Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/24cd4b56-1ad0-381f-aa50-3e6272a18cf7.roa
File:                     24cd4b56-1ad0-381f-aa50-3e6272a18cf7.roa (raw, json)
Hash identifier:          6/kc+BwVxifb0e6EFp/QfYtbw9eOVDYF5NUhZpR9urI=
Subject key identifier:   4C:2A:2E:4B:80:1E:30:1C:DB:A9:4D:B3:4F:EE:D2:B9:1B:A8:F7:07
Certificate issuer:       /CN=6918a60b-2f16-4db9-8d47-dddfafb5fdab
Certificate serial:       010D0C9F432858456988563D8621DFEACFE12D00
Authority key identifier: 97:C3:50:AE:C1:5A:94:36:96:C8:F6:F8:1B:79:01:9D:42:E2:4D:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/24cd4b56-1ad0-381f-aa50-3e6272a18cf7.roa
Signing time:             Tue 02 Apr 2024 13:00:37 +0000
ROA not before:           Tue 02 Apr 2024 13:00:37 +0000
ROA not after:            Mon 01 Jul 2024 13:00:37 +0000
asID:                     44658
IP address blocks:        2602:f9a6::/36 maxlen: 48

Validation:               Failed, certificate revoked on Thu 20 Jun 2024 17:55:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:88:56:3d:86:21:df:ea:cf:e1:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6918a60b-2f16-4db9-8d47-dddfafb5fdab
        Validity
            Not Before: Apr  2 13:00:37 2024 GMT
            Not After : Jul  1 13:00:37 2024 GMT
        Subject: CN=494b7ad9-46fd-4fba-b068-998a838fb711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:71:67:22:34:0e:51:ce:2c:ac:2d:cd:51:4e:
                    07:3d:1f:ac:7e:89:ca:c8:23:da:46:53:76:1e:d0:
                    f4:c0:ce:c2:f3:97:8a:48:59:2e:18:0c:bb:d1:7b:
                    19:21:70:7e:48:25:36:61:2e:81:fe:28:19:5f:76:
                    cd:d4:45:b3:20:53:17:98:af:75:28:ee:4e:a5:9c:
                    b1:6c:6a:03:26:d3:92:07:2b:08:55:a3:19:02:fd:
                    6e:0a:5a:93:49:3c:75:46:a2:98:19:4d:e1:bc:ad:
                    31:3b:4d:eb:7f:d3:58:48:f6:0a:a0:0a:12:24:6c:
                    a7:e2:6a:64:38:f2:03:41:2a:55:36:06:56:bc:02:
                    93:4c:58:6b:89:84:db:aa:f1:37:d2:ab:30:c4:67:
                    9d:38:6a:58:65:98:67:66:42:bd:56:7a:70:08:dd:
                    df:eb:63:74:1a:7a:45:87:5e:d8:ae:82:2b:b8:00:
                    5f:e4:c2:28:cb:84:49:19:14:0e:22:ab:81:1c:f1:
                    2d:d6:4c:b4:54:30:0e:59:f8:c9:8a:a0:32:0a:66:
                    fe:23:e0:35:3b:be:12:5f:8f:2b:ea:a5:38:00:6e:
                    24:b5:76:fb:d3:4d:8a:15:53:1f:4e:e5:85:85:95:
                    55:6d:f4:8f:26:38:98:7b:77:cf:ff:65:25:7d:2c:
                    38:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2A:2E:4B:80:1E:30:1C:DB:A9:4D:B3:4F:EE:D2:B9:1B:A8:F7:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/24cd4b56-1ad0-381f-aa50-3e6272a18cf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.crl

            X509v3 Authority Key Identifier:
                keyid:97:C3:50:AE:C1:5A:94:36:96:C8:F6:F8:1B:79:01:9D:42:E2:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:56:7f:7c:74:6e:20:17:d4:14:c9:4a:f1:37:c0:27:7b:cf:
         6d:6b:85:c7:b7:2a:9f:45:24:54:5b:e3:aa:15:ac:74:40:a5:
         ff:16:9e:74:c2:77:48:e9:26:de:26:43:d9:37:a6:0f:3c:b4:
         6b:2e:68:56:8e:85:89:c9:fb:41:fd:ab:11:ea:7b:a1:95:8b:
         08:fc:b8:8f:57:40:8c:3c:36:17:0a:de:19:06:13:0b:ab:af:
         0e:4c:a8:57:9e:57:8a:33:c0:ca:5a:b8:11:0a:a7:8b:a2:a1:
         83:24:bf:b8:51:53:95:35:de:fe:2c:be:fe:4f:a8:0b:34:23:
         bf:a4:f1:41:2c:1e:70:4c:cc:33:d5:90:dd:37:06:d2:da:2f:
         3e:69:0b:33:46:d4:05:a7:73:0c:a0:d3:34:98:74:a0:5d:bd:
         59:a2:17:0d:73:93:71:81:5f:f3:78:08:98:ff:8b:74:8c:c0:
         56:7d:2f:2f:48:42:b9:e4:01:e4:ec:53:17:8b:71:40:2f:dd:
         b3:89:8b:da:c3:e9:33:20:12:b7:45:fd:1f:95:da:37:ba:5a:
         d8:0b:12:45:4e:85:f5:31:13:2c:a8:26:c4:50:76:81:a6:bf:
         aa:dd:48:01:6a:fc:69:39:3b:13:b9:01:7a:88:e3:fc:5f:e8:
         7b:f3:8a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----