Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93bda4d4-2034-4649-ac94-51c269ee529e/bd450543-5721-3266-8d18-3ca7e9ac43a6.roa
File:                     bd450543-5721-3266-8d18-3ca7e9ac43a6.roa (raw, json)
Hash identifier:          udCMRfzrB8jNqk8Le623UybXz4BXtzRY8aC276rg9lA=
Subject key identifier:   15:04:99:55:B7:1E:0B:B2:3D:FD:52:19:BD:34:FD:F7:70:A4:06:C1
Certificate issuer:       /CN=93bda4d4-2034-4649-ac94-51c269ee529e
Certificate serial:       010D0C9F43285847A671B1C96BEFC2AC61DEEE00
Authority key identifier: 4D:DE:B0:32:E3:2D:C0:F6:A7:F6:5B:77:0B:B2:51:8D:02:31:ED:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93bda4d4-2034-4649-ac94-51c269ee529e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93bda4d4-2034-4649-ac94-51c269ee529e/bd450543-5721-3266-8d18-3ca7e9ac43a6.roa
Signing time:             Thu 24 Oct 2024 18:13:13 +0000
ROA not before:           Thu 24 Oct 2024 18:13:13 +0000
ROA not after:            Wed 22 Jan 2025 19:13:13 +0000
asID:                     399970
IP address blocks:        2602:fc3b:1000::/40 maxlen: 40

Validation:               Failed, certificate revoked on Mon 28 Oct 2024 18:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a6:71:b1:c9:6b:ef:c2:ac:61:de:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93bda4d4-2034-4649-ac94-51c269ee529e
        Validity
            Not Before: Oct 24 18:13:13 2024 GMT
            Not After : Jan 22 19:13:13 2025 GMT
        Subject: CN=359133d5-4b41-4466-8f13-1a89f8c370be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:81:65:5c:95:8c:cf:3d:03:38:a4:19:c3:f5:
                    08:d1:40:db:1f:ef:bd:4b:84:c8:68:66:83:b8:88:
                    36:38:e3:02:ac:e6:1e:0d:79:f9:9d:8e:af:64:50:
                    2f:d7:60:e1:7c:11:39:d6:b7:59:86:3e:b0:02:74:
                    69:99:d7:d8:34:40:84:87:25:ea:90:76:5c:02:fc:
                    38:07:df:e3:cd:3d:db:f1:5e:4c:1f:45:9c:ef:5c:
                    6d:c6:5e:79:48:9a:6b:f5:f4:86:aa:21:a8:af:f1:
                    cf:16:3e:45:4a:90:c3:5f:d5:ac:44:f9:c7:b1:74:
                    df:4c:a9:32:77:c3:c8:e2:b0:15:43:a9:71:fe:11:
                    14:aa:ea:d8:3f:87:55:e7:3b:82:3c:68:0c:bf:9d:
                    ed:ff:22:83:e6:67:c4:b7:f5:59:f1:c5:33:a3:a3:
                    8d:5c:bf:7c:21:df:22:4f:bf:27:07:05:51:df:5e:
                    e2:90:d4:07:98:60:c4:26:57:3b:79:e1:5f:50:01:
                    e9:05:15:bd:2a:19:82:9d:f6:53:b1:99:e0:f3:81:
                    a5:2f:e1:2d:18:50:63:56:1a:48:00:dc:af:8d:32:
                    ec:a1:9a:c7:83:a4:62:f7:19:c8:05:bb:23:6d:1e:
                    56:31:55:5a:31:d3:5f:c2:34:de:f3:be:a2:ae:b0:
                    ed:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:04:99:55:B7:1E:0B:B2:3D:FD:52:19:BD:34:FD:F7:70:A4:06:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93bda4d4-2034-4649-ac94-51c269ee529e/bd450543-5721-3266-8d18-3ca7e9ac43a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93bda4d4-2034-4649-ac94-51c269ee529e/93bda4d4-2034-4649-ac94-51c269ee529e.crl

            X509v3 Authority Key Identifier:
                keyid:4D:DE:B0:32:E3:2D:C0:F6:A7:F6:5B:77:0B:B2:51:8D:02:31:ED:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93bda4d4-2034-4649-ac94-51c269ee529e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:04:a8:78:14:cb:1c:ef:d9:d5:86:52:f4:0a:6d:0c:91:d0:
         6a:9b:cb:10:e0:bc:82:9d:cb:c3:36:cd:54:78:d6:8b:89:9c:
         9c:cd:77:84:be:f4:6f:15:6d:aa:cb:1c:c3:66:b7:d0:e3:8e:
         37:7c:0e:98:84:12:af:c3:f0:06:85:17:51:89:0e:82:43:f4:
         f8:e4:f8:39:f4:39:02:c7:e8:a4:8c:1d:9e:39:01:70:1f:dc:
         40:59:d3:1d:fa:3a:65:a7:cb:71:dd:47:0e:4a:c0:00:dd:32:
         d6:44:58:32:20:7b:33:d6:c1:c3:43:44:80:52:68:46:a5:d2:
         74:72:74:85:7c:4f:4f:de:68:5b:ce:52:39:8f:57:e9:09:eb:
         81:a3:ca:6f:2a:c5:39:b7:c6:1e:4c:f8:6d:6b:86:c5:1d:c9:
         df:fa:ae:1b:0a:c8:81:6d:fa:17:81:11:dd:c8:60:3a:c8:22:
         bc:7b:fd:25:c6:f6:df:b5:26:5f:10:05:c1:28:37:46:c0:b0:
         8a:25:dd:67:e3:61:a4:4d:a6:34:af:9c:ed:f0:d4:9e:ee:4e:
         c7:1d:af:06:45:4f:fd:fa:82:b6:87:48:dd:01:70:71:30:0a:
         79:e6:17:87:50:56:2d:46:3d:74:8e:c4:56:84:d6:b0:05:f5:
         63:91:2f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----