Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/21278c19-ffc7-3d8f-95f7-523745d72a1c.roa
File:                     21278c19-ffc7-3d8f-95f7-523745d72a1c.roa (raw, json)
Hash identifier:          Zy4zLMjEyBBBfoC1mPmGtmlAw4NouUt8BjYrEMBgjCo=
Subject key identifier:   64:31:BC:31:DA:13:1D:55:A5:33:2C:57:1E:FB:27:17:B0:51:A5:F0
Certificate issuer:       /CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
Certificate serial:       010D0C9F4328584562DBDDA11113362E4B754E00
Authority key identifier: D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/21278c19-ffc7-3d8f-95f7-523745d72a1c.roa
Signing time:             Sun 31 Mar 2024 03:38:18 +0000
ROA not before:           Sun 31 Mar 2024 03:38:18 +0000
ROA not after:            Sat 29 Jun 2024 03:38:18 +0000
asID:                     7018
IP address blocks:        2602:fa3d:a93::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 24 May 2024 16:06:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:db:dd:a1:11:13:36:2e:4b:75:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
        Validity
            Not Before: Mar 31 03:38:18 2024 GMT
            Not After : Jun 29 03:38:18 2024 GMT
        Subject: CN=27f3d29c-3491-46d7-812a-73a96f411b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:47:39:14:51:b0:fc:50:35:66:4c:67:a5:76:
                    c0:a6:2e:fe:85:07:40:40:5f:a4:80:e6:ac:56:91:
                    2a:b3:ad:3c:7a:d6:ce:05:c5:62:41:d7:7c:1c:a3:
                    d7:8b:c8:81:f7:96:6e:5f:e5:35:8f:94:8b:04:e6:
                    93:d5:17:e7:9e:93:51:ab:e3:e2:bb:c4:ba:41:4c:
                    54:24:09:e0:30:95:5a:f0:a7:37:b8:f7:e1:73:1c:
                    46:49:d4:16:a2:2e:68:91:ce:e1:0e:1c:67:ec:3b:
                    77:65:40:1e:82:9e:e9:44:4e:73:cb:f9:ff:29:fe:
                    f5:87:c5:2f:80:a1:64:3b:22:9b:07:46:c0:5a:5a:
                    f2:2e:10:bd:f6:ad:51:80:37:91:2b:7c:f7:b4:67:
                    7d:af:89:52:66:6a:81:5d:13:cc:9f:f5:a7:5c:1e:
                    ee:c6:ce:3a:5d:63:88:d3:3b:c4:3f:30:b4:ba:99:
                    45:21:96:b1:89:83:ee:ff:db:f6:21:c6:93:bc:b9:
                    02:3b:2a:f6:ee:04:ff:f6:8f:4f:71:f6:3a:a3:12:
                    b4:c2:27:71:7d:e9:54:18:24:38:98:05:0d:a7:c9:
                    fc:03:45:f0:09:90:57:96:20:d8:db:17:97:24:b2:
                    c2:b1:1f:3f:c6:74:2d:58:45:3b:3d:92:22:5c:bf:
                    35:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:31:BC:31:DA:13:1D:55:A5:33:2C:57:1E:FB:27:17:B0:51:A5:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/21278c19-ffc7-3d8f-95f7-523745d72a1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl

            X509v3 Authority Key Identifier:
                keyid:D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa3d:a93::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:a3:ca:48:bc:c7:70:35:ab:f2:ef:f5:5c:7a:52:71:36:d7:
         82:2f:20:c8:bd:25:6b:c2:90:19:3b:5e:e4:62:f5:41:8a:d0:
         1b:7b:5c:65:70:7e:06:77:d0:43:21:70:70:0d:90:3b:92:01:
         2a:c0:47:69:d2:e5:93:59:22:1d:a3:95:67:51:90:66:2c:c8:
         cb:e7:48:27:4d:0e:4b:9d:52:4a:69:05:91:e9:c1:cb:1c:bf:
         89:98:a0:a0:85:8f:51:db:3f:f9:82:3a:99:0e:98:0c:8d:44:
         99:0b:b2:d0:3d:af:5c:66:5d:81:be:8d:de:06:4c:d2:58:df:
         57:56:ae:58:0a:da:d3:2a:45:f9:40:94:3c:4f:8e:40:13:96:
         88:75:ec:51:c8:ec:f4:e8:d3:5c:4e:c7:01:0d:fd:00:45:98:
         ec:61:c0:0a:f6:be:18:6d:33:19:84:05:1a:65:b5:6c:3a:cc:
         eb:d8:5f:47:be:52:49:1d:d0:b1:59:49:ae:e9:0b:9e:1f:8b:
         2e:fe:3d:aa:d4:2a:9a:f2:5f:76:be:04:e2:2b:4e:22:a0:9a:
         b8:c5:bb:a4:97:3c:ec:6d:e5:86:4a:25:0a:f4:19:b4:6c:df:
         13:d6:1c:4d:5f:ad:4c:fd:e1:33:3f:5e:1a:bf:7a:fd:dc:ad:
         43:26:40:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----