Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93bda4d4-2034-4649-ac94-51c269ee529e/8d4cbcec-2762-3907-a880-e4600cd7019b.roa
File:                     8d4cbcec-2762-3907-a880-e4600cd7019b.roa (raw, json)
Hash identifier:          UJK2gdyp78hJPXJAUcCPUPpNz0nZUveZqpTqw34HwFM=
Subject key identifier:   CC:15:9F:75:CC:AC:CC:40:B1:A9:25:7F:C2:13:5F:CA:19:F7:58:89
Certificate issuer:       /CN=93bda4d4-2034-4649-ac94-51c269ee529e
Certificate serial:       010D0C9F43285847A66DA52B3AE3D0A2095D4200
Authority key identifier: 4D:DE:B0:32:E3:2D:C0:F6:A7:F6:5B:77:0B:B2:51:8D:02:31:ED:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93bda4d4-2034-4649-ac94-51c269ee529e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93bda4d4-2034-4649-ac94-51c269ee529e/8d4cbcec-2762-3907-a880-e4600cd7019b.roa
Signing time:             Thu 24 Oct 2024 18:05:03 +0000
ROA not before:           Thu 24 Oct 2024 18:05:03 +0000
ROA not after:            Wed 22 Jan 2025 19:05:03 +0000
asID:                     399970
IP address blocks:        2602:fc3b:8804::/46 maxlen: 48

Validation:               Failed, certificate revoked on Thu 24 Oct 2024 20:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a6:6d:a5:2b:3a:e3:d0:a2:09:5d:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93bda4d4-2034-4649-ac94-51c269ee529e
        Validity
            Not Before: Oct 24 18:05:03 2024 GMT
            Not After : Jan 22 19:05:03 2025 GMT
        Subject: CN=6efb3002-8fdd-4c83-87f8-537d12bd0706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d4:bf:61:70:4b:2b:15:d3:c0:0f:cd:5f:e4:
                    6c:59:4e:de:4f:9f:ef:a9:ec:b9:db:3d:0c:cf:0d:
                    cb:51:2d:f1:91:01:75:f4:4a:1f:28:4d:b3:98:15:
                    99:bc:6a:d1:66:4d:83:51:d2:47:a5:26:a8:83:ba:
                    53:48:23:98:b5:74:ef:04:53:e5:ca:07:b4:de:ec:
                    c8:19:d9:19:3b:9c:66:43:2a:e5:fa:15:46:fa:01:
                    a0:9a:b1:47:a4:6a:a2:c8:d3:d3:6e:a5:54:88:75:
                    c4:36:f7:21:2e:6a:66:6d:37:4f:7d:58:da:61:85:
                    a9:9a:8b:b7:47:e3:74:c5:84:41:96:74:19:99:92:
                    9e:67:85:c4:7f:9c:4e:0b:fa:f4:1a:41:0f:03:91:
                    ad:dd:16:c8:90:d2:1c:3b:01:4e:b4:02:12:fc:8a:
                    0b:d8:fd:9e:db:af:d9:10:37:4f:07:e0:c2:98:64:
                    6c:32:93:c4:8c:b3:7b:c9:a6:8f:a6:07:ed:49:5a:
                    ca:b9:67:1d:83:91:13:23:b5:ae:d2:21:50:ab:69:
                    55:11:b2:3a:86:9a:68:33:fa:4b:97:7f:5f:0a:bf:
                    be:c7:7a:fb:2c:e4:bd:c3:af:80:05:49:55:7d:4b:
                    b9:74:06:8f:c0:4e:c0:f4:b8:58:b0:29:ff:c9:2c:
                    01:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:15:9F:75:CC:AC:CC:40:B1:A9:25:7F:C2:13:5F:CA:19:F7:58:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93bda4d4-2034-4649-ac94-51c269ee529e/8d4cbcec-2762-3907-a880-e4600cd7019b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93bda4d4-2034-4649-ac94-51c269ee529e/93bda4d4-2034-4649-ac94-51c269ee529e.crl

