Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/a0a9a3e4-40eb-3149-8391-7f5ea073f954.roa
File:                     a0a9a3e4-40eb-3149-8391-7f5ea073f954.roa (raw, json)
Hash identifier:          3kBb2zDsy39HUG3vmiZdp9SiBPlMJIamdxpvLIz7FLU=
Subject key identifier:   24:06:6E:C3:DB:B6:DE:8B:65:A7:1C:BC:23:34:9F:86:A5:7A:03:2F
Certificate issuer:       /CN=23f3c964-aab2-4965-9f55-d270cc840a73
Certificate serial:       010D0C9F43285846A4E0C0F22E5E4CAEAEA0BC00
Authority key identifier: 3B:43:D9:DB:E1:64:AD:7E:55:75:B1:27:1E:19:FF:64:55:A0:42:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/a0a9a3e4-40eb-3149-8391-7f5ea073f954.roa
Signing time:             Wed 24 Jul 2024 11:58:26 +0000
ROA not before:           Wed 24 Jul 2024 11:58:26 +0000
ROA not after:            Tue 22 Oct 2024 11:58:26 +0000
asID:                     30265
IP address blocks:        2602:f86e:102::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 27 Aug 2024 08:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a4:e0:c0:f2:2e:5e:4c:ae:ae:a0:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f3c964-aab2-4965-9f55-d270cc840a73
        Validity
            Not Before: Jul 24 11:58:26 2024 GMT
            Not After : Oct 22 11:58:26 2024 GMT
        Subject: CN=5249a250-337d-4e3f-a76a-11a021ce62d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:52:65:c3:45:3b:20:ae:d6:62:4e:a7:13:39:
                    6e:68:79:fb:9b:f7:4d:75:02:a8:93:f5:d5:0c:18:
                    06:e2:24:c0:dd:28:cb:8b:7c:7e:29:7e:04:ef:71:
                    21:16:b8:7c:ff:62:58:0e:d9:39:f9:10:91:78:49:
                    64:cf:df:75:b2:9a:0d:48:88:0a:c2:bb:af:0e:f2:
                    5a:23:f8:65:79:83:2a:81:43:76:39:86:a5:33:36:
                    fe:64:ce:95:92:1a:c8:8c:09:ca:d8:9d:d3:d0:89:
                    af:7b:ce:a0:32:52:01:96:9b:ef:89:3c:d1:e0:38:
                    e5:6f:11:0c:06:50:5d:38:28:77:5a:d1:4a:02:87:
                    2c:76:ad:16:23:1a:52:8d:18:f0:81:a3:60:b0:1d:
                    a8:64:d3:87:28:0d:d5:de:37:43:99:98:47:f6:48:
                    ed:61:c2:72:cd:57:16:7b:05:66:3c:2f:c9:46:b7:
                    22:f6:94:18:03:71:ae:1d:8a:eb:0e:0a:f1:1a:47:
                    15:15:23:67:60:08:b8:d9:b4:e5:9c:67:7d:1e:fe:
                    f6:69:e7:a7:54:3b:cf:a0:fd:c0:9f:8b:64:88:2c:
                    78:5a:bf:03:00:5b:e3:c5:63:17:df:9e:9d:cd:e4:
                    5c:92:f1:fd:5a:c7:81:35:e9:90:2f:90:bb:dd:7d:
                    38:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:06:6E:C3:DB:B6:DE:8B:65:A7:1C:BC:23:34:9F:86:A5:7A:03:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/a0a9a3e4-40eb-3149-8391-7f5ea073f954.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/23f3c964-aab2-4965-9f55-d270cc840a73.crl

            X509v3 Authority Key Identifier:
                keyid:3B:43:D9:DB:E1:64:AD:7E:55:75:B1:27:1E:19:FF:64:55:A0:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f86e:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:26:f5:4f:89:b5:83:ab:3e:cf:9f:8e:a4:74:d5:1b:b3:8a:
         f0:a3:4c:cb:8a:09:a8:29:3b:9d:31:79:34:5b:a1:96:aa:16:
         42:56:69:14:c1:21:96:4d:52:99:cf:7d:fd:b3:9b:a7:c5:0a:
         b3:69:80:63:ed:9f:cc:85:da:71:b7:f9:58:96:16:d4:b3:93:
         c2:54:a4:dd:c1:35:b6:7e:2f:a7:8a:fc:c0:14:4c:aa:ce:94:
         36:f8:5b:b7:fa:63:80:23:77:29:10:d3:74:82:34:e6:e1:c2:
         50:df:b6:42:45:02:46:24:8b:d5:45:22:ae:34:0e:60:12:08:
         06:14:1f:ad:18:ec:be:84:2b:c7:65:b0:eb:34:d0:0f:2a:4e:
         b7:3b:69:35:08:7d:80:c1:0a:66:02:18:6d:34:0e:b1:6b:af:
         c5:0f:d6:b8:8b:86:08:38:1a:66:cc:85:1c:08:7f:5c:a6:48:
         09:6c:d8:bf:12:52:42:e7:6d:68:d2:ca:b9:f1:cb:69:43:67:
         05:25:33:f3:2b:93:d5:37:f5:cf:62:17:da:4d:01:70:82:0e:
         6b:36:6c:0b:8e:eb:cf:9e:16:f0:4d:fb:30:5e:31:26:ca:0a:
         75:0b:a9:49:77:d9:9a:44:b4:a7:db:1d:67:25:20:10:dd:4f:
         8f:34:b3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----