Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/c8b63bff-b4d1-3453-8c02-d255e764ce8a.roa
File:                     c8b63bff-b4d1-3453-8c02-d255e764ce8a.roa (raw, json)
Hash identifier:          Ms+nsLYiCN476b+etdU+Tt5dXYh9+fZ61OkF1ydCbTM=
Subject key identifier:   32:91:13:62:28:65:94:58:BB:1F:F4:D8:D2:9D:A5:C3:72:DD:33:CF
Certificate issuer:       /CN=0675db59-b7a3-47ed-ae85-edcfb590155e
Certificate serial:       010D0C9F43285845E31EEB2C7A2C13CB5CF5A9E0
Authority key identifier: D6:DD:50:92:34:CF:D1:3B:C7:4B:47:40:06:68:71:C3:2A:DE:A6:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/c8b63bff-b4d1-3453-8c02-d255e764ce8a.roa
Signing time:             Thu 16 May 2024 02:16:52 +0000
ROA not before:           Thu 16 May 2024 02:16:52 +0000
ROA not after:            Wed 14 Aug 2024 02:16:52 +0000
asID:                     399688
IP address blocks:        2602:fc5d::/32 maxlen: 64

Validation:               Failed, certificate revoked on Thu 16 May 2024 02:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e3:1e:eb:2c:7a:2c:13:cb:5c:f5:a9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0675db59-b7a3-47ed-ae85-edcfb590155e
        Validity
            Not Before: May 16 02:16:52 2024 GMT
            Not After : Aug 14 02:16:52 2024 GMT
        Subject: CN=abe54fc4-300a-4946-a602-1f89c2d52616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:84:99:1b:ee:e1:3b:a9:55:b7:64:c7:6a:80:
                    d5:98:11:4e:18:3e:2e:26:53:b1:51:61:5c:ad:1b:
                    78:6a:8f:98:03:da:5d:54:1f:2d:62:08:de:a8:46:
                    c9:34:d0:9c:4e:85:55:a9:be:44:f6:74:f9:46:61:
                    02:58:2e:28:12:e2:e4:d8:1e:c2:ca:b1:11:ec:c8:
                    cf:d3:96:3f:75:cb:53:3c:30:77:10:9f:35:c6:1d:
                    23:19:f9:33:64:2e:51:d3:5d:78:1e:18:16:39:36:
                    af:e2:03:5d:68:54:c9:09:d6:07:e0:18:d4:a1:b0:
                    f1:0d:8e:06:29:2c:77:c4:fe:e6:de:eb:63:50:24:
                    d9:45:c3:46:14:89:9f:5b:91:fd:c9:d5:29:55:3e:
                    60:00:8d:f9:85:9e:10:9b:84:86:c5:21:14:68:a7:
                    8f:f0:0c:ac:66:5d:88:e6:6b:60:2c:1a:7c:9b:89:
                    e3:87:74:a5:c7:b9:42:0a:83:37:41:a8:17:5c:7d:
                    4b:43:5c:35:c1:13:9b:44:21:9a:12:03:1a:b8:d6:
                    63:88:24:ef:13:6f:99:7b:15:a8:82:37:6b:26:eb:
                    95:96:11:fb:50:05:50:a7:50:eb:5a:b1:aa:3a:b8:
                    a3:43:6b:94:eb:6d:ba:43:66:36:44:10:ac:d5:e2:
                    e2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:91:13:62:28:65:94:58:BB:1F:F4:D8:D2:9D:A5:C3:72:DD:33:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/c8b63bff-b4d1-3453-8c02-d255e764ce8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/0675db59-b7a3-47ed-ae85-edcfb590155e.crl

            X509v3 Authority Key Identifier:
                keyid:D6:DD:50:92:34:CF:D1:3B:C7:4B:47:40:06:68:71:C3:2A:DE:A6:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc5d::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:64:16:83:23:3a:f4:c2:a5:c2:dc:d8:1d:6d:46:91:43:8c:
         20:50:92:f5:af:bb:ca:c1:41:07:dd:14:ec:fe:aa:ba:bf:ec:
         d7:86:d5:80:b3:b4:fd:80:94:89:46:79:54:c6:74:d8:1f:fd:
         16:9b:af:ab:1c:df:a4:d5:56:85:05:d9:a2:48:4a:59:38:10:
         10:a2:5e:f7:b4:c4:0e:bf:43:e7:47:d5:d4:60:76:3d:90:2d:
         54:01:f6:7b:a4:1d:e6:f8:d0:0a:38:7b:85:61:34:f0:e8:09:
         d0:c2:99:dc:5c:c6:5e:96:b7:73:f6:77:69:e2:e2:b4:32:eb:
         18:98:26:ad:46:cf:8f:57:87:fe:28:9c:b9:65:59:3c:a8:ce:
         d7:dc:6c:95:59:1c:89:09:db:4b:c3:24:e2:23:8a:78:ef:12:
         fd:25:aa:83:f1:c3:49:7a:d7:1e:fe:80:ad:f5:dd:88:d9:1a:
         b9:a6:86:fc:ed:64:c4:39:dd:56:c2:97:57:2a:24:1b:32:2b:
         c7:2c:57:dd:8b:b9:5c:6e:38:a6:97:18:d7:03:40:40:66:f7:
         65:e7:15:33:61:f7:08:35:28:e6:94:47:38:c7:e9:6c:cb:16:
         5b:3c:b2:1e:99:ce:aa:f0:98:ec:f3:29:d2:f4:0b:6c:6b:b1:
         de:64:de:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----