Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/eab54674-9fca-32db-927e-ffff8ae67221.roa
File:                     eab54674-9fca-32db-927e-ffff8ae67221.roa (raw, json)
Hash identifier:          a2A9HDCw4TuDMKyfkz6HGWBP5M8wPR3yUYqKZ8BfFtQ=
Subject key identifier:   B5:9B:C0:0E:17:90:CD:3C:7D:EE:1F:3D:95:28:8F:52:3C:AC:18:F7
Certificate issuer:       /CN=a683f70a-4d8a-489e-b03c-abca94cd7852
Certificate serial:       010D0C9F43285841A162B00BE5104E55B8BA04E0
Authority key identifier: B8:59:03:9E:D8:37:04:1C:D9:8D:1B:75:25:FF:EA:F2:58:28:49:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/eab54674-9fca-32db-927e-ffff8ae67221.roa
Signing time:             Wed 11 May 2022 17:48:07 +0000
ROA not before:           Wed 11 May 2022 17:48:07 +0000
ROA not after:            Tue 31 Dec 2030 05:00:00 +0000
asID:                     19969
IP address blocks:        2602:fe69:e06::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 10 May 2023 12:18:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:a1:62:b0:0b:e5:10:4e:55:b8:ba:04:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a683f70a-4d8a-489e-b03c-abca94cd7852
        Validity
            Not Before: May 11 17:48:07 2022 GMT
            Not After : Dec 31 05:00:00 2030 GMT
        Subject: CN=33f902b5-44eb-4c21-a4bf-c885dc4c86fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:73:19:19:50:09:75:30:7a:6f:12:9a:63:61:
                    c8:cc:fb:da:d0:a0:0c:37:95:4e:8b:ad:79:29:54:
                    08:b2:1f:71:d8:cd:a4:6e:a5:df:bd:b4:19:b9:96:
                    42:00:c9:a0:95:12:3f:68:e3:86:93:29:e5:4c:60:
                    f5:fa:f5:cc:71:0c:2f:f7:d0:43:c4:ae:06:3a:80:
                    1e:f8:4b:5c:36:22:45:8c:4a:32:4e:d3:a6:67:c1:
                    fe:79:a1:38:c1:07:52:f0:90:aa:88:1e:45:4a:22:
                    01:c1:66:18:22:2d:29:31:30:34:ab:bf:25:7f:04:
                    f1:c8:2c:04:3f:d8:7d:c8:8b:21:db:fa:88:4c:3c:
                    f4:14:37:0f:d9:83:e7:4f:20:9d:e8:17:58:50:c8:
                    15:aa:cf:86:5c:d8:c6:73:a8:55:f9:c1:40:d8:d5:
                    68:73:32:9d:bb:cc:62:e0:e3:ef:80:a3:f4:c9:4e:
                    67:bd:b3:a3:2f:59:b1:f8:7e:e9:a8:13:3f:b5:70:
                    ea:f4:b2:14:02:b6:29:77:1b:aa:98:2d:c9:71:9d:
                    a3:d5:53:d0:4b:a1:ce:5a:b4:24:4f:81:10:62:02:
                    41:27:09:42:9c:ea:8b:7f:28:fa:c8:e8:58:d4:38:
                    2b:b1:d5:56:92:8f:4d:05:f2:ec:0f:e9:43:93:15:
                    73:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9B:C0:0E:17:90:CD:3C:7D:EE:1F:3D:95:28:8F:52:3C:AC:18:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/eab54674-9fca-32db-927e-ffff8ae67221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.crl

            X509v3 Authority Key Identifier:
                keyid:B8:59:03:9E:D8:37:04:1C:D9:8D:1B:75:25:FF:EA:F2:58:28:49:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe69:e06::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:0f:79:21:f1:4b:78:5b:e6:29:59:24:a8:d8:b7:7e:b3:22:
         64:1f:12:de:06:75:a0:bb:b9:55:d1:b4:52:ed:c3:1b:dc:b5:
         d7:2d:6d:5a:cd:c0:59:46:bf:b0:4e:67:98:0c:4f:c6:da:0e:
         76:8c:11:b5:e6:ee:d3:99:5a:52:5b:93:3a:67:ea:6c:ed:42:
         42:20:63:9b:fe:92:f5:1e:77:65:e6:e2:43:b4:ea:26:3a:d5:
         d0:a1:1d:a6:0f:a9:4c:00:cd:fa:d3:d0:6d:ba:a3:8d:6e:8d:
         9c:af:82:a0:c1:fb:8c:b4:f7:8d:ff:d5:e4:4f:33:40:f8:40:
         02:dd:45:63:81:15:bb:ec:73:7a:65:14:30:f8:0a:01:a0:57:
         70:86:59:d5:74:1b:21:57:88:30:59:e2:12:bf:75:26:50:8a:
         17:b7:11:a4:eb:4f:0f:0e:63:1b:ea:06:97:f7:48:0e:14:12:
         48:2f:55:f4:17:90:fc:69:14:6e:0e:b0:46:a0:a0:4c:3e:a0:
         e7:47:b3:af:6d:65:6c:50:84:71:13:b3:19:bd:fd:59:50:47:
         96:15:24:3d:35:bb:0f:2f:93:97:97:d9:e5:69:4d:75:cf:c2:
         79:68:d9:61:51:50:de:cb:e3:32:2b:84:86:89:c1:14:e9:e3:
         15:31:75:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----