Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5/8ffb3044-d1dd-353a-b7a8-dc97b90cd6b1.roa
File:                     8ffb3044-d1dd-353a-b7a8-dc97b90cd6b1.roa (raw, json)
Hash identifier:          gT8/o3NKkJrokX50SN8vbcXaF7nO/m5NKQkULoCXKjM=
Subject key identifier:   80:1E:55:1D:91:ED:D2:7F:19:8B:F0:50:1E:84:98:BE:DD:03:37:9C
Certificate issuer:       /CN=76577e62-26cf-4652-b145-46ee5148cca5
Certificate serial:       010D0C9F432858464665C8747795E7A183640C80
Authority key identifier: F7:77:2C:6D:C1:CD:10:63:7C:FC:AA:BA:7E:96:CE:98:E8:71:0F:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5/8ffb3044-d1dd-353a-b7a8-dc97b90cd6b1.roa
Signing time:             Thu 20 Jun 2024 15:44:41 +0000
ROA not before:           Thu 20 Jun 2024 15:44:41 +0000
ROA not after:            Wed 18 Sep 2024 15:44:41 +0000
asID:                     395281
IP address blocks:        2602:f8cf::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 20 Jun 2024 18:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:46:65:c8:74:77:95:e7:a1:83:64:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76577e62-26cf-4652-b145-46ee5148cca5
        Validity
            Not Before: Jun 20 15:44:41 2024 GMT
            Not After : Sep 18 15:44:41 2024 GMT
        Subject: CN=149010ec-0149-48f7-a1f6-8b91b445b174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:73:50:4e:16:34:dd:cb:e6:28:bb:5d:9e:b1:
                    cf:e4:5e:ac:dc:88:68:66:66:96:23:80:fc:be:89:
                    5b:d5:44:bd:c3:14:1a:51:50:25:e0:eb:76:ff:a9:
                    c8:8d:dc:51:08:80:26:2f:61:09:92:b9:5e:e8:e4:
                    25:14:c4:54:ff:5c:56:b4:87:e3:d0:08:26:b8:a0:
                    a0:29:12:7a:bb:a5:ae:75:31:62:81:3e:e4:43:c5:
                    54:c0:d8:49:7a:cc:72:e0:02:5d:73:1d:cb:ac:a3:
                    0b:31:4b:24:29:5c:6f:41:e2:36:4f:e4:