Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/344fc972-b357-3f83-9594-f368a2a607e3.roa
File:                     344fc972-b357-3f83-9594-f368a2a607e3.roa (raw, json)
Hash identifier:          ybD+tSyTnjubCiIJS8hSlSoS1zUO74CD+BJY7kZiCuE=
Subject key identifier:   95:91:CA:D8:D9:69:CE:8D:CB:2D:BD:9B:5A:80:4F:46:26:33:56:19
Certificate issuer:       /CN=492092dd-7457-4265-80ee-c447496a414c
Certificate serial:       010D0C9F432858432909FBC32D9DAD0BB26C6180
Authority key identifier: E7:69:F7:DB:81:66:7D:9D:CB:93:E9:EC:D1:71:7D:EB:3A:C5:0C:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/344fc972-b357-3f83-9594-f368a2a607e3.roa
Signing time:             Sat 09 Sep 2023 01:00:22 +0000
ROA not before:           Sat 09 Sep 2023 01:00:22 +0000
ROA not after:            Fri 08 Dec 2023 02:00:22 +0000
asID:                     1003
IP address blocks:        2602:fc26:6::/48 maxlen: 48
                          2602:fc26:7::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:29:09:fb:c3:2d:9d:ad:0b:b2:6c:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=492092dd-7457-4265-80ee-c447496a414c
        Validity
            Not Before: Sep  9 01:00:22 2023 GMT
            Not After : Dec  8 02:00:22 2023 GMT
        Subject: CN=f8995cd0-fb00-49da-874b-b5dbb43fecbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:67:0c:17:6a:6c:f1:d1:2c:10:67:91:23:b6:
                    f8:a4:b6:0d:82:ff:22:fc:52:e7:6f:01:62:99:74:
                    dc:37:1c:b0:59:ae:b2:36:03:cb:a3:b5:0a:bf:da:
                    e9:e7:1b:f9:2b:e1:c6:12:05:e0:cf:20:00:da:65:
                    a2:bd:0e:c2:c9:ca:5c:27:48:d5:c2:d9:40:50:5b:
                    91:5e:19:bb:f7:de:a8:a6:a9:90:d3:ee:5a:1d:8f:
                    aa:3b:58:68:0c:5e:3b:a5:5a:e6:86:39:bb:18:05:
                    0a:fe:bb:a0:ad:94:19:11:2c:f2:77:a9:62:49:e7:
                    51:2a:d5:32:81:48:dc:71:5b:43:04:d2:68:6b:29:
                    42:8a:98:fb:8f:ca:0e:64:2b:15:46:76:28:cb:95:
                    ff:2f:7c:08:68:1e:b4:e3:87:5f:e5:63:65:ee:26:
                    e7:79:ee:e4:2a:fc:6e:af:f9:12:84:09:4a:bf:01:
                    d6:15:0a:95:b3:da:59:97:9a:76:8a:69:61:32:73:
                    01:39:94:1a:2a:4a:25:76:fd:fb:60:34:af:d9:5e:
                    ae:e8:6f:6d:a3:f1:e2:a9:b4:43:46:6b:fe:c0:ab:
                    35:4a:a4:94:ac:dd:1a:43:20:73:a1:44:47:27:34:
                    0d:14:90:d9:ed:8e:3a:4c:2f:e0:02:8c:82:7c:ec:
                    a1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:91:CA:D8:D9:69:CE:8D:CB:2D:BD:9B:5A:80:4F:46:26:33:56:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/344fc972-b357-3f83-9594-f368a2a607e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/492092dd-7457-4265-80ee-c447496a414c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:69:F7:DB:81:66:7D:9D:CB:93:E9:EC:D1:71:7D:EB:3A:C5:0C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc26:6::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:06:f1:ac:ba:66:82:61:a6:47:b3:17:9c:ab:0e:a2:2e:97:
