Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/8959218d-55b8-31a2-9b18-62f722d76e17.roa
File:                     8959218d-55b8-31a2-9b18-62f722d76e17.roa (raw, json)
Hash identifier:          3ET0miOOMd7ZhpIYvZC0wvM67avyAdF0WvJDB8scOAw=
Subject key identifier:   26:38:C2:CF:A0:A5:25:57:F4:EF:7C:81:9E:3F:2B:79:6B:EE:D3:72
Certificate issuer:       /CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
Certificate serial:       010D0C9F43285844B2CA58588A990924218F5A80
Authority key identifier: D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/8959218d-55b8-31a2-9b18-62f722d76e17.roa
Signing time:             Sun 28 Jan 2024 02:00:26 +0000
ROA not before:           Sun 28 Jan 2024 02:00:26 +0000
ROA not after:            Sat 27 Apr 2024 01:00:26 +0000
asID:                     25759
IP address blocks:        2602:fa3d::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 08 Feb 2024 05:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:b2:ca:58:58:8a:99:09:24:21:8f:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
        Validity
            Not Before: Jan 28 02:00:26 2024 GMT
            Not After : Apr 27 01:00:26 2024 GMT
        Subject: CN=de72ff9b-4aed-4be9-85f3-e6a7c355a7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:91:a9:d0:f7:fb:cf:85:86:10:f5:0e:ef:2a:
                    f7:44:ce:0f:2e:12:af:18:0e:82:c9:ce:95:61:02:
                    07:68:a9:01:1d:29:fd:f7:22:82:14:a5:d9:fd:50:
                    78:1c:96:1c:63:cd:32:cf:5e:0c:48:02:30:70:9f:
                    63:77:0b:78:27:be:2c:5f:a9:f5:7c:92:1c:da:5a:
                    50:26:6a:22:74:17:d2:e8:61:02:71:78:e2:f5:a1:
                    15:d1:9d:b9:49:4c:47:80:6a:3b:f6:f5:6c:4b:cc:
                    d6:99:29:31:3b:79:ce:46:a0:7e:86:c7:39:bf:17:
                    f1:42:87:ed:b3:09:72:1a:78:81:6f:b6:fd:75:96:
                    97:75:fa:4d:5a:f5:25:52:b5:63:02:e1:ac:6d:ca:
                    7d:c5:2b:4a:53:ac:ea:93:59:96:27:31:f7:df:97:
                    6f:f4:4c:9a:2f:66:a5:12:62:32:71:2c:0f:e0:ce:
                    a2:00:55:57:40:82:7f:3c:a9:a7:a9:90:52:d9:f1:
                    f7:f8:f2:29:27:2d:2e:86:d6:f7:0d:29:78:d4:93:
                    42:9b:56:40:da:81:2a:db:29:d0:c7:8e:17:78:d1:
                    b6:82:fc:4e:8b:70:14:57:ab:9e:a8:a5:72:e6:ea:
                    77:85:4d:f2:3f:57:e7:dc:1a:c4:38:a4:e1:33:50:
                    fc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:38:C2:CF:A0:A5:25:57:F4:EF:7C:81:9E:3F:2B:79:6B:EE:D3:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/8959218d-55b8-31a2-9b18-62f722d76e17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl

            X509v3 Authority Key Identifier:
                keyid:D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa3d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:ec:b2:85:4a:1e:14:0e:43:85:61:7c:f6:bf:22:25:40:1f:
         3a:53:2a:1d:da:56:c6:e8:14:f4:43:ce:fe:48:8d:7d:b1:ad:
         b4:f3:3c:04:72:b6:dc:ef:43:7d:af:34:03:7d:15:78:61:c6:
         c0:93:de:18:24:89:b5:73:f0:d7:61:5a:37:c9:60:6e:6a:08:
         e8:a4:6c:65:0c:5c:0b:98:90:3b:16:43:d8:9d:c1:ed:c3:45:
         89:5e:ef:26:6b:db:8e:15:4a:33:f7:2c:3e:77:1d:49:49:18:
         d2:5e:c2:88:a7:42:6e:72:b6:cf:d2:fd:8d:9a:55:c0:bb:ea:
         37:3a:bd:aa:ac:1b:3e:d9:0e:18:17:ee:07:cd:f7:b9:10:fa:
         dc:22:09:db:33:0d:c1:a6:10:c2:0a:e2:30:97:a6:4c:1e:10:
         8d:f7:62:4c:23:67:97:26:78:b1:6a:48:2f:5c:62:15:f2:bb:
         4a:98:87:8e:b3:b3:9f:83:36:dc:0f:3c:48:b8:ae:fb:89:c0:
         19:ce:16:10:fa:43:ae:75:c1:f0:cf:c9:d7:0e:fb:23:c3:31:
         e6:3c:cf:0b:3a:ae:63:63:63:04:6f:b4:3a:a2:c5:4d:f8:f7:
         33:70:3e:5b:36:df:36:0b:23:72:d9:4d:42:5d:c6:86:b3:81:
         c6:56:b4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----