Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/f37e6a1d-1a0e-31fa-ba77-1eb70666e34b.roa
File:                     f37e6a1d-1a0e-31fa-ba77-1eb70666e34b.roa (raw, json)
Hash identifier:          i4r4Jj1w2G4det8pKMseqm//xCfzviXaapU5ZvyLnzk=
Subject key identifier:   AD:0C:FF:8B:7A:12:C8:17:0C:74:26:EE:9F:45:39:53:96:55:81:93
Certificate issuer:       /CN=b3f5323f-8bea-48c6-aa03-949255dd1997
Certificate serial:       010D0C9F43285846DFC967976BC1B9E2896ECD00
Authority key identifier: 53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/f37e6a1d-1a0e-31fa-ba77-1eb70666e34b.roa
Signing time:             Wed 14 Aug 2024 14:24:05 +0000
ROA not before:           Wed 14 Aug 2024 14:24:05 +0000
ROA not after:            Tue 12 Nov 2024 15:24:05 +0000
asID:                     46474
IP address blocks:        2602:819:e001::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 14 Aug 2024 20:40:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:df:c9:67:97:6b:c1:b9:e2:89:6e:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3f5323f-8bea-48c6-aa03-949255dd1997
        Validity
            Not Before: Aug 14 14:24:05 2024 GMT
            Not After : Nov 12 15:24:05 2024 GMT
        Subject: CN=62b4244b-fec1-4e04-bbc7-ccb8868f966a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c7:1c:83:b8:c6:1b:d8:0f:77:51:34:64:1b:
                    ca:58:1e:07:44:77:12:12:a9:14:99:7c:13:14:0c:
                    25:c4:bd:7c:4d:eb:d6:34:ea:10:11:3c:51:2d:7d:
                    03:cd:22:fb:47:61:72:a4:f4:37:01:ec:d2:61:19:
                    36:b7:19:d5:85:8b:c6:3f:d5:f4:8c:50:fd:0f:c9:
                    1e:6d:b0:fb:57:29:0c:32:e6:52:68:8b:d2:5b:0a:
                    bf:44:50:9a:02:fc:e4:d4:30:6b:69:cb:7a:83:ea:
                    c6:c3:c5:3c:a2:80:0b:ea:bb:55:ec:7f:3a:f2:e8:
                    44:01:18:ef:e7:92:f5:8f:23:1b:37:b7:33:c0:64:
                    c7:30:3c:06:b8:61:41:49:ab:62:4a:07:e8:d2:df:
                    38:61:a1:91:9e:3d:99:92:b7:d5:da:1c:bb:c5:09:
                    3c:de:b6:b7:d3:65:13:c2:05:b2:df:2a:39:4b:70:
                    ef:43:9c:16:0e:99:60:8e:f0:ff:ab:3c:93:ce:e2:
                    34:41:c8:fe:bc:e6:2e:d2:50:e4:2c:10:e9:fc:6d:
                    b5:07:2b:e1:37:2f:ce:47:cf:75:93:6e:3a:90:3c:
                    da:5c:e4:de:fd:a8:1c:5a:45:b7:11:9d:8b:71:59:
                    78:ea:2c:4d:2f:3f:f0:e2:66:af:97:43:08:c8:90:
                    68:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0C:FF:8B:7A:12:C8:17:0C:74:26:EE:9F:45:39:53:96:55:81:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/f37e6a1d-1a0e-31fa-ba77-1eb70666e34b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl

            X509v3 Authority Key Identifier:
                keyid:53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:819:e001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:ab:5b:ce:e4:c2:ae:fb:7e:a4:e7:83:19:16:8b:99:69:8e:
         91:28:ab:67:fa:3d:0e:5a:0d:c9:d3:13:82:63:2a:84:f0:85:
         96:aa:2e:62:91:eb:0c:1c:22:52:ce:a2:b6:e8:e4:ee:3d:8c:
         f1:32:78:90:c4:d8:27:ce:eb:29:8c:7c:ba:c6:c0:62:b2:cf:
         d8:e1:cb:75:66:9a:c5:4e:ba:3e:4f:7b:4d:cd:d6:1d:43:f3:
         26:89:5e:af:4b:fb:c7:27:c2:8d:f5:dc:83:9a:99:8e:e9:7c:
         cf:a1:d8:87:37:2a:b3:79:ff:f8:f6:39:08:1e:32:aa:8d:be:
         41:8e:1b:34:a2:80:43:f8:2e:20:b3:4c:b1:12:58:7c:4d:78:
         f8:89:a1:0c:ef:a1:4b:38:ad:9b:56:f3:6d:63:95:2e:b8:c4:
         f0:46:c2:52:e7:08:cb:04:fb:40:67:b7:53:4c:72:3a:d2:e2:
         4c:1c:7a:85:f9:ac:21:9f:c5:f5:a2:ea:5c:74:56:5b:27:8c:
         1b:05:d8:a5:65:10:7e:30:91:48:fe:8d:8d:90:59:0d:56:00:
         3f:d8:e3:6d:c3:f7:83:e7:68:0f:03:b3:e0:18:1d:49:be:fd:
         de:92:0b:ba:f2:30:b2:75:ec:07:79:e5:d8:76:33:6b:53:c5:
         66:21:67:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----