Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/60d0eb9b-55d5-39ff-b703-1799a950c7f1.roa
File:                     60d0eb9b-55d5-39ff-b703-1799a950c7f1.roa (raw, json)
Hash identifier:          h/Q7PDZ73s/hJCX2WDDahKi9l+gUgpEJ4vLfWPfPtH4=
Subject key identifier:   C6:63:2E:52:BF:91:96:3E:E4:E3:2B:C0:8D:77:5A:67:55:8D:60:56
Certificate issuer:       /CN=058a49b1-635c-42be-b1a3-1465228f2130
Certificate serial:       010D0C9F43285847F2EEFC9BCA6C5DF89935B9C0
Authority key identifier: 68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/60d0eb9b-55d5-39ff-b703-1799a950c7f1.roa
Signing time:             Thu 21 Nov 2024 03:47:06 +0000
ROA not before:           Thu 21 Nov 2024 03:47:06 +0000
ROA not after:            Wed 19 Feb 2025 03:47:06 +0000
asID:                     26682
IP address blocks:        2602:f795:a02::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 17:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ee:fc:9b:ca:6c:5d:f8:99:35:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=058a49b1-635c-42be-b1a3-1465228f2130
        Validity
            Not Before: Nov 21 03:47:06 2024 GMT
            Not After : Feb 19 03:47:06 2025 GMT
        Subject: CN=66b4ae1e-1e9c-4194-9f7d-5cf4c98a29cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6e:7c:3b:34:20:21:f5:5b:5b:cc:f1:32:6f:
                    46:7a:61:8e:86:67:47:5a:35:94:28:da:5b:02:03:
                    1e:82:22:e5:d0:7c:f2:94:b3:11:ba:41:66:fc:bc:
                    6d:56:86:db:ad:ce:0f:05:1d:d4:41:c1:39:54:bb:
                    80:08:2c:96:e7:f5:b0:6c:1c:44:83:1d:8f:cd:8e:
                    2a:fb:c7:9e:0f:af:20:d1:14:09:0a:ef:b0:4f:34:
                    fc:12:c3:7f:a1:95:ed:80:dc:92:4f:7a:b1:3e:30:
                    1c:0d:ab:d8:2e:a8:e9:d3:d3:ff:31:2e:d4:10:a1:
                    6b:d5:dc:3e:3a:6c:4a:3b:08:51:54:5a:19:11:45:
                    c3:cc:09:d5:f9:24:25:d1:22:1d:20:de:7c:c7:87:
                    76:ae:1f:25:b5:ff:e3:58:22:5a:e9:f0:c2:94:11:
                    49:e6:b3:ea:9c:17:ca:99:b8:90:8e:92:ec:ad:aa:
                    c9:f7:d2:e3:76:a7:ed:82:26:27:d7:87:8d:5c:06:
                    44:62:0c:b7:bc:a3:3a:fe:e7:a7:93:21:f5:38:8e:
                    c5:af:49:73:ba:40:db:ba:e9:aa:f2:5e:ae:8c:5a:
                    1c:32:6a:14:4c:54:43:db:db:68:c9:98:bc:13:3f:
                    35:59:fb:8f:05:5c:a3:99:fb:8b:d7:0b:cf:13:a3:
                    c4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:63:2E:52:BF:91:96:3E:E4:E3:2B:C0:8D:77:5A:67:55:8D:60:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/60d0eb9b-55d5-39ff-b703-1799a950c7f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.crl

            X509v3 Authority Key Identifier:
                keyid:68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f795:a02::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:c5:f8:b0:d8:49:36:fc:29:33:37:49:b2:b4:02:ad:0e:38:
         58:af:37:de:6b:32:0b:91:f6:48:fa:3f:82:39:bd:f4:b7:00:
         26:c6:df:02:65:f3:62:17:2b:0b:27:93:1c:2c:1d:10:ea:b0:
         73:0b:9a:42:7a:15:17:30:fb:20:01:09:de:3d:c7:d7:c2:0e:
         1a:a9:3f:c0:71:c4:6e:b2:54:f1:92:5a:c4:a7:d6:a5:83:81:
         4c:e4:e6:f8:0c:4e:fe:36:b7:14:40:58:1e:53:2c:21:95:da:
         83:fd:f6:ee:ea:20:80:39:c9:77:1b:cc:54:6b:ed:e7:63:9f:
         9d:12:75:70:6e:ec:c5:a0:66:96:ce:96:95:3e:82:a3:d1:17:
         fd:3c:b0:9b:8a:08:a2:04:89:7f:e2:66:dc:c3:ed:0c:99:72:
         8f:1d:49:2d:18:8d:41:ec:ee:42:0f:96:3a:c8:a1:16:9e:ba:
         32:72:cc:33:e9:1e:54:86:03:d7:94:40:81:42:55:fc:77:78:
         65:b2:c9:8f:8a:c7:05:1a:00:a9:c4:6c:c5:86:bc:a8:eb:85:
         86:fd:3f:0b:3d:3b:bc:bc:e3:e7:8e:71:e6:17:ac:4e:fd:c9:
         fb:0f:57:07:a9:b7:f2:34:f4:ec:74:e5:09:2b:ab:2f:2c:ad:
         be:3c:14:56
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfy7vybymxd+Jk1ucAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDU4YTQ5YjEtNjM1Yy00MmJlLWIxYTMtMTQ2NTIyOGYy
MTMwMB4XDTI0MTEyMTAzNDcwNloXDTI1MDIxOTAzNDcwNlowLzEtMCsGA1UEAxMk
NjZiNGFlMWUtMWU5Yy00MTk0LTlmN2QtNWNmNGM5OGEyOWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm58OzQgIfVbW8zxMm9GemGOhmdHWjWUKNpb
AgMegiLl0HzylLMRukFm/LxtVobbrc4PBR3UQcE5VLuACCyW5/WwbBxEgx2PzY4q
+8eeD68g0RQJCu+wTzT8EsN/oZXtgNyST3qxPjAcDavYLqjp09P/MS7UEKFr1dw+
OmxKOwhRVFoZEUXDzAnV+SQl0SIdIN58x4d2rh8ltf/jWCJa6fDClBFJ5rPqnBfK
mbiQjpLsrarJ99LjdqftgiYn14eNXAZEYgy3vKM6/uenkyH1OI7Fr0lzukDbuumq
8l6ujFocMmoUTFRD29toyZi8Ez81WfuPBVyjmfuL1wvPE6PEFwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMZjLlK/kZY+5OMrwI13WmdVjWBWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wNThh
NDliMS02MzVjLTQyYmUtYjFhMy0xNDY1MjI4ZjIxMzAvNjBkMGViOWItNTVkNS0z
OWZmLWI3MDMtMTc5OWE5NTBjN2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDU4YTQ5YjEtNjM1Yy00MmJlLWIx
YTMtMTQ2NTIyOGYyMTMwLzA1OGE0OWIxLTYzNWMtNDJiZS1iMWEzLTE0NjUyMjhm
MjEzMC5jcmwwHwYDVR0jBBgwFoAUaCUP3rONAi5TxKSqLJfyB3EgXzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wNThhNDliMS02MzVjLTQyYmUtYjFhMy0xNDY1
MjI4ZjIxMzAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3lQoC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFHF+LDYSTb8KTM3SbK0Aq0OOFivN95rMguR9kj6P4I5vfS3ACbG
3wJl82IXKwsnkxwsHRDqsHMLmkJ6FRcw+yABCd49x9fCDhqpP8BxxG6yVPGSWsSn
1qWDgUzk5vgMTv42txRAWB5TLCGV2oP99u7qIIA5yXcbzFRr7edjn50SdXBu7MWg
ZpbOlpU+gqPRF/08sJuKCKIEiX/iZtzD7QyZco8dSS0YjUHs7kIPljrIoRaeujJy
zDPpHlSGA9eUQIFCVfx3eGWyyY+KxwUaAKnEbMWGvKjrhYb9Pws9O7y84+eOceYX
rE79yfsPVwept/I09Ox05Qkrqy8srb48FFY=
-----END CERTIFICATE-----