Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/373e34f7-948c-3030-8e8f-64cda8e08249.roa
File:                     373e34f7-948c-3030-8e8f-64cda8e08249.roa (raw, json)
Hash identifier:          5j8ioz1BjbmfX7dmcwqbZR1wFuMvHxdaoOJvTM6XC2s=
Subject key identifier:   D1:AF:26:05:0D:F0:A6:DE:00:B9:11:72:20:C7:50:14:6E:D6:7A:1D
Certificate issuer:       /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial:       010D0C9F432858478D4A056B182E105B38A3DD80
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/373e34f7-948c-3030-8e8f-64cda8e08249.roa
Signing time:             Tue 15 Oct 2024 17:58:04 +0000
ROA not before:           Tue 15 Oct 2024 17:58:04 +0000
ROA not after:            Mon 13 Jan 2025 18:58:04 +0000
asID:                     14618
IP address blocks:        2602:f7db::/40 maxlen: 48

Validation:               Failed, certificate revoked on Thu 24 Oct 2024 21:56:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8d:4a:05:6b:18:2e:10:5b:38:a3:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
        Validity
            Not Before: Oct 15 17:58:04 2024 GMT
            Not After : Jan 13 18:58:04 2025 GMT
        Subject: CN=510a94c7-413c-4bee-957c-45ac44500a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8d:20:09:8b:a7:a5:c6:e6:1d:86:0c:32:72:
                    b8:73:27:e7:83:89:c8:e6:74:e2:90:93:0a:38:e7:
                    59:6a:5e:e1:eb:5b:2e:d7:18:3f:ca:b7:14:46:f1:
                    ec:7f:c8:58:11:75:fb:80:c1:72:0f:ee:a7:c3:9f:
                    fa:1c:6a:4b:3d:18:ac:9e:2a:14:0f:37:9c:d8:89:
                    48:a0:f4:78:68:37:d3:cf:75:b4:94:50:3d:fb:fd:
                    ed:6b:e3:81:63:4e:6b:b6:b8:a9:dc:65:b4:aa:0f:
                    43:da:3b:be:1f:ab:a7:be:5a:9f:7d:b2:d2:ab:6a:
                    df:fd:64:4d:7c:f0:d4:4a:40:d5:15:7c:c7:bb:c0:
                    3d:7c:81:e8:31:d5:27:1e:34:ae:45:6c:42:b2:ba:
                    48:cb:b7:d2:a8:e8:49:6e:cf:b0:8d:44:31:fd:b1:
                    8a:3d:eb:e8:f7:1c:f5:37:06:6a:a2:6c:15:10:3e:
                    04:c8:14:c9:5f:b1:3a:94:fb:02:3f:c0:5b:b6:68:
                    f3:c0:ee:0a:f8:8b:6c:f0:84:82:16:7f:09:70:aa:
                    3e:51:44:42:28:44:6c:89:ac:f3:d2:a4:a6:68:47:
                    4b:b2:18:d5:fb:d0:8d:5c:c4:26:d9:be:6d:84:e8:
                    43:16:6f:e1:1e:7c:76:b6:90:58:77:70:3d:c9:56:
                    66:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AF:26:05:0D:F0:A6:DE:00:B9:11:72:20:C7:50:14:6E:D6:7A:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/373e34f7-948c-3030-8e8f-64cda8e08249.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl

            X509v3 Authority Key Identifier:
                keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7db::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f2:87:7e:4a:16:a0:8a:26:7f:bb:bb:13:fe:59:4f:7c:20:
         70:ae:cc:e4:ee:ad:63:80:40:44:8b:f7:3b:e7:a4:ba:e3:65:
         c0:c4:e5:4b:b2:3b:fd:96:81:87:7e:a0:5a:1d:31:7b:5a:92:
         f8:be:68:29:ff:81:9a:cd:94:a0:5e:5e:1e:19:82:c4:e1:78:
         88:a3:bc:4b:f3:ce:40:c2:a7:42:93:22:11:71:c4:56:64:31:
         5d:16:5e:a5:0e:e2:5c:47:c6:07:0e:8e:18:05:2d:ed:4a:5a:
         35:8b:d7:1c:6b:55:68:a9:29:91:45:55:82:ec:2b:6e:71:ca:
         ec:92:b2:87:63:5f:95:89:c7:d3:34:47:f6:84:fe:7e:1d:14:
         48:ba:65:59:7c:4e:4d:ad:8f:0e:bc:9a:e7:0d:0e:6e:06:82:
         46:0a:bf:d5:2c:0f:4b:50:d1:a4:5d:c8:f0:29:bd:2a:d1:de:
         51:04:1a:68:48:d0:c4:3f:9c:3f:e9:64:fe:b0:58:bf:6a:78:
         98:41:86:e0:14:03:d6:dd:77:21:53:ea:af:ce:c7:99:b8:15:
         25:9e:cb:e3:90:a6:81:8e:98:93:82:3c:61:28:c9:93:77:3f:
         96:a0:e6:e9:f0:86:ae:82:b3:07:86:aa:7a:bd:67:09:81:c9:
         9f:fb:bd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----