Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/a70da5ad-a91f-3f7b-86ba-e5246500b810.roa
File:                     a70da5ad-a91f-3f7b-86ba-e5246500b810.roa (raw, json)
Hash identifier:          BVHUcjuW8Cm/L38awil32dRVa/ZudAm0lMf3y4KuLg8=
Subject key identifier:   2F:0A:83:49:8A:E9:08:89:AB:83:16:57:D6:E1:55:94:CA:6A:8A:4F
Certificate issuer:       /CN=f25c48f2-c7df-4c6b-b214-2e741959995d
Certificate serial:       010D0C9F4328584643D8DB484280BD9265546E40
Authority key identifier: FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/a70da5ad-a91f-3f7b-86ba-e5246500b810.roa
Signing time:             Wed 19 Jun 2024 17:49:07 +0000
ROA not before:           Wed 19 Jun 2024 17:49:07 +0000
ROA not after:            Tue 17 Sep 2024 17:49:07 +0000
asID:                     398427
IP address blocks:        2602:fd35:0:1::/64 maxlen: 64

Validation:               Failed, certificate revoked on Mon 01 Jul 2024 20:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:43:d8:db:48:42:80:bd:92:65:54:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25c48f2-c7df-4c6b-b214-2e741959995d
        Validity
            Not Before: Jun 19 17:49:07 2024 GMT
            Not After : Sep 17 17:49:07 2024 GMT
        Subject: CN=328ac505-acd0-4241-80d8-76877dd915dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5b:0c:2d:5d:91:d1:5f:0a:99:e6:d2:3a:4c:
                    1e:ff:d1:8f:63:76:8d:dd:8c:8a:eb:92:b0:8f:39:
                    31:f4:86:a3:8f:51:70:d8:86:56:eb:74:7b:40:70:
                    ea:e1:e1:6e:1e:d1:2a:9c:62:e4:c0:a8:1c:11:7f:
                    a1:b7:01:99:db:84:4c:60:9e:ec:fc:0a:2c:67:41:
                    ea:6a:91:e6:e0:16:04:a1:1d:7e:40:06:11:bf:62:
                    76:6a:ec:77:d1:1b:1d:cb:d9:76:aa:e0:ee:a2:bd:
                    4a:04:a6:e1:f8:89:ec:95:e4:b8:1b:75:ff:92:57:
                    15:39:96:38:80:bb:2a:53:98:d1:00:7e:24:74:51:
                    b8:ad:54:25:3c:0e:1d:25:bb:67:b6:a8:fa:f0:7a:
                    4a:4a:f8:28:e1:72:95:46:ce:2f:a9:55:9c:b4:51:
                    e9:53:d8:56:bd:c8:46:59:ba:66:56:f1:51:6e:0b:
                    be:f3:e9:2f:27:a6:73:ae:7d:77:1e:e0:65:fb:ed:
                    5e:79:6d:bb:df:45:0d:e3:0a:89:01:9f:64:56:fa:
                    4f:76:6a:97:42:6e:bb:f2:da:7d:56:bd:0b:79:66:
                    ae:5b:bc:6a:98:3a:24:74:36:89:f1:91:c8:c7:c7:
                    e8:2a:44:bb:94:d5:1f:48:23:bf:f8:59:d9:5e:d6:
                    05:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0A:83:49:8A:E9:08:89:AB:83:16:57:D6:E1:55:94:CA:6A:8A:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/a70da5ad-a91f-3f7b-86ba-e5246500b810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl

            X509v3 Authority Key Identifier:
                keyid:FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd35:0:1::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:80:e8:64:67:91:00:e8:89:1c:95:4f:8a:7c:ea:a4:2f:57:
         f2:22:1a:03:5c:c5:e0:15:bc:f4:58:af:e9:b2:a1:35:28:34:
         1f:63:8e:cc:bc:32:c1:5a:dd:f5:41:c4:7a:e6:6a:2f:5e:fc:
         5a:80:c6:af:7b:a7:67:30:1e:ef:1c:9c:f5:f8:d2:42:9a:7a:
         5b:23:56:aa:8c:b4:8e:da:3d:c2:fe:fc:e3:f8:04:b8:eb:6e:
         1f:c2:93:e6:85:4b:25:51:59:6a:c5:1a:be:bb:ce:5a:f3:b8:
         55:9f:7e:7c:c1:75:11:0c:d7:46:a2:d9:24:25:81:e4:78:58:
         de:0f:83:f7:31:45:ba:2d:8e:7b:04:92:fa:30:ef:7f:b2:c2:
         84:5e:9c:de:9f:0d:1b:66:06:a7:34:df:17:9d:41:22:99:e0:
         28:06:71:60:f2:ca:20:94:82:76:bd:03:7a:20:b4:10:bf:36:
         94:3c:7c:a1:c8:75:d1:99:93:1b:31:d4:f5:d1:45:a3:a4:46:
         85:52:87:73:9f:37:c7:b9:65:72:64:d2:7e:e7:e4:85:27:e8:
         a0:d1:06:e1:f8:dc:e6:8a:00:0b:0e:96:eb:c5:1b:c2:93:48:
         0e:aa:6e:e9:9b:81:a8:dd:4a:b5:62:5b:4e:45:0c:4c:ca:89:
         ba:f4:8e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----