            X509v3 Authority Key Identifier:
                keyid:4D:DE:B0:32:E3:2D:C0:F6:A7:F6:5B:77:0B:B2:51:8D:02:31:ED:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93bda4d4-2034-4649-ac94-51c269ee529e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:8804::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:50:2d:f9:ef:4e:4f:ee:fd:c6:1b:ab:17:b3:bc:a4:e9:14:
         48:9d:8e:d7:58:5f:4e:b3:e8:9b:f4:90:f5:d3:64:fb:68:2b:
         5c:c6:54:25:f0:73:9e:3d:24:e4:f3:45:5f:43:55:7e:b2:fd:
         36:a0:44:98:46:00:3b:2c:6d:cf:19:1d:ab:9f:90:e9:57:78:
         c7:9e:1e:0d:68:82:aa:27:12:37:42:8c:d4:56:24:0c:c3:cd:
         40:bd:c4:c1:be:49:aa:86:97:09:0a:01:8a:1d:61:37:92:e9:
         c8:af:13:c1:b7:d4:53:b5:8d:18:eb:c0:71:38:0e:6a:31:7d:
         58:be:d7:12:46:e3:1b:92:d4:9f:b5:75:af:54:93:9f:f4:8f:
         c0:be:c5:9e:51:04:67:eb:15:92:d1:3c:d9:79:5e:a5:f6:1d:
         68:f7:49:e9:a0:c2:49:1f:c7:bc:85:12:17:62:84:fc:fa:74:
         1b:b1:7f:f7:ae:f9:8c:9a:1f:a3:57:24:8f:6d:24:7a:e7:3e:
         f8:f6:4d:fe:0e:a0:57:75:b4:78:f5:a7:a1:37:76:82:41:e8:
         d5:3a:45:43:b7:62:2d:5e:f0:c4:b0:c4:8f:d4:fc:7b:90:d0:
         d1:88:ca:99:54:d9:03:21:a1:22:53:df:81:0e:17:34:4f:b5:
         3c:ce:f5:fb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEembaUrOuPQogldQgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTNiZGE0ZDQtMjAzNC00NjQ5LWFjOTQtNTFjMjY5ZWU1
MjllMB4XDTI0MTAyNDE4MDUwM1oXDTI1MDEyMjE5MDUwM1owLzEtMCsGA1UEAxMk
NmVmYjMwMDItOGZkZC00YzgzLTg3ZjgtNTM3ZDEyYmQwNzA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntS/YXBLKxXTwA/NX+RsWU7eT5/vqey52z0M
zw3LUS3xkQF19EofKE2zmBWZvGrRZk2DUdJHpSaog7pTSCOYtXTvBFPlyge03uzI
GdkZO5xmQyrl+hVG+gGgmrFHpGqiyNPTbqVUiHXENvchLmpmbTdPfVjaYYWpmou3
R+N0xYRBlnQZmZKeZ4XEf5xOC/r0GkEPA5Gt3RbIkNIcOwFOtAIS/IoL2P2e26/Z
EDdPB+DCmGRsMpPEjLN7yaaPpgftSVrKuWcdg5ETI7Wu0iFQq2lVEbI6hppoM/pL
l39fCr++x3r7LOS9w6+ABUlVfUu5dAaPwE7A9LhYsCn/ySwBVQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMwVn3XMrMxAsaklf8ITX8oZ91iJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85M2Jk
YTRkNC0yMDM0LTQ2NDktYWM5NC01MWMyNjllZTUyOWUvOGQ0Y2JjZWMtMjc2Mi0z
OTA3LWE4ODAtZTQ2MDBjZDcwMTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTNiZGE0ZDQtMjAzNC00NjQ5LWFj
OTQtNTFjMjY5ZWU1MjllLzkzYmRhNGQ0LTIwMzQtNDY0OS1hYzk0LTUxYzI2OWVl
NTI5ZS5jcmwwHwYDVR0jBBgwFoAUTd6wMuMtwPan9lt3C7JRjQIx7TMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85M2JkYTRkNC0yMDM0LTQ2NDktYWM5NC01MWMy
NjllZTUyOWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgL8O4gE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADBQLfnvTk/u/cYbqxezvKTpFEidjtdYX06z6Jv0kPXTZPtoK1zG
VCXwc549JOTzRV9DVX6y/TagRJhGADssbc8ZHaufkOlXeMeeHg1ogqonEjdCjNRW
JAzDzUC9xMG+SaqGlwkKAYodYTeS6civE8G31FO1jRjrwHE4DmoxfVi+1xJG4xuS
1J+1da9Uk5/0j8C+xZ5RBGfrFZLRPNl5XqX2HWj3Semgwkkfx7yFEhdihPz6dBux
f/eu+YyaH6NXJI9tJHrnPvj2Tf4OoFd1tHj1p6E3doJB6NU6RUO3Yi1e8MSwxI/U
/HuQ0NGIyplU2QMhoSJT34EOFzRPtTzO9fs=
-----END CERTIFICATE-----