4:8d:67:bf:ed:55:4f:48:f5:55:8d:
         d7:c7:63:0f:81:bb:b8:27:64:3c:24:1e:d0:bb:06:56:e9:3f:
         60:ba:df:35:39:38:9f:e3:74:4b:fd:0e:f4:2c:06:50:00:7d:
         e7:72:fa:e4:4a:a2:f2:6d:c6:12:03:51:0d:51:59:77:0d:86:
         37:92:1a:79:2b:fb:26:7c:a6:e1:f3:02:08:28:61:00:96:87:
         37:2b:9c:a5:ae:fa:0e:83:97:34:27:5e:55:6e:0b:2d:2c:65:
         80:e3:34:8a:18:1c:05:30:1e:ce:6b:85:60:97:72:fc:ea:94:
         a3:9f:d2:58:54:f7:94:be:e1:90:b4:2a:b4:0a:4d:21:23:8b:
         46:e8:e7:16:56:e8:30:43:77:e3:5b:3c:bf:9e:66:e0:67:f4:
         56:02:90:b5:82:db:5f:a7:ef:bf:f7:d0:71:83:31:e3:ec:c0:
         af:d6:b6:c8:c0:1b:33:96:9b:87:9b:1e:30:52:db:03:33:58:
         51:d0:59:e4:59:59:b5:66:55:7d:d7:2e:76:0a:c3:cb:04:88:
         26:98:01:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----