Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/9701f71a-8f5e-36e5-9f06-063d44202784.roa
File:                     9701f71a-8f5e-36e5-9f06-063d44202784.roa (raw, json)
Hash identifier:          MFcoouwDMM4hgk60kH816icuJM+sDFdCC0uhlWl5dF8=
Subject key identifier:   41:73:69:76:2D:4C:AA:7E:13:27:15:00:91:0C:0B:A3:CB:7F:46:F2
Certificate issuer:       /CN=69ff55bc-4da3-4dc8-9a15-35e5786aabf2
Certificate serial:       010D0C9F432858461FE6EA8926F82E9798E09800
Authority key identifier: 88:E0:2E:A8:96:E6:D9:25:9C:05:46:AB:F8:5E:5E:67:69:7C:37:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/9701f71a-8f5e-36e5-9f06-063d44202784.roa
Signing time:             Thu 06 Jun 2024 20:48:20 +0000
ROA not before:           Thu 06 Jun 2024 20:48:20 +0000
ROA not after:            Wed 04 Sep 2024 20:48:20 +0000
asID:                     27485
IP address blocks:        2602:f8c5::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 21:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:1f:e6:ea:89:26:f8:2e:97:98:e0:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ff55bc-4da3-4dc8-9a15-35e5786aabf2
        Validity
            Not Before: Jun  6 20:48:20 2024 GMT
            Not After : Sep  4 20:48:20 2024 GMT
        Subject: CN=798c0800-4b6d-4b49-baa4-7cf73f54ecfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:59:20:16:17:c4:5a:da:2e:6d:cb:bd:63:38:
                    59:14:93:3f:60:56:01:2d:54:15:02:71:5f:eb:9b:
                    46:03:72:6b:3c:38:12:2b:5e:8c:98:53:fd:4d:44:
                    6a:33:f4:91:e9:c0:15:ad:14:80:cb:52:38:f4:5b:
                    c4:e1:5b:96:2f:7d:09:ea:7e:72:39:66:2a:e3:52:
                    d0:61:5a:40:98:cb:fe:cc:4e:d8:ca:f3:79:04:3f:
                    5f:76:bf:67:2c:17:c9:3c:9b:d4:51:75:b9:f2:f1:
                    4f:27:9c:c4:86:b6:38:78:8c:25:b3:1f:c6:37:66:
                    21:a6:a7:eb:7c:b0:7c:89:d2:33:dd:87:4c:15:fe:
                    c2:49:5f:dc:71:5e:2d:66:f7:f9:18:da:66:b9:0b:
                    a1:18:bf:43:9e:42:cd:19:2c:d2:3f:a3:da:40:37:
                    0c:b0:23:1f:9a:55:95:67:7c:2f:85:c1:1f:ac:25:
                    3b:fb:79:ad:b4:72:33:33:15:1e:b6:a4:df:af:2d:
                    d8:25:e8:70:6f:71:d7:7a:3d:df:40:b7:c4:88:91:
                    53:ea:67:ce:79:70:a1:46:36:e8:62:86:41:e0:46:
                    a9:f1:bd:b9:f2:00:2a:19:15:9c:35:cb:e5:f1:3a:
                    0e:da:aa:a2:6d:9b:99:dc:2b:f4:23:f0:35:98:2e:
                    35:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:73:69:76:2D:4C:AA:7E:13:27:15:00:91:0C:0B:A3:CB:7F:46:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/9701f71a-8f5e-36e5-9f06-063d44202784.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.crl

            X509v3 Authority Key Identifier:
                keyid:88:E0:2E:A8:96:E6:D9:25:9C:05:46:AB:F8:5E:5E:67:69:7C:37:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8c5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:f2:b0:c9:3c:9c:d8:82:98:bf:1e:66:ff:f1:a9:15:8b:a4:
         71:ed:63:d1:62:fe:0b:1e:b0:a7:f7:bf:84:ce:f2:d8:2e:ea:
         b3:c5:c5:b5:27:54:d0:ee:4f:a5:4a:1f:1c:4e:c9:e5:38:88:
         2c:20:25:60:8c:20:3c:6d:38:17:b3:39:bb:50:c3:56:ac:4b:
         5d:c5:cf:3d:95:c1:ba:f4:b7:b1:93:82:20:48:6b:bc:77:35:
         6d:ae:a4:fe:39:c1:6b:40:76:6b:ca:17:f5:51:cb:62:ff:fc:
         cc:aa:ce:4a:00:97:c5:15:ae:23:9d:0c:d5:a0:4d:cb:d6:5a:
         4e:af:22:0c:d1:7c:ab:dd:b8:a8:97:0c:93:81:cf:c1:1e:bb:
         1e:f9:69:1d:9d:1c:72:97:9f:43:bd:4e:11:a2:c8:63:73:25:
         87:c8:00:84:b1:0f:72:04:35:b3:b3:05:b9:e4:be:b5:2a:65:
         a7:b9:ff:fe:22:6b:ff:d5:2f:e5:c7:0c:6e:82:d4:69:18:4a:
         81:f0:bb:64:11:f7:20:69:a8:ac:e8:35:31:6a:29:ff:c9:16:
         97:17:a6:0f:9e:9b:87:35:41:df:2b:76:3c:af:01:37:1e:f8:
         f4:d4:0d:71:a1:ef:92:98:bb:0a:2c:b5:ac:96:3c:67:6c:36:
         4c:ed:bb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----