Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9b997354-0178-34de-aa71-ae5999303bc7.roa
File:                     9b997354-0178-34de-aa71-ae5999303bc7.roa (raw, json)
Hash identifier:          O3G8DMUtMKk344415XsJo7GA3yoxG10WQB0tWgQMKTA=
Subject key identifier:   55:9E:2F:DD:06:93:1A:A3:D1:57:66:9D:D7:6F:E7:27:C8:F9:DF:4D
Certificate issuer:       /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial:       010D0C9F432858442D9DAA47F10B7EEC20B4F6C0
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9b997354-0178-34de-aa71-ae5999303bc7.roa
Signing time:             Mon 11 Dec 2023 09:08:11 +0000
ROA not before:           Mon 11 Dec 2023 09:08:11 +0000
ROA not after:            Sun 10 Mar 2024 08:08:11 +0000
asID:                     65540
IP address blocks:        2602:fa2e:200::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:2d:9d:aa:47:f1:0b:7e:ec:20:b4:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
        Validity
            Not Before: Dec 11 09:08:11 2023 GMT
            Not After : Mar 10 08:08:11 2024 GMT
        Subject: CN=fb05dc6f-3c21-4d3e-aa62-4e99ee75962c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a1:83:29:50:8c:8b:57:b6:cc:05:60:e7:f1:
                    6b:7c:4a:eb:6b:4a:76:4c:b3:99:c2:da:58:aa:cb:
                    58:59:c0:92:29:43:29:6f:5b:69:0c:85:11:e2:a8:
                    0c:a4:7b:90:b5:4e:10:6a:61:2f:9e:28:76:15:39:
                    e6:2a:72:ec:bc:65:74:46:8f:1c:76:e7:4e:98:9e:
                    db:40:83:d6:14:2b:bc:33:a6:96:24:2f:14:3f:2f:
                    eb:73:6b:79:ec:a9:fd:31:8c:72:ff:95:c2:9d:5e:
                    b3:80:80:59:66:93:98:6b:b4:32:03:24:d0:50:ac:
                    93:11:ec:23:6c:14:77:e5:30:86:b7:98:03:fc:d2:
                    aa:36:52:b2:c0:ed:32:83:1d:1b:18:19:8a:f0:06:
                    10:be:34:2c:fd:45:2f:db:09:2f:d0:6e:b8:f2:6d:
                    5b:56:2f:95:3a:1d:c0:e0:6b:79:ab:2d:e0:71:16:
                    34:3d:1d:cb:a3:ae:d7:47:1e:e8:ef:50:e3:3f:a4:
                    7f:af:5f:62:48:f1:84:35:db:a8:35:51:70:a6:e4:
                    41:5b:06:da:76:dd:72:36:82:78:aa:e9:a4:a2:e0:
                    d7:e7:7c:9a:71:95:70:f0:86:3c:b9:b1:00:d3:05:
                    8e:6c:d2:dc:1e:66:bf:af:96:d7:7b:d5:0f:e5:ea:
                    d8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9E:2F:DD:06:93:1A:A3:D1:57:66:9D:D7:6F:E7:27:C8:F9:DF:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9b997354-0178-34de-aa71-ae5999303bc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl

            X509v3 Authority Key Identifier:
                keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa2e:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:7f:a5:38:06:38:31:d1:fd:66:1b:0f:34:fb:44:7d:bc:cd:
         1d:4c:88:c8:6b:16:b1:30:bc:28:9d:1e:41:50:ff:2d:a8:36:
         70:67:c2:a3:3b:e4:e6:c3:ae:3c:77:c0:32:39:98:d1:f1:9f:
         a9:0d:d0:eb:e3:b2:30:79:ec:90:c6:0b:d4:54:3c:60:27:3f:
         07:ea:6f:9e:73:3b:36:4c:42:3b:43:d2:e2:ea:87:66:02:95:
         76:21:ae:50:ed:23:42:05:02:66:9e:b5:b5:2d:55:a9:b8:4a:
         15:2a:29:84:16:8f:3a:e7:1f:e7:d0:9e:6c:f7:d5:d6:44:01:
         d7:b9:f1:52:38:82:4a:19:06:21:d2:92:a7:30:1a:ca:c1:a8:
         91:87:34:98:f8:2d:1c:11:7e:88:e6:e6:21:94:7b:80:ed:dd:
         2f:6b:0d:e2:e1:aa:af:2a:82:1f:48:cf:b1:1a:67:8b:61:64:
         33:25:fa:c1:16:ba:be:c8:f5:ac:8f:b4:df:f1:23:4d:95:a2:
         82:ca:c9:65:d8:33:29:1a:2a:c7:52:d3:76:51:a3:8f:82:e5:
         4e:f4:dd:56:80:5b:03:de:3a:fd:d9:56:2b:9f:4e:c5:4a:ae:
         3f:91:62:fb:58:92:55:35:b3:fc:44:30:86:b8:c3:28:ac:72:
         ab:87:a1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----