Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/53e4a6b4-0dff-3ab2-a893-37e55b5cdb91.roa
File:                     53e4a6b4-0dff-3ab2-a893-37e55b5cdb91.roa (raw, json)
Hash identifier:          qj956zoT8JO4/X3tTwf2hJQ1Zx9zovTQl2LTSPPJRYc=
Subject key identifier:   55:34:3C:28:9E:CF:79:C1:5A:B2:94:BF:26:88:58:90:1C:EA:7D:6C
Certificate issuer:       /CN=dfbfe00a-3fd7-40c7-b3be-10f9b6968836
Certificate serial:       010D0C9F43285847A4B92DF3D811E24582381B60
Authority key identifier: 6A:F4:80:FA:0B:58:28:C8:C6:2D:5E:09:A5:B0:4D:2F:BE:C0:50:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/53e4a6b4-0dff-3ab2-a893-37e55b5cdb91.roa
Signing time:             Thu 24 Oct 2024 03:25:38 +0000
ROA not before:           Thu 24 Oct 2024 03:25:38 +0000
ROA not after:            Wed 22 Jan 2025 04:25:38 +0000
asID:                     20417
IP address blocks:        2602:f7d1::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 03:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a4:b9:2d:f3:d8:11:e2:45:82:38:1b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfbfe00a-3fd7-40c7-b3be-10f9b6968836
        Validity
            Not Before: Oct 24 03:25:38 2024 GMT
            Not After : Jan 22 04:25:38 2025 GMT
        Subject: CN=bd70f6ca-717b-4b1e-9120-4b570f1e732c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d6:fe:f4:b0:6e:c2:0d:30:b4:6b:b9:12:db:
                    0d:36:3c:63:b5:15:56:14:2a:34:d5:17:f4:c7:4a:
                    80:76:3d:54:d3:31:64:d1:db:32:8d:5d:bb:d9:37:
                    2f:b9:4d:c5:6d:59:cc:60:0e:23:a1:2d:36:c4:6f:
                    b1:06:e5:e5:b1:dd:2b:89:49:8d:4f:a3:3d:f5:a3:
                    66:46:aa:2c:2f:41:34:00:96:7e:f6:40:19:63:05:
                    c4:cd:df:0c:a9:73:d5:d6:16:71:e3:72:8c:86:99:
                    16:e8:c4:22:89:3b:5e:03:e6:f9:45:42:e4:50:af:
                    9e:6f:5d:45:c4:40:2f:44:fb:71:26:ec:1f:4a:35:
                    36:c7:b0:ca:ef:22:7c:89:2e:37:21:76:e2:e6:ca:
                    c1:cf:41:a1:cf:71:73:0c:a5:cf:d7:fe:e0:88:a5:
                    40:9a:28:b4:9b:9f:d8:3b:26:78:bc:bc:7e:83:26:
                    28:39:c0:08:13:16:86:c2:2a:59:e3:17:c2:cf:df:
                    c1:15:01:a9:9f:b1:4f:0e:f4:74:6d:59:74:34:ca:
                    da:86:62:a8:40:38:2d:d9:dc:5e:bf:f2:17:c9:e6:
                    cf:55:f4:e1:28:db:90:39:f1:a6:e6:2e:b6:01:c1:
                    f4:9b:ce:4b:67:ad:91:b5:a5:2d:67:f4:aa:41:63:
                    2b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:34:3C:28:9E:CF:79:C1:5A:B2:94:BF:26:88:58:90:1C:EA:7D:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/53e4a6b4-0dff-3ab2-a893-37e55b5cdb91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.crl

            X509v3 Authority Key Identifier:
                keyid:6A:F4:80:FA:0B:58:28:C8:C6:2D:5E:09:A5:B0:4D:2F:BE:C0:50:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7d1::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:da:be:b6:69:cb:4c:79:ab:94:17:f3:4f:d9:04:b6:29:0f:
         0f:ff:84:22:aa:d8:d8:89:e5:93:4e:99:08:31:42:b8:a0:df:
         f7:ef:cc:d1:c8:da:cf:4e:f5:ad:be:d5:b7:6e:d9:0d:72:4a:
         2a:49:5f:29:51:67:44:db:db:08:df:06:44:5f:af:1f:d3:14:
         99:d8:86:ec:35:64:87:17:67:b8:1d:91:b1:4d:ca:74:fe:14:
         26:d8:81:30:16:3e:89:3e:b5:ac:26:a9:a7:f1:1a:a9:68:53:
         bc:91:74:51:b8:e0:f0:4d:f5:d9:42:c3:59:ff:73:eb:3e:41:
         7b:80:14:24:b8:a7:2e:7a:03:9b:74:ff:19:37:4c:6c:33:ee:
         73:86:07:d6:20:56:30:07:67:07:88:5b:d9:30:8b:e0:fe:e4:
         16:84:3d:df:e4:cd:18:7c:c9:ec:6a:48:b6:9f:c3:d4:91:b3:
         61:e3:01:c1:65:ac:a5:b8:0e:67:8b:96:85:a8:a2:be:fa:45:
         0f:94:55:6d:0f:15:a3:dd:e6:77:bf:a3:ec:73:58:ea:24:37:
         bc:52:08:15:b3:04:62:12:60:98:36:3b:93:4f:10:11:de:3e:
         35:5b:34:6d:07:be:2d:ac:d0:82:97:bb:63:90:ab:fe:19:2b:
         ef:2b:12:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----