Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/c1da399d-b68f-3865-9781-4f71774905aa.roa
File:                     c1da399d-b68f-3865-9781-4f71774905aa.roa (raw, json)
Hash identifier:          HgtWvJWyLKxeUnQrOqekRKuXvN7qQndhcEPQymTp6U4=
Subject key identifier:   19:F0:E7:18:82:43:31:8D:08:27:34:13:DA:A6:66:05:19:D1:D2:D6
Certificate issuer:       /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Certificate serial:       010D0C9F432858479EDBD2CBC21E170BFD56EA30
Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/c1da399d-b68f-3865-9781-4f71774905aa.roa
Signing time:             Tue 22 Oct 2024 01:00:31 +0000
ROA not before:           Tue 22 Oct 2024 01:00:31 +0000
ROA not after:            Mon 20 Jan 2025 02:00:31 +0000
asID:                     399244
IP address blocks:        2602:fb89::/45 maxlen: 45

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 08:38:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9e:db:d2:cb:c2:1e:17:0b:fd:56:ea:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
        Validity
            Not Before: Oct 22 01:00:31 2024 GMT
            Not After : Jan 20 02:00:31 2025 GMT
        Subject: CN=b07537c8-4f42-4039-a4ed-a42a62fc90fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b4:6e:65:9a:00:18:40:a9:f2:c6:a4:b9:aa:
                    a4:45:e8:38:15:3d:cd:c5:6a:0f:4c:6c:b5:62:44:
                    6b:e9:91:ce:97:31:13:f1:49:18:80:21:af:ed:7f:
                    19:71:0e:f3:84:5a:e4:fa:87:21:df:5c:17:eb:6a:
                    86:db:93:11:3b:86:99:8c:5e:8f:74:15:1c:79:93:
                    6a:98:6a:12:f0:80:a2:b0:d4:29:84:33:9b:1b:1d:
                    5e:72:f8:df:24:9b:ef:1d:86:9c:6a:23:3e:0d:95:
                    cd:1c:b0:45:27:de:20:f7:bc:34:52:46:7b:23:0e:
                    a8:d7:c0:f2:ab:61:af:e9:20:b0:81:e1:d8:a3:08:
                    66:28:88:cc:f3:4e:eb:10:23:4d:bf:a0:a2:24:3c:
                    9c:2e:fd:34:70:67:6b:7a:10:a7:9c:81:cb:80:df:
                    f3:5d:d0:85:a7:91:2d:ec:6d:9d:bb:79:5b:01:72:
                    67:e8:0f:7a:1a:71:55:32:00:ac:9a:d3:27:09:02:
                    0b:23:f9:45:98:12:21:75:eb:94:f3:0c:83:9f:9f:
                    af:97:87:6d:15:09:58:ed:46:e5:7f:85:53:aa:cd:
                    b1:da:b5:ce:b5:22:2c:f1:36:8c:a0:7b:82:37:04:
                    98:c1:24:b5:85:1c:d7:f2:6f:0b:71:76:92:b1:64:
                    c0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F0:E7:18:82:43:31:8D:08:27:34:13:DA:A6:66:05:19:D1:D2:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/c1da399d-b68f-3865-9781-4f71774905aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl

            X509v3 Authority Key Identifier:
                keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb89::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:b3:af:78:80:f9:ee:fc:59:39:c7:4f:23:e8:e0:47:7f:a7:
         fb:47:c3:fc:77:35:1f:28:fa:6c:83:7a:48:af:a5:18:6c:1f:
         39:68:1c:26:e6:83:f2:e9:9f:2d:8b:38:9b:d6:1d:8e:88:6e:
         3b:32:eb:9a:72:ae:9e:24:f4:05:a6:ed:25:b6:3e:f4:35:50:
         99:22:da:48:28:b4:b9:32:34:b8:90:7d:ab:3a:54:df:28:d5:
         90:7e:26:6f:06:f7:04:2f:05:c5:d4:a2:ba:e9:20:43:b3:14:
         8b:5b:44:93:2c:42:7a:de:2a:f2:44:41:59:7d:d0:21:fa:26:
         d4:25:a6:0d:fd:cb:7f:f1:26:69:ed:88:3d:fb:89:d8:78:32:
         4e:c3:ab:fc:3a:27:7d:da:d1:ae:57:1e:2a:bf:01:89:e9:50:
         ff:72:59:28:c6:4f:6b:53:b3:c1:27:31:6c:ac:f7:69:b5:e9:
         90:6e:22:eb:e6:a1:f3:6e:e0:5e:6e:ab:0e:4a:cc:d5:87:57:
         e3:c7:9b:bf:06:fc:70:6a:48:84:68:58:cb:d5:48:ea:bd:02:
         1c:fb:3d:dc:cf:79:af:f5:71:18:53:b2:38:83:3f:1f:e7:3d:
         68:b7:24:f9:1a:3a:53:ef:e4:49:0e:4f:d7:f3:d4:a0:7c:01:
         60:cf:99:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----