Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8753d24f-ff99-413d-8183-c80052947f59/e0b12ad5-ef22-3373-be68-c8270be61568.roa
File:                     e0b12ad5-ef22-3373-be68-c8270be61568.roa (raw, json)
Hash identifier:          R1XrID2UHXuxdnvhKjqiHPRzfttILGLXZBFGCx1kZk8=
Subject key identifier:   AA:38:16:CB:E9:35:8C:F5:D2:B6:C5:FF:FC:12:4C:D0:2A:F1:04:5A
Certificate issuer:       /CN=8753d24f-ff99-413d-8183-c80052947f59
Certificate serial:       010D0C9F4328584660982F6F096AAC45C343F980
Authority key identifier: 40:C9:4A:45:27:21:95:AA:3A:E5:B3:18:49:08:DB:44:D4:D0:2E:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8753d24f-ff99-413d-8183-c80052947f59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8753d24f-ff99-413d-8183-c80052947f59/e0b12ad5-ef22-3373-be68-c8270be61568.roa
Signing time:             Sun 30 Jun 2024 00:57:15 +0000
ROA not before:           Sun 30 Jun 2024 00:57:15 +0000
ROA not after:            Sat 28 Sep 2024 00:57:15 +0000
asID:                     62467
IP address blocks:        2602:f8d2:80::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jul 2024 02:09:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:60:98:2f:6f:09:6a:ac:45:c3:43:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8753d24f-ff99-413d-8183-c80052947f59
        Validity
            Not Before: Jun 30 00:57:15 2024 GMT
            Not After : Sep 28 00:57:15 2024 GMT
        Subject: CN=bfe09ef9-baa3-4aab-80ad-5fbdc98a484a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ad:b3:36:b4:98:b9:a0:99:52:ca:22:4a:57:
                    5d:d1:db:0b:c6:76:1f:6a:ac:03:01:27:87:11:df:
                    f4:20:d6:f7:8d:8d:6c:33:e0:a4:b3:c4:1e:c8:f6:
                    db:24:65:6f:b9:63:a3:72:3c:e4:2b:82:ea:97:fb:
                    10:14:d2:fd:b1:0f:a8:01:4a:35:5c:81:03:90:c6:
                    28:16:76:25:3e:62:d4:25:84:cb:d3:1c:91:45:ce:
                    98:6b:36:26:3e:85:83:c3:dd:30:9d:33:10:c3:3f:
                    21:54:c6:60:02:2a:19:07:32:39:12:e6:70:cb:0c:
                    3d:87:4b:e1:79:3c:e5:ce:27:9b:0f:a7:40:f7:e1:
                    f3:6e:67:15:f2:7e:df:5a:62:e4:49:95:3b:2a:22:
                    f9:5e:22:ff:59:45:c6:d7:0f:55:d5:9c:f4:ee:54:
                    d6:14:6a:a6:74:84:b3:d2:da:ef:07:85:1d:41:37:
                    77:49:83:ae:b3:9d:4e:de:c3:f2:c8:f9:08:57:78:
                    bf:eb:5d:4c:d9:e9:47:37:3b:a3:45:54:78:5a:36:
                    e6:f8:7d:3f:a7:cf:79:53:06:58:1d:b0:03:41:25:
                    31:76:78:93:3f:e4:a3:1d:fa:42:c0:a7:98:f5:6f:
                    a6:76:33:cb:3d:c7:f3:a1:ba:af:3d:95:59:43:98:
                    ba:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:38:16:CB:E9:35:8C:F5:D2:B6:C5:FF:FC:12:4C:D0:2A:F1:04:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8753d24f-ff99-413d-8183-c80052947f59/e0b12ad5-ef22-3373-be68-c8270be61568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8753d24f-ff99-413d-8183-c80052947f59/8753d24f-ff99-413d-8183-c80052947f59.crl

            X509v3 Authority Key Identifier:
                keyid:40:C9:4A:45:27:21:95:AA:3A:E5:B3:18:49:08:DB:44:D4:D0:2E:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8753d24f-ff99-413d-8183-c80052947f59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8d2:80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:a0:4d:52:cd:b9:23:1d:0d:f3:54:2e:88:af:3b:b8:4e:98:
         a1:56:c4:18:94:6f:dc:7d:36:d0:39:33:76:61:b6:d3:3c:f2:
         b8:c4:2b:63:0c:f1:67:dd:cd:f5:5f:a7:af:44:52:d3:2a:af:
         89:9f:f4:df:6d:64:1f:5a:22:c4:5c:f1:58:ae:c9:54:98:99:
         e4:e4:af:48:79:13:d7:0a:b7:b3:9a:43:57:c9:5e:dd:34:91:
         32:9a:0d:44:b7:7b:f6:51:04:5f:2c:4c:7c:6f:90:10:53:8c:
         7b:51:83:d8:11:b4:39:b0:ee:80:17:76:5e:24:8d:38:c4:5d:
         db:1b:b9:11:34:b6:8a:8a:27:18:db:ed:10:65:d9:01:9b:aa:
         10:4b:53:10:05:af:d3:89:33:f6:7c:e2:8f:fb:74:2c:16:d6:
         fb:6d:1d:dc:a0:23:2e:f3:d0:b0:5c:00:d6:ff:86:7b:6a:68:
         de:8b:19:28:5a:82:ba:1f:85:2f:e7:c1:85:8a:3b:50:7d:95:
         b2:0b:af:6b:24:9e:44:4e:7c:0e:db:13:24:84:83:40:f7:36:
         6d:64:b9:77:bf:67:09:27:ad:b9:61:58:8f:da:7b:ad:34:68:
         6b:3e:3c:09:d6:e0:07:4f:4c:99:a6:95:19:2d:56:3c:51:ed:
         86:49:14:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----