Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/76cf5ab1-95ef-3902-80ae-98f5d4c34488.roa
File:                     76cf5ab1-95ef-3902-80ae-98f5d4c34488.roa (raw, json)
Hash identifier:          ufsVZsKnwkMVg4NUk/7J2ARP3iIQzz60G2MIwZ8gdJY=
Subject key identifier:   33:7E:75:BD:25:B7:3C:DA:6A:C7:97:C9:00:7F:ED:70:C8:EA:F0:B5
Certificate issuer:       /CN=62f9290e-905b-4384-a03f-fbec24a43858
Certificate serial:       010D0C9F432858437EEB9AD47C602F4274D0B040
Authority key identifier: DC:A4:47:1D:FE:4E:7C:71:C8:40:3B:73:60:AF:06:53:E1:24:4F:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/76cf5ab1-95ef-3902-80ae-98f5d4c34488.roa
Signing time:             Mon 09 Oct 2023 19:18:46 +0000
ROA not before:           Mon 09 Oct 2023 19:18:46 +0000
ROA not after:            Sun 07 Jan 2024 20:18:46 +0000
asID:                     683
IP address blocks:        2602:278::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:7e:eb:9a:d4:7c:60:2f:42:74:d0:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f9290e-905b-4384-a03f-fbec24a43858
        Validity
            Not Before: Oct  9 19:18:46 2023 GMT
            Not After : Jan  7 20:18:46 2024 GMT
        Subject: CN=37b8632c-0e73-4b24-9c3c-ba90440ec6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ea:e0:b2:fd:7b:d0:3b:3c:34:94:a3:ce:71:
                    45:75:fd:62:13:0d:d3:40:3f:a0:88:36:8e:fd:4e:
                    3a:0f:50:f8:f4:b8:4c:2b:53:5b:c8:0e:ae:01:16:
                    68:cb:fb:e3:85:50:c5:b2:31:ec:37:6c:37:97:a5:
                    b3:a1:34:25:aa:43:89:c2:1e:16:86:5f:a0:46:40:
                    16:ed:21:b3:a7:ad:0d:13:50:94:20:7e:56:cb:de:
                    53:71:d8:fb:dc:5f:8d:95:b6:70:1e:3a:3e:48:76:
                    97:c7:66:f7:42:9e:2c:a9:da:03:a2:88:11:93:36:
                    35:ae:3f:22:ab:81:8f:20:24:1d:83:24:4a:8d:c2:
                    57:04:d3:c4:8d:2d:77:51:3f:6e:b1:8b:70:40:09:
                    e1:5e:ed:7d:f8:fe:5b:de:b0:0f:e3:a9:58:41:09:
                    89:1b:5c:fe:b0:b8:cb:f9:e9:88:0b:01:fe:79:7a:
                    7c:c7:bf:40:74:be:3a:f0:bf:bc:ba:19:75:bc:ba:
                    a3:8c:8e:86:b6:ab:cc:a0:06:55:6d:c4:de:0d:ed:
                    e6:a3:62:53:34:b8:77:7f:92:6e:99:31:5d:cb:d0:
                    2b:c9:42:dc:8a:48:a8:0d:45:57:30:06:5f:b6:97:
                    f0:18:e4:2c:5e:50:96:ac:a6:46:0e:04:25:eb:4b:
                    04:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7E:75:BD:25:B7:3C:DA:6A:C7:97:C9:00:7F:ED:70:C8:EA:F0:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/76cf5ab1-95ef-3902-80ae-98f5d4c34488.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/62f9290e-905b-4384-a03f-fbec24a43858.crl

            X509v3 Authority Key Identifier:
                keyid:DC:A4:47:1D:FE:4E:7C:71:C8:40:3B:73:60:AF:06:53:E1:24:4F:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:278::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:b6:0f:7a:6c:82:e9:c8:27:b0:eb:ad:35:69:ca:45:40:13:
         46:e2:73:0a:54:04:c4:b1:e8:f1:5d:15:ce:5a:64:fe:4b:c4:
         ac:13:ee:20:22:14:95:83:ba:f8:1b:14:b9:1a:6f:1f:66:39:
         23:aa:4e:f6:d1:89:a0:01:86:45:f7:34:4f:af:2b:c9:2f:58:
         e4:0b:17:d4:15:ac:88:9d:08:a4:7c:8e:16:31:17:05:49:f4:
         b9:07:8f:97:6c:c9:8d:57:7e:b2:c5:7b:86:93:5b:40:0b:3f:
         c2:b0:3c:c2:64:bb:f2:6c:6c:8a:d3:8d:3e:a7:f0:5d:28:d4:
         81:62:84:a2:ec:4c:6e:db:77:60:96:c5:5a:57:71:d9:0d:ac:
         df:ba:62:48:e1:eb:e9:4d:83:de:14:5f:a1:26:39:d2:ce:87:
         60:6b:3b:f2:e6:5d:e9:23:8a:6e:c4:52:59:d5:cc:c9:e5:33:
         54:70:35:cd:22:a4:d2:05:83:0f:f1:94:e5:fc:2f:14:0e:fb:
         c5:aa:15:af:2e:bf:f5:09:7b:89:c6:30:a4:a2:90:27:da:1b:
         58:b8:d2:0e:2b:cc:19:e1:91:c6:99:19:77:f1:b1:06:4e:9e:
         80:c8:d8:13:da:90:67:cb:0a:ce:09:e4:85:73:82:9b:6f:e4:
         c3:5f:0a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----