Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/54aa6afc-fe38-32db-8346-f1ece80bd9a2.roa
File:                     54aa6afc-fe38-32db-8346-f1ece80bd9a2.roa (raw, json)
Hash identifier:          8aga3sxYogdljTzFa8mRFLsYka8/40E9XqaUS2XAjm0=
Subject key identifier:   A5:85:01:D7:84:90:23:F2:B1:5C:FA:06:DE:0E:05:5F:9B:44:E4:D1
Certificate issuer:       /CN=1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744
Certificate serial:       010D0C9F43285845B82872304BBFE3B8130B5900
Authority key identifier: 67:2D:2C:24:22:DB:B0:BD:26:41:92:4D:63:A5:B6:C2:B4:EF:0D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/54aa6afc-fe38-32db-8346-f1ece80bd9a2.roa
Signing time:             Tue 30 Apr 2024 16:56:18 +0000
ROA not before:           Tue 30 Apr 2024 16:56:18 +0000
ROA not after:            Mon 29 Jul 2024 16:56:18 +0000
asID:                     216440
IP address blocks:        2602:fa4c:100::/40 maxlen: 48

Validation:               Failed, certificate revoked on Thu 09 May 2024 21:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b8:28:72:30:4b:bf:e3:b8:13:0b:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744
        Validity
            Not Before: Apr 30 16:56:18 2024 GMT
            Not After : Jul 29 16:56:18 2024 GMT
        Subject: CN=10bbb416-1e84-4bb2-a5b3-5ab78e9a617f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a7:d4:7b:fe:de:64:6a:d3:2e:2f:44:07:e8:
                    c1:14:ee:ef:47:47:38:8f:96:de:75:24:cf:c4:fd:
                    f3:bd:7a:08:6b:80:94:52:90:4e:f0:fb:89:bc:35:
                    90:32:a0:aa:b4:4d:23:c1:c6:c4:7a:79:bc:21:37:
                    23:4d:2a:96:05:9b:72:2f:1a:5e:77:83:a4:37:c9:
                    17:f4:77:1b:aa:20:5c:f8:5e:47:93:29:6c:24:29:
                    39:99:8d:5e:a8:7b:49:c4:ef:46:02:cf:30:17:48:
                    32:14:2b:44:34:0d:2b:e5:65:5e:78:b6:24:7b:b3:
                    a9:91:be:e8:0c:17:13:c8:cf:a2:41:24:c1:1c:2c:
                    d1:d1:bd:ce:5f:f8:5a:44:1d:78:7b:1f:1e:66:43:
                    ec:fc:33:db:06:c9:7d:43:bd:7e:ff:a6:d1:f4:84:
                    5e:23:3b:54:ce:cf:f7:87:00:e2:e4:31:33:1e:52:
                    12:b5:e1:38:fd:0d:dc:1f:8b:43:05:2b:b4:c3:e2:
                    7f:66:ed:d0:13:cf:64:9e:ec:68:48:c5:54:d4:c8:
                    f8:bd:f2:e4:fc:e8:cd:a8:6d:ac:62:d1:d5:81:de:
                    30:11:79:1c:4d:1c:72:d9:13:62:52:ee:3f:ad:a3:
                    80:d6:12:ae:60:be:86:f9:80:1d:ba:62:b9:ad:d4:
                    2d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:85:01:D7:84:90:23:F2:B1:5C:FA:06:DE:0E:05:5F:9B:44:E4:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/54aa6afc-fe38-32db-8346-f1ece80bd9a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.crl

            X509v3 Authority Key Identifier:
                keyid:67:2D:2C:24:22:DB:B0:BD:26:41:92:4D:63:A5:B6:C2:B4:EF:0D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4c:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:21:7c:25:57:8c:33:3c:88:b1:9d:d2:b9:8e:95:af:98:28:
         63:27:2e:d6:18:92:d8:4f:fc:29:8a:bb:f6:a3:3f:29:50:bb:
         3b:14:0e:6c:85:8a:5b:2a:c0:e0:a5:02:b2:99:e1:ea:12:6f:
         57:81:cb:3f:b3:98:1e:df:6b:63:d8:9c:f2:cb:2a:b3:5d:d2:
         db:70:98:73:c4:6c:9d:63:0b:92:e9:f7:2b:95:41:0a:d8:dd:
         57:de:f1:eb:57:3f:b1:5b:d7:28:d6:ff:f4:1f:c6:ed:f1:20:
         02:89:02:43:29:0b:4e:a9:92:53:f3:43:df:00:f8:fc:b9:f9:
         c3:0b:1f:4e:67:00:bf:eb:d3:21:72:7a:db:be:50:91:a4:ea:
         02:12:12:fa:8e:c3:5b:c1:3b:7e:26:b3:d7:f4:ab:af:6c:f4:
         3a:e2:b9:75:f9:3f:b7:41:1d:96:da:f3:db:99:88:21:b0:3c:
         4a:60:c6:27:b0:d2:2b:c3:26:68:2c:96:fb:68:04:93:e3:5c:
         4c:0b:4f:a7:25:9f:55:9d:b9:7b:ec:d5:9b:4a:a3:f9:00:35:
         cf:43:f4:19:f4:d0:ea:b8:a9:5a:e8:95:bd:60:50:57:98:06:
         c4:a5:cf:8f:65:6e:5b:5c:0a:d7:a6:41:32:bc:3b:dc:5a:f6:
         41:e5:d1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----