         76:d1:23:c8:57:b6:4c:a2:20:01:02:d9:12:46:90:0d:90:7c:
         fa:5d:d7:dc:ce:9f:8a:48:e4:87:19:0f:cf:57:94:2e:58:d1:
         7b:da:3b:21:61:0c:31:30:d6:b8:33:e5:5d:1a:08:b1:29:a2:
         84:b8:8f:c8:78:a2:30:a3:a8:ec:a7:b9:b5:d8:6c:2e:c1:cd:
         39:d8:11:0b:fb:fe:9a:73:0e:70:31:2c:26:4b:a0:99:2e:e7:
         4b:f3:9e:3a:06:5a:4b:fb:b3:73:a7:6c:d5:fe:d7:4b:ba:30:
         35:e8:86:63:1a:4d:01:ab:2f:47:89:e4:2c:1a:46:c5:9c:34:
         d8:4c:30:d5:05:a0:93:4c:c8:31:f1:8c:9d:79:a6:92:70:b8:
         23:96:5f:21:9d:09:ac:a3:b0:cf:b0:86:af:70:d8:ee:78:ba:
         1f:15:9d:26:eb:77:65:07:ad:a9:a2:7a:72:1b:5d:82:95:08:
         95:96:2d:28:61:94:10:0f:78:0a:e7:ac:f2:34:f4:ab:d4:30:
         1e:cb:93:bf:83:c4:d8:7d:4f:a6:dc:a5:17:61:ea:90:b8:7e:
         9c:86:19:f5:4a:32:71:f6:8e:b4:d9:9f:8e:0e:b5:2c:eb:49:
         eb:b2:a9:db
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEMpCfvDLZ2tC7JsYYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDkyMDkyZGQtNzQ1Ny00MjY1LTgwZWUtYzQ0NzQ5NmE0
MTRjMB4XDTIzMDkwOTAxMDAyMloXDTIzMTIwODAyMDAyMlowLzEtMCsGA1UEAxMk
Zjg5OTVjZDAtZmIwMC00OWRhLTg3NGItYjVkYmI0M2ZlY2JkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52cMF2ps8dEsEGeRI7b4pLYNgv8i/FLnbwFi
mXTcNxywWa6yNgPLo7UKv9rp5xv5K+HGEgXgzyAA2mWivQ7CycpcJ0jVwtlAUFuR
Xhm7996opqmQ0+5aHY+qO1hoDF47pVrmhjm7GAUK/rugrZQZESzyd6liSedRKtUy
gUjccVtDBNJoaylCipj7j8oOZCsVRnYoy5X/L3wIaB6044df5WNl7ibnee7kKvxu
r/kShAlKvwHWFQqVs9pZl5p2imlhMnMBOZQaKkoldv37YDSv2V6u6G9to/HiqbRD
Rmv+wKs1SqSUrN0aQyBzoURHJzQNFJDZ7Y46TC/gAoyCfOyhjwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJWRytjZac6Nyy29m1qAT0YmM1YZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80OTIw
OTJkZC03NDU3LTQyNjUtODBlZS1jNDQ3NDk2YTQxNGMvMzQ0ZmM5NzItYjM1Ny0z
ZjgzLTk1OTQtZjM2OGEyYTYwN2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDkyMDkyZGQtNzQ1Ny00MjY1LTgw
ZWUtYzQ0NzQ5NmE0MTRjLzQ5MjA5MmRkLTc0NTctNDI2NS04MGVlLWM0NDc0OTZh
NDE0Yy5jcmwwHwYDVR0jBBgwFoAU52n324FmfZ3Lk+ns0XF96zrFDHAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80OTIwOTJkZC03NDU3LTQyNjUtODBlZS1jNDQ3
NDk2YTQxNGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgL8JgAG
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJEG8ay6ZoJhpkezF5yrDqIul3bRI8hXtkyiIAEC2RJGkA2QfPpd
19zOn4pI5IcZD89XlC5Y0XvaOyFhDDEw1rgz5V0aCLEpooS4j8h4ojCjqOynubXY
bC7BzTnYEQv7/ppzDnAxLCZLoJku50vznjoGWkv7s3OnbNX+10u6MDXohmMaTQGr
L0eJ5CwaRsWcNNhMMNUFoJNMyDHxjJ15ppJwuCOWXyGdCayjsM+whq9w2O54uh8V
nSbrd2UHramienIbXYKVCJWWLShhlBAPeArnrPI09KvUMB7Lk7+DxNh9T6bcpRdh
6pC4fpyGGfVKMnH2jrTZn44OtSzrSeuyqds=
-----END CERTIFICATE-----