Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/1a29c04d-461d-3d65-af29-60866a6b0a47.roa
File:                     1a29c04d-461d-3d65-af29-60866a6b0a47.roa (raw, json)
Hash identifier:          ayvPV2Uc+y8MUudTG+gR4EUA86lkREbMfH/M1Q34PAw=
Subject key identifier:   D6:FA:EB:9D:D4:E3:27:70:CF:41:97:BC:43:1E:79:24:F8:04:A3:6F
Certificate issuer:       /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial:       010D0C9F4328584426E03E16505ADB5990C2C300
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/1a29c04d-461d-3d65-af29-60866a6b0a47.roa
Signing time:             Fri 08 Dec 2023 23:11:41 +0000
ROA not before:           Fri 08 Dec 2023 23:11:41 +0000
ROA not after:            Thu 07 Mar 2024 23:11:41 +0000
asID:                     65535
IP address blocks:        2602:fa2e:c00::/38 maxlen: 38

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:26:e0:3e:16:50:5a:db:59:90:c2:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
        Validity
            Not Before: Dec  8 23:11:41 2023 GMT
            Not After : Mar  7 23:11:41 2024 GMT
        Subject: CN=97ca8116-5ec2-4fdd-8abe-a6e3a61a7143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8c:99:8c:9f:4b:42:76:cb:ba:6c:e7:97:7d:
                    51:84:00:a4:e4:6d:fd:18:35:30:92:f1:7e:f8:e3:
                    75:83:6a:09:74:1b:40:f2:fb:69:97:01:d4:96:70:
                    67:ce:13:3b:bd:fe:32:61:bd:b3:c9:d9:94:28:3b:
                    40:94:5b:08:04:17:5e:a1:55:1c:c8:65:0e:a5:33:
                    7f:53:6a:06:f8:b5:37:6c:ee:7a:58:59:f3:aa:94:
                    8f:2c:89:1c:c5:2a:9d:87:cc:17:59:9d:96:a0:65:
                    01:1d:79:a4:0b:ec:c8:38:2b:15:b4:48:35:7c:bb:
                    c5:5d:85:67:b3:7f:11:52:77:82:27:9f:e8:c1:e5:
                    8e:ba:db:0e:5d:d5:58:50:43:d5:13:dd:47:c6:03:
                    b2:02:64:13:a3:b4:97:9a:d8:40:b1:1b:97:8f:08:
                    7e:c9:86:c4:0f:0e:59:93:46:41:89:d4:99:17:e6:
                    a1:c3:19:bc:d0:d4:3b:de:3b:e7:d8:a4:9a:b8:3b:
                    da:4b:78:69:9b:c7:a1:35:32:ee:d7:7e:79:d5:8c:
                    9a:b0:88:a5:a3:97:b6:9b:a3:19:54:cf:77:d7:0b:
                    0e:fd:8a:df:61:8d:57:dc:31:3c:aa:28:e3:d9:4f:
                    e7:cd:ba:3c:a0:e7:94:40:8c:ce:26:f3:06:3f:f9:
                    c7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FA:EB:9D:D4:E3:27:70:CF:41:97:BC:43:1E:79:24:F8:04:A3:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/1a29c04d-461d-3d65-af29-60866a6b0a47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl

            X509v3 Authority Key Identifier:
                keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa2e:c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:ab:1e:eb:2a:97:d5:4d:90:4c:81:70:ed:51:cb:b9:ba:25:
         ec:e2:d5:dd:de:b5:20:fc:f2:7e:2d:9a:d5:9a:ea:91:c1:03:
         e7:bc:00:6c:d7:20:95:6c:7f:49:b8:e4:cd:be:da:89:16:6e:
         cd:85:c6:1e:6a:93:aa:fd:ae:c3:bf:7c:da:15:5e:e8:ca:e4:
         12:14:7d:93:c1:4a:b9:4b:8d:b9:04:37:24:63:0e:f5:cf:f3:
         2d:dd:f9:dd:d7:9c:4f:9d:81:8b:b7:6e:bb:63:a8:70:6a:e2:
         24:e2:21:48:5e:7b:bd:12:e5:e1:27:75:71:32:a4:68:06:db:
         0d:1d:6b:c2:72:73:63:6f:b2:7a:52:e5:9c:47:1e:a7:9d:da:
         dc:95:aa:35:5a:a7:4f:ef:3e:f8:74:97:5e:14:f0:73:37:ba:
         0b:41:a0:c0:07:07:d3:80:6d:12:45:a7:de:58:a8:c3:ae:c5:
         85:cb:bc:c9:d5:aa:66:59:e0:47:0b:9f:2f:88:4c:96:b0:43:
         5d:d1:11:a5:e3:02:61:ca:10:6d:fb:be:6a:d1:60:d9:ef:c6:
         79:0a:02:d6:37:c7:7f:60:f0:f8:73:de:08:11:30:16:da:a8:
         fa:40:5f:2d:a4:b5:86:f9:db:5a:e5:bd:02:e6:ce:ad:a7:0a:
         e3:8a:84:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----