Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/4000ee5b-7df3-3de2-ab75-d7ddda25b779.roa
File:                     4000ee5b-7df3-3de2-ab75-d7ddda25b779.roa (raw, json)
Hash identifier:          GK5k3vF3wzWztDoMkhpp2KEduLBTA8lzXGTbNjze+j0=
Subject key identifier:   1E:EB:04:C2:49:57:4D:31:96:E4:38:CE:BD:CF:E6:EF:46:DA:DE:7A
Certificate issuer:       /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial:       010D0C9F432858437CBD42CCA98E165C2DE0B800
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/4000ee5b-7df3-3de2-ab75-d7ddda25b779.roa
Signing time:             Mon 09 Oct 2023 00:33:46 +0000
ROA not before:           Mon 09 Oct 2023 00:33:46 +0000
ROA not after:            Sun 07 Jan 2024 01:33:46 +0000
asID:                     65536
IP address blocks:        2602:fa2e:c3::/64 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:7c:bd:42:cc:a9:8e:16:5c:2d:e0:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
        Validity
            Not Before: Oct  9 00:33:46 2023 GMT
            Not After : Jan  7 01:33:46 2024 GMT
        Subject: CN=3877f754-f496-4adb-a8a3-6a9e7e6460d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ae:d2:a3:93:00:f3:a3:d1:cd:bc:eb:53:bb:
                    01:5b:d0:b9:92:dd:9c:d3:d8:28:7a:41:1b:7c:18:
                    69:ef:bf:d9:a3:da:0a:a1:f0:b5:6a:95:31:93:46:
                    c4:6f:f1:38:97:af:d7:ca:14:10:ed:c6:32:5a:13:
                    a2:2e:d3:14:fc:b3:27:82:a5:23:9f:d2:5f:85:6a:
                    8f:5d:b3:f2:7c:bf:52:ec:16:0f:14:0c:3a:a4:a8:
                    e3:b5:4d:4a:b7:44:ea:3a:8c:a4:e7:c4:9b:04:de:
                    07:05:29:a6:92:47:58:7b:88:23:28:fb:ae:cf:bf:
                    57:4a:15:b6:fa:33:a1:6f:3d:10:20:ac:aa:e5:4d:
                    84:ca:63:d3:ff:e6:8b:a4:3e:02:bc:39:7b:3a:b0:
                    5e:01:ca:24:c6:24:f9:ed:d8:f5:7c:e2:19:a5:07:
                    62:70:51:81:d9:6e:69:0e:b8:6c:3e:8b:de:ea:9d:
                    56:56:c8:76:e1:aa:52:52:fa:46:fb:04:ff:99:4c:
                    51:e3:71:89:d0:e4:48:a3:04:71:e9:e1:ab:fe:be:
                    b0:d9:3d:c5:f5:b8:f4:57:a1:95:6f:18:35:ae:46:
                    c9:58:6a:a3:e7:b9:79:a8:9e:ec:cf:dd:53:59:ee:
                    15:79:52:1b:5a:bf:b6:6e:0f:27:da:26:01:8e:a4:
                    80:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EB:04:C2:49:57:4D:31:96:E4:38:CE:BD:CF:E6:EF:46:DA:DE:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/4000ee5b-7df3-3de2-ab75-d7ddda25b779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl

            X509v3 Authority Key Identifier:
                keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa2e:c3::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ee:c7:e9:0c:09:1d:67:92:2e:42:06:2c:c1:53:1f:05:71:
         48:0d:95:b4:93:58:fc:b9:2e:e7:cd:55:66:b3:49:c4:19:fb:
         a6:0b:57:f9:09:81:69:43:11:c9:ff:ab:a5:81:d4:f8:c5:ec:
         ef:d3:aa:d6:c7:8d:17:5f:43:3c:9b:16:42:7b:d4:30:93:70:
         87:6d:88:25:8b:c2:1f:e2:8a:bd:f7:44:30:a2:ac:03:9c:74:
         f7:7a:ba:67:40:78:4c:8f:46:43:f8:c7:e7:26:e7:f9:0b:f1:
         17:8f:38:74:eb:05:c2:2e:73:36:88:5f:35:2b:6d:f1:95:36:
         a7:f6:32:2e:fa:b0:c8:b3:1c:0e:d3:d3:91:bd:bc:f3:60:14:
         0e:05:97:70:3e:0e:06:81:22:a0:78:ec:88:cb:63:38:7c:be:
         4c:24:d3:55:a8:9e:b0:c5:a8:1f:51:62:b1:a4:dc:b4:a9:9e:
         77:79:8f:3c:40:77:7a:75:48:a2:af:20:1f:ac:39:21:9a:5b:
         f4:ac:e8:b8:4e:53:67:02:79:bd:15:ac:26:a8:f6:30:6a:f6:
         6b:e6:a8:da:5a:b8:d6:d5:a9:55:be:80:c7:82:20:e9:65:dc:
         70:4b:6d:7a:13:94:be:1e:8c:75:b3:cf:27:7e:48:7e:2c:1e:
         58:c1:30:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----