Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/83c982c1-a678-34d8-9fe0-1d225650c19a.roa
File:                     83c982c1-a678-34d8-9fe0-1d225650c19a.roa (raw, json)
Hash identifier:          SXXP7pKHMsIwQ/n5eTiHS3zkvlpfmFFwOt1Qj6jNWyA=
Subject key identifier:   B2:28:C7:5C:CE:17:8D:D6:61:F5:A4:AA:38:C2:17:56:64:CF:2C:4E
Certificate issuer:       /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
Certificate serial:       010D0C9F43285845FA1D5A506A14DB2D36BDAFA0
Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/83c982c1-a678-34d8-9fe0-1d225650c19a.roa
Signing time:             Fri 24 May 2024 07:57:18 +0000
ROA not before:           Fri 24 May 2024 07:57:18 +0000
ROA not after:            Thu 22 Aug 2024 07:57:18 +0000
asID:                     16509
IP address blocks:        2602:fc88::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 24 May 2024 08:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:fa:1d:5a:50:6a:14:db:2d:36:bd:af:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
        Validity
            Not Before: May 24 07:57:18 2024 GMT
            Not After : Aug 22 07:57:18 2024 GMT
        Subject: CN=e486c989-91e9-4e3b-9d2f-0de7f6b27799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ab:c0:60:0a:ee:c5:3f:de:d5:4c:23:f4:bd:
                    20:4a:f4:86:fd:ba:33:80:9a:e7:8a:86:af:eb:9e:
                    cd:d4:aa:c2:59:56:47:b1:d1:80:82:b3:f6:b7:f6:
                    6d:d5:20:9b:36:7b:c7:b7:3c:a7:53:00:b4:a9:57:
                    1d:3b:a7:33:c7:4a:5c:c0:f7:07:55:43:44:29:a6:
                    4a:dc:7d:17:a3:f4:1e:0d:d1:56:72:b2:a7:33:24:
                    0c:9f:e3:38:0f:c9:42:29:07:80:b3:ea:4b:cd:6a:
                    1d:b8:fa:0c:ad:e2:7d:6b:28:6d:23:de:b1:c2:9d:
                    24:8b:fa:a8:aa:ec:b2:c5:db:53:05:93:25:42:95:
                    1e:6f:bf:1b:e2:d7:4d:00:e8:06:35:fc:b3:8a:3e:
                    d7:27:7d:f4:b1:18:13:19:c8:10:90:33:ea:dc:67:
                    32:ef:20:39:74:62:dc:55:be:07:53:e5:47:cc:af:
                    0f:e0:61:c6:67:9f:70:a2:cd:bb:c7:b8:ce:f8:ea:
                    1b:da:eb:6d:d0:fd:38:a9:83:0a:6c:01:86:2a:07:
                    97:11:f7:b4:8c:59:e1:2e:df:07:35:d9:67:ca:db:
                    c0:4b:76:a8:42:34:e2:54:27:a4:6f:e5:ee:56:15:
                    d1:90:f6:8b:11:c4:2b:c6:d2:86:43:f6:59:25:a9:
                    19:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:28:C7:5C:CE:17:8D:D6:61:F5:A4:AA:38:C2:17:56:64:CF:2C:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/83c982c1-a678-34d8-9fe0-1d225650c19a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl

            X509v3 Authority Key Identifier:
                keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc88::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:cf:f6:3b:f9:f1:0d:5c:e8:b6:a9:b2:94:52:4c:bc:de:4c:
         94:7c:b3:4f:50:02:94:10:78:f2:6d:47:25:ae:00:60:25:d2:
         8c:f3:f3:32:d6:ec:c7:c9:f0:2f:68:84:bc:e6:f5:45:ef:7c:
         98:95:bc:46:4c:80:5c:28:e6:7f:f0:a0:c5:3b:5c:7e:07:db:
         67:6d:73:30:2b:88:c9:9f:3c:f6:9a:00:2f:4d:0a:74:dc:51:
         43:a2:04:fa:9f:57:66:87:8f:2a:12:47:4a:a4:50:e7:13:da:
         7a:3b:7f:d5:77:a9:bf:0d:59:c7:fd:62:63:0d:6f:1c:24:d6:
         f5:42:99:cf:d5:4f:3a:13:d1:19:81:46:c1:82:9a:c9:60:b7:
         9f:4d:6b:c7:db:c0:36:71:4f:9f:bb:c2:3a:57:fb:ba:cd:f7:
         e0:4d:bf:ef:31:96:93:39:e9:5c:1e:32:89:ab:0b:82:ce:ac:
         e2:50:16:5b:96:da:6e:9a:39:43:bf:b9:48:08:64:76:e1:8a:
         e1:53:bb:85:97:0b:8f:4f:f3:cb:9d:57:20:b4:ff:43:49:e9:
         8e:c5:af:fe:9b:c6:13:ec:83:41:8c:55:e9:61:2a:b0:49:53:
         a8:c2:7e:3e:d5:d6:a8:da:c8:af:4f:94:e2:db:ca:c6:9a:67:
         d6:28:87:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----