Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/1153fcda-13aa-3951-bb78-12bc6ea28aa8.roa
File:                     1153fcda-13aa-3951-bb78-12bc6ea28aa8.roa (raw, json)
Hash identifier:          +18x2gXHMqiHAuGVDGlr85cRZV1h+9ZzY0tUmiY3LlY=
Subject key identifier:   1C:DD:79:36:3E:1A:79:FE:14:ED:61:1E:BA:1C:05:5E:43:47:C7:A3
Certificate issuer:       /CN=72be6912-a48b-441b-9ee6-94aa6da03275
Certificate serial:       010D0C9F432858478D11985FE90EDB8639DE9C00
Authority key identifier: A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/1153fcda-13aa-3951-bb78-12bc6ea28aa8.roa
Signing time:             Tue 15 Oct 2024 16:04:23 +0000
ROA not before:           Tue 15 Oct 2024 16:04:23 +0000
ROA not after:            Mon 13 Jan 2025 17:04:23 +0000
asID:                     398395
IP address blocks:        2602:fa42:100::/40 maxlen: 40

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 21:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8d:11:98:5f:e9:0e:db:86:39:de:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72be6912-a48b-441b-9ee6-94aa6da03275
        Validity
            Not Before: Oct 15 16:04:23 2024 GMT
            Not After : Jan 13 17:04:23 2025 GMT
        Subject: CN=2502f45c-da47-4491-993b-24f6c94c9e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6d:58:a1:98:4a:41:c8:0e:28:ec:b5:32:10:
                    18:cc:b8:89:46:09:20:db:de:c3:a9:11:70:4c:93:
                    81:3f:65:bf:86:c2:18:c6:22:78:01:5d:6d:35:80:
                    f0:3e:3c:69:33:e7:b9:26:51:ef:2c:90:11:91:36:
                    6e:c6:3d:d8:c6:76:07:93:26:4f:2d:ea:e7:6f:9f:
                    bf:f6:29:3e:03:90:0c:95:27:b0:d1:7e:db:7c:44:
                    8c:37:77:59:b3:2e:54:60:98:69:44:41:a7:c9:61:
                    bb:90:b6:7d:e1:86:69:66:88:75:7f:52:71:5e:02:
                    36:e0:c7:31:ec:6e:f1:17:02:7d:ef:ba:e8:27:4a:
                    32:97:b9:d8:a6:73:b0:ee:b4:bf:b1:96:ed:18:7f:
                    ef:2a:b0:20:0d:1d:b1:84:39:5d:34:09:e6:0b:78:
                    7d:8b:bf:06:8f:42:3a:e8:1b:d0:2f:b9:8b:5d:97:
                    d7:c4:18:70:97:94:f7:5d:a6:06:9b:0c:2b:1d:dc:
                    21:a2:7d:e4:93:1a:07:99:ce:06:ca:4a:38:33:c4:
                    b9:b3:d9:a2:b3:08:94:08:87:00:41:e6:f1:a7:67:
                    49:12:2b:2b:b0:1b:53:49:eb:cc:1c:4c:ed:15:6b:
                    8f:28:99:f6:f7:5c:b1:79:d6:54:03:07:d8:52:91:
                    13:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DD:79:36:3E:1A:79:FE:14:ED:61:1E:BA:1C:05:5E:43:47:C7:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/1153fcda-13aa-3951-bb78-12bc6ea28aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl

            X509v3 Authority Key Identifier:
                keyid:A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa42:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:7f:58:68:87:c5:56:0c:b4:62:4f:6d:97:4c:ef:e2:1b:44:
         93:28:f0:05:49:66:64:8b:11:81:a4:21:bd:a4:d3:cc:c3:3a:
         10:2e:df:48:5c:78:dd:a8:e5:2d:69:ff:7d:7f:21:e5:34:84:
         94:a6:19:55:ab:fb:1c:e3:0d:13:32:27:94:83:b8:20:0c:c8:
         f3:35:cc:fb:13:3d:01:eb:1c:a0:d5:e2:0d:19:cb:28:76:a3:
         b1:b3:fe:6f:2f:ef:17:6d:ea:df:a9:cf:f1:e5:19:88:1a:6d:
         c8:62:c3:50:19:cb:d6:e5:9d:11:0f:6e:dc:f5:61:99:0d:11:
         d9:30:1f:89:e8:c3:54:a0:b5:12:75:60:64:49:38:b9:60:17:
         83:97:eb:a7:c8:b6:97:45:e8:3a:ff:f6:7e:af:9f:75:3c:56:
         20:b3:65:8e:71:1b:23:87:b1:76:18:49:41:2c:0b:23:5c:2b:
         66:5c:8b:ac:6d:13:70:c5:89:1a:36:82:8c:a4:cb:24:f2:2d:
         a1:40:46:d6:44:a5:08:b7:9c:09:d8:8b:d8:2c:54:9e:b2:d1:
         b1:47:6c:f6:4a:44:16:c4:56:be:0b:b1:13:60:1c:d7:2c:5d:
         6e:a7:c1:f7:4d:c0:2a:ed:d7:f4:8a:dd:65:21:25:20:c5:5d:
         32:d6:a7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----