Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/974a9082-e331-3f13-ac29-ec83c60ebe58.roa
File:                     974a9082-e331-3f13-ac29-ec83c60ebe58.roa (raw, json)
Hash identifier:          AEy36VzsbTj4kDyGl+JqkilA9Xc+WLrFAuivKkQEXHk=
Subject key identifier:   03:04:67:C5:1A:01:F3:83:07:8B:EA:A2:36:52:22:3A:8C:0C:9D:5A
Certificate issuer:       /CN=f6a6838a-15aa-48f4-960c-d9d0071829af
Certificate serial:       010D0C9F432858452FA5FA9BFAC2266133ADC640
Authority key identifier: 21:E0:1B:5D:28:28:D4:EE:B8:B2:77:B8:09:DD:A0:4A:6D:BA:0B:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/974a9082-e331-3f13-ac29-ec83c60ebe58.roa
Signing time:             Tue 12 Mar 2024 19:23:30 +0000
ROA not before:           Tue 12 Mar 2024 19:23:30 +0000
ROA not after:            Mon 10 Jun 2024 19:23:30 +0000
asID:                     16509
IP address blocks:        2602:f95d::/41 maxlen: 41

Validation:               Failed, certificate revoked on Fri 15 Mar 2024 12:39:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2f:a5:fa:9b:fa:c2:26:61:33:ad:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6a6838a-15aa-48f4-960c-d9d0071829af
        Validity
            Not Before: Mar 12 19:23:30 2024 GMT
            Not After : Jun 10 19:23:30 2024 GMT
        Subject: CN=e825179e-455e-4ba2-9ef0-3d13dfc85ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:79:25:c5:bb:72:a4:7b:b5:f3:21:ae:ba:99:
                    8f:93:8b:28:b2:3f:ac:b8:36:65:6c:d9:57:8e:77:
                    77:38:50:cb:f0:7a:af:46:35:03:ae:ee:74:bd:8b:
                    e8:4a:3a:71:76:28:f5:5c:2f:b4:6f:ea:db:9e:b1:
                    77:24:65:4c:dd:38:fb:5b:8d:b1:9b:ec:95:d4:71:
                    1e:76:33:c8:f3:4c:b0:38:f6:6e:b2:34:8d:68:d3:
                    95:d7:0b:46:df:a3:9f:3d:91:36:ec:93:ce:c5:b8:
                    3a:f3:01:0d:39:f6:9f:a6:88:13:d6:17:e5:f1:d8:
                    fd:9b:f1:57:c9:fe:25:ac:ca:56:99:80:3b:ba:b9:
                    12:13:5b:b1:df:49:06:95:09:2f:45:cc:e6:71:a7:
                    54:4e:38:5a:13:e9:f6:08:0d:8d:73:80:1f:7c:3f:
                    72:78:b3:10:e5:a6:25:e0:a6:30:f0:9b:ef:76:4d:
                    c7:1b:a9:89:08:b1:03:80:18:4f:3d:e7:43:6e:5d:
                    ae:c6:9f:d7:8f:09:5c:b6:81:ab:28:0f:47:72:b0:
                    06:0f:26:a3:93:97:11:ef:0f:01:9e:cf:81:f1:a9:
                    62:41:a6:bc:df:39:69:94:46:e6:8e:e2:c9:a3:f8:
                    ba:e1:db:6e:f6:bb:d0:98:a0:bc:10:7b:60:37:ff:
                    7a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:04:67:C5:1A:01:F3:83:07:8B:EA:A2:36:52:22:3A:8C:0C:9D:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/974a9082-e331-3f13-ac29-ec83c60ebe58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/f6a6838a-15aa-48f4-960c-d9d0071829af.crl

            X509v3 Authority Key Identifier:
                keyid:21:E0:1B:5D:28:28:D4:EE:B8:B2:77:B8:09:DD:A0:4A:6D:BA:0B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95d::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:2e:22:c4:97:63:35:f8:e8:d4:e0:0b:70:87:e3:e9:77:a9:
         b1:1c:eb:63:7f:9c:9f:10:a5:9c:a7:9b:f0:59:f6:65:16:d3:
         b7:2c:96:78:77:f3:1c:0a:9b:51:f2:a2:81:2d:c6:b4:ae:15:
         65:9a:3b:80:63:c7:e7:cb:ff:cb:8d:05:d6:3c:32:79:54:49:
         bb:9d:99:58:85:93:72:a0:76:44:e0:88:30:29:9f:f4:04:fd:
         4d:dc:43:8b:f5:aa:41:48:3a:df:44:30:e9:5a:d9:45:6b:36:
         17:55:02:62:3f:53:8a:dc:f9:9d:a7:bc:b9:22:52:4d:29:1e:
         be:da:6d:9b:8d:ce:51:af:db:83:eb:a1:de:de:5d:f8:c1:3b:
         8e:eb:05:77:a2:c7:35:e6:de:f7:2b:fa:22:e2:1e:15:cd:79:
         57:24:2c:b6:d4:89:8c:6a:c0:32:d5:8b:cf:0a:38:f1:fe:bb:
         5d:7c:27:ae:fb:a6:25:0e:3d:0e:bc:93:7a:a8:01:25:7a:b6:
         95:fb:c0:c2:5e:3b:c8:26:93:34:46:46:e1:78:f8:63:0b:84:
         24:6f:76:c5:46:a7:97:c3:dc:d2:a7:42:a3:cc:8a:9e:05:37:
         8c:08:75:ab:bd:68:31:25:f1:8c:9d:a1:36:ae:0e:d0:7c:cb:
         d7:a3:7a:c1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUvpfqb+sImYTOtxkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjZhNjgzOGEtMTVhYS00OGY0LTk2MGMtZDlkMDA3MTgy
OWFmMB4XDTI0MDMxMjE5MjMzMFoXDTI0MDYxMDE5MjMzMFowLzEtMCsGA1UEAxMk
ZTgyNTE3OWUtNDU1ZS00YmEyLTllZjAtM2QxM2RmYzg1YWU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnklxbtypHu18yGuupmPk4sosj+suDZlbNlX
jnd3OFDL8HqvRjUDru50vYvoSjpxdij1XC+0b+rbnrF3JGVM3Tj7W42xm+yV1HEe
djPI80ywOPZusjSNaNOV1wtG36OfPZE27JPOxbg68wENOfafpogT1hfl8dj9m/FX
yf4lrMpWmYA7urkSE1ux30kGlQkvRczmcadUTjhaE+n2CA2Nc4AffD9yeLMQ5aYl
4KYw8Jvvdk3HG6mJCLEDgBhPPedDbl2uxp/XjwlctoGrKA9HcrAGDyajk5cR7w8B
ns+B8aliQaa83zlplEbmjuLJo/i64dtu9rvQmKC8EHtgN/96JwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAMEZ8UaAfODB4vqojZSIjqMDJ1aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mNmE2
ODM4YS0xNWFhLTQ4ZjQtOTYwYy1kOWQwMDcxODI5YWYvOTc0YTkwODItZTMzMS0z
ZjEzLWFjMjktZWM4M2M2MGViZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjZhNjgzOGEtMTVhYS00OGY0LTk2
MGMtZDlkMDA3MTgyOWFmL2Y2YTY4MzhhLTE1YWEtNDhmNC05NjBjLWQ5ZDAwNzE4
MjlhZi5jcmwwHwYDVR0jBBgwFoAUIeAbXSgo1O64sne4Cd2gSm26C3EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9mNmE2ODM4YS0xNWFhLTQ4ZjQtOTYwYy1kOWQw
MDcxODI5YWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgL5XQAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADUuIsSXYzX46NTgC3CH4+l3qbEc62N/nJ8QpZynm/BZ9mUW07cs
lnh38xwKm1HyooEtxrSuFWWaO4Bjx+fL/8uNBdY8MnlUSbudmViFk3KgdkTgiDAp
n/QE/U3cQ4v1qkFIOt9EMOla2UVrNhdVAmI/U4rc+Z2nvLkiUk0pHr7abZuNzlGv
24Prod7eXfjBO47rBXeixzXm3vcr+iLiHhXNeVckLLbUiYxqwDLVi88KOPH+u118
J677piUOPQ68k3qoASV6tpX7wMJeO8gmkzRGRuF4+GMLhCRvdsVGp5fD3NKnQqPM
ip4FN4wIdau9aDEl8YydoTauDtB8y9ejesE=
-----END CERTIFICATE-----