Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/d4d46617-9137-3fc8-91f9-f546ad943523.roa
File:                     d4d46617-9137-3fc8-91f9-f546ad943523.roa (raw, json)
Hash identifier:          xKclHQD0SnlB7cxCkXforyhd04wG3DabwdICE4qW2Lk=
Subject key identifier:   CB:A6:64:9E:2B:C5:4D:27:9E:B5:43:77:86:4E:0B:D3:9F:B3:73:01
Certificate issuer:       /CN=35241669-57c3-4f1d-8e12-d32455951379
Certificate serial:       010D0C9F4328584702857DFD570FA9E32551A000
Authority key identifier: 8B:44:6B:AC:A8:C8:70:20:1E:9F:69:37:9E:9B:EE:31:2B:77:B9:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/d4d46617-9137-3fc8-91f9-f546ad943523.roa
Signing time:             Tue 27 Aug 2024 01:00:31 +0000
ROA not before:           Tue 27 Aug 2024 01:00:31 +0000
ROA not after:            Mon 25 Nov 2024 02:00:31 +0000
asID:                     62880
IP address blocks:        2602:f8bb::/40 maxlen: 40

Validation:               Failed, certificate revoked on Fri 30 Aug 2024 11:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:02:85:7d:fd:57:0f:a9:e3:25:51:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35241669-57c3-4f1d-8e12-d32455951379
        Validity
            Not Before: Aug 27 01:00:31 2024 GMT
            Not After : Nov 25 02:00:31 2024 GMT
        Subject: CN=c34203ad-9c19-46f9-a27b-96649e89f798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6e:97:74:02:68:92:c4:0e:d5:13:9a:33:c7:
                    65:1b:4e:e0:bf:9e:71:15:ea:be:b5:e4:c1:6d:62:
                    d7:d5:b9:59:5f:52:84:72:27:23:c5:0b:e9:c6:7e:
                    27:6a:54:7c:14:16:06:b3:18:60:c1:49:c0:c8:e6:
                    e8:69:fc:5a:0e:4c:7b:b1:03:a0:46:e9:72:fe:b2:
                    4d:7b:35:20:f9:18:81:3e:83:19:21:bb:1f:ab:41:
                    1d:e7:8c:6c:97:07:7d:dd:7c:8a:2a:f9:5d:b7:f6:
                    55:49:40:53:23:49:40:87:ab:ad:04:cb:1a:c2:0a:
                    bb:9b:85:04:6e:dc:57:95:54:4d:19:3e:7c:a3:0d:
                    31:72:bd:d0:51:d2:1b:ec:ea:36:b2:6c:ac:2a:98:
                    3c:ef:76:44:12:8f:9b:0d:e5:90:4a:eb:67:bf:78:
                    3f:61:32:d9:48:c9:91:79:7c:17:ff:c5:74:37:ff:
                    61:e6:e7:fb:7e:e2:e6:39:13:28:d5:09:00:cc:d6:
                    95:38:19:30:94:c3:26:bd:79:1d:ee:22:78:3e:8d:
                    f7:84:44:87:33:a4:86:38:78:f6:ae:44:ee:6d:46:
                    dd:34:61:7a:b4:c9:4a:1a:f9:93:db:b7:35:63:27:
                    0b:75:4c:22:94:31:a0:95:26:70:98:ca:ab:80:3e:
                    33:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A6:64:9E:2B:C5:4D:27:9E:B5:43:77:86:4E:0B:D3:9F:B3:73:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/d4d46617-9137-3fc8-91f9-f546ad943523.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.crl

            X509v3 Authority Key Identifier:
                keyid:8B:44:6B:AC:A8:C8:70:20:1E:9F:69:37:9E:9B:EE:31:2B:77:B9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8bb::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:8e:59:34:2b:4e:fd:82:ec:c0:84:da:96:18:10:07:ba:f8:
         8c:86:51:66:f8:4a:73:9d:0b:44:24:da:da:60:96:58:b4:2c:
         94:5b:0b:ac:b9:d4:33:11:34:0b:a0:0c:83:03:22:15:0b:43:
         81:65:7c:a0:4f:ec:6a:d4:5c:38:f1:22:a0:3f:95:0c:49:e6:
         07:98:42:36:c5:30:80:02:c8:59:92:6d:3f:b2:d6:59:c3:b3:
         9e:16:66:9f:05:cd:04:55:cd:18:96:8a:f0:e5:c8:b7:10:6c:
         25:90:20:f4:b4:a6:45:44:00:7b:fa:7e:61:b4:5c:9a:16:82:
         da:4c:7f:8a:d8:8b:d5:c9:e5:e3:80:31:75:31:7d:9f:69:c5:
         81:0c:80:1b:33:b3:78:de:51:a2:47:24:6a:0f:d3:86:b2:98:
         50:d8:c1:64:92:92:58:6e:e2:b1:3f:30:39:84:81:ac:61:0b:
         82:79:07:dc:78:02:9b:7d:96:5b:30:2f:b1:93:7a:28:e2:7f:
         39:09:54:82:4f:11:b0:56:2b:64:72:cb:59:d7:b4:37:1d:5e:
         ae:61:e5:94:9d:63:0c:33:e5:9f:0d:ec:b5:dd:d6:7c:58:1a:
         00:10:7d:ac:f3:00:57:d4:c4:6a:67:1d:4c:a8:b6:1b:a3:53:
         47:8b:33:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----