Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/7b086387-b60b-3de9-90eb-0633d2ef22a3.roa
File:                     7b086387-b60b-3de9-90eb-0633d2ef22a3.roa (raw, json)
Hash identifier:          qXeaZoyyeRozMP3NGH6mQF7R3J8Gj+yO6I9D79xhZBM=
Subject key identifier:   3D:6E:91:4E:E9:C9:92:64:DF:0A:29:CF:B2:26:00:C8:D4:95:57:3E
Certificate issuer:       /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial:       010D0C9F432858437D2174CFE7E70C30A0C98D00
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/7b086387-b60b-3de9-90eb-0633d2ef22a3.roa
Signing time:             Mon 09 Oct 2023 03:55:39 +0000
ROA not before:           Mon 09 Oct 2023 03:55:39 +0000
ROA not after:            Sun 07 Jan 2024 04:55:39 +0000
asID:                     400
IP address blocks:        2602:fa2e:a97:401::/64 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:7d:21:74:cf:e7:e7:0c:30:a0:c9:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
        Validity
            Not Before: Oct  9 03:55:39 2023 GMT
            Not After : Jan  7 04:55:39 2024 GMT
        Subject: CN=4dbbabc2-3fcc-4a42-b6ae-540102c3d930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:67:a8:55:52:1a:5f:90:f1:fe:1d:3e:ac:83:
                    3b:53:49:61:24:d1:74:e3:4d:68:29:62:ac:57:da:
                    f1:b5:e6:96:71:36:03:30:26:8a:00:89:e9:52:e1:
                    9a:58:5c:1b:88:94:f4:c7:b2:19:ba:0d:80:3d:04:
                    1f:1e:d1:33:cb:87:d1:05:5a:43:19:27:b4:e0:92:
                    7c:64:b2:0f:12:8d:77:bb:84:0a:b7:95:42:71:68:
                    75:30:5f:b6:19:98:cd:ff:e0:43:46:74:91:41:ee:
                    bc:a1:83:f2:82:27:ad:9a:f6:c0:26:83:23:9a:19:
                    63:df:3e:c1:94:5b:4b:5f:00:9f:93:3d:58:9d:d6:
                    88:35:24:b0:b9:b9:e8:19:5c:9d:27:f1:55:8f:0d:
                    5a:4e:66:02:46:3d:00:ba:f9:44:cb:fe:17:63:96:
                    a0:ac:0f:de:92:c3:3c:65:90:20:3c:f0:4b:20:36:
                    3f:53:2a:85:ba:04:34:0b:1f:86:e9:ab:6c:e6:da:
                    02:13:e8:0e:16:12:af:ab:98:34:0b:c4:1b:4b:69:
                    15:9e:ac:a2:00:ac:0f:7a:41:80:c8:f9:6b:ba:52:
                    24:60:16:ef:4b:21:e0:65:1d:ce:35:52:76:1e:d6:
                    06:7e:95:83:d3:15:17:f1:01:ba:af:75:86:9d:ef:
                    4b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6E:91:4E:E9:C9:92:64:DF:0A:29:CF:B2:26:00:C8:D4:95:57:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/7b086387-b60b-3de9-90eb-0633d2ef22a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl

            X509v3 Authority Key Identifier:
                keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa2e:a97:401::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:57:3c:85:b5:a1:a4:0a:11:9e:c0:16:a1:c3:5a:f1:81:c7:
         40:78:b8:1c:71:62:ad:ef:0d:3a:29:d5:4d:2d:7a:10:70:44:
         43:a2:46:0f:51:9e:2b:ad:cf:3c:69:8a:c1:1c:de:2e:1b:14:
         67:d9:88:04:52:b0:23:21:39:6c:54:14:be:ad:0a:6b:42:56:
         21:b5:6e:bd:26:33:71:82:d2:a4:e1:8e:0c:8a:15:3f:4c:66:
         2e:2c:20:28:17:96:00:f9:16:3f:52:cd:c0:a9:15:2e:d0:8c:
         0f:26:b4:4d:0f:89:40:e9:97:0f:45:40:84:bc:3a:97:0a:1a:
         9b:f4:34:0f:14:a1:df:15:bc:4c:b4:52:73:7b:d2:18:5f:bf:
         3e:2d:a1:48:1b:d7:95:21:4d:54:bf:dd:d9:d8:00:94:f5:b4:
         ee:e0:85:3c:67:0f:a2:b3:f8:1a:6d:e2:b2:4b:c6:16:93:50:
         5f:34:d9:78:65:7a:47:dc:a2:15:66:5d:ee:6e:8a:fc:25:8c:
         0f:51:62:61:93:af:0f:c0:c9:9d:56:23:16:1e:ca:fb:2a:35:
         d9:c3:51:6c:c1:8c:1d:0b:70:4c:b1:a0:e8:08:36:d1:5e:62:
         fa:14:2a:95:e6:22:08:b4:ce:41:b6:00:ba:95:aa:01:7c:06:
         f7:02:c0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----