Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/e920e671-3670-3710-b360-5b60d6614beb.roa
File:                     e920e671-3670-3710-b360-5b60d6614beb.roa (raw, json)
Hash identifier:          i9mcQIFSM34R3z1MXTN4iq+uEYcKMBUPAb8dYxa+FGU=
Subject key identifier:   1B:DC:27:5A:05:0D:6E:F1:7E:6D:04:71:55:E5:91:A2:09:C5:B7:9B
Certificate issuer:       /CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
Certificate serial:       010D0C9F43285849071BE93FC9B0FD428CE8B680
Authority key identifier: A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/e920e671-3670-3710-b360-5b60d6614beb.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     63801
IP address blocks:        2602:f87f::/36 maxlen: 48
Validation:               Failed, certificate revoked on Sat 08 Mar 2025 15:24:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:e9:3f:c9:b0:fd:42:8c:e8:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=f88c31f0-3958-4a1b-8729-5ba22459a32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:64:f2:c6:fd:35:af:4b:10:c2:bb:c1:44:01:
                    bf:51:1b:cb:d7:1b:62:2d:53:42:4a:47:0a:fd:44:
                    58:c5:fb:32:1e:54:f3:cd:0a:25:e3:0d:a6:f2:96:
                    e2:33:8b:64:c8:78:54:33:5d:a9:1c:09:d4:3c:81:
                    c5:3d:f2:1b:b7:1c:52:d6:5e:3f:c1:03:17:df:37:
                    6f:14:3c:61:32:3b:45:27:1e:39:d9:0c:a1:42:86:
                    6d:e6:6b:70:cc:ed:be:61:b1:7b:0b:61:45:a8:2c:
                    4c:66:1b:ab:7d:f9:d7:9c:f3:76:28:4d:ec:8e:fd:
                    fb:76:ab:b0:3d:95:54:cb:6b:dd:59:a5:8d:cc:5f:
                    a8:d3:41:45:de:34:eb:a7:01:61:59:86:77:a9:70:
                    6c:99:11:b8:75:79:f4:6d:21:3e:33:a6:40:4a:68:
                    bf:01:49:71:1f:b3:54:39:dd:08:fb:29:c0:3c:55:
                    59:1a:e4:88:cb:6d:c5:7a:7d:f2:38:6a:65:c8:f9:
                    06:e4:cd:eb:aa:7d:2f:f2:5b:df:d5:66:69:f2:a8:
                    ae:3a:4c:9c:87:ec:a6:56:a3:ed:8b:25:5b:95:ef:
                    f7:3e:a8:a4:53:a2:84:50:3c:e3:b0:ba:0c:83:73:
                    64:c7:78:30:0d:90:cb:94:32:a8:7c:6e:9c:f5:6b:
                    9f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DC:27:5A:05:0D:6E:F1:7E:6D:04:71:55:E5:91:A2:09:C5:B7:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/e920e671-3670-3710-b360-5b60d6614beb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl

            X509v3 Authority Key Identifier:
                keyid:A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f87f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:c1:37:01:1d:bd:a7:aa:4a:59:6e:58:5b:7f:4a:72:54:9c:
         0c:d0:ae:da:c1:9e:1d:09:49:80:a5:72:b3:92:43:51:0f:7d:
         d4:50:b7:0c:28:b9:a2:00:19:8c:bd:99:27:71:0a:3a:5e:1c:
         d5:6e:1d:b2:ef:4d:47:c2:f2:3a:7c:65:35:16:f3:94:ef:68:
         b1:05:e6:98:67:09:86:14:0d:f0:47:66:eb:c6:ee:23:e9:fc:
         0c:5f:a0:43:c0:40:a5:7c:c2:9b:f5:fc:07:9a:c9:bc:2e:44:
         f8:c9:10:80:78:8e:3b:fe:2e:bd:0f:3e:bf:40:d0:a9:4d:18:
         71:fd:ba:d7:15:70:b8:1a:4d:86:cf:90:92:e1:b5:7a:70:51:
         d4:84:4c:be:64:59:5a:50:a7:66:1c:11:75:75:2e:8b:53:14:
         ae:7c:05:c3:8b:48:69:72:79:29:dc:46:a0:43:71:a0:e9:53:
         6a:ce:b4:13:af:79:e1:12:87:76:f1:2d:39:e8:60:25:74:5c:
         fd:f4:63:32:ba:75:64:1d:d8:1f:d6:9d:5c:e6:e3:f5:50:05:
         f1:d0:93:94:0b:ff:bd:58:ef:a1:78:ab:9b:88:4f:f6:d1:4e:
         36:bf:43:59:6a:c2:5c:9c:2b:4f:5f:73:83:91:64:0b:50:79:
         3a:b4:af:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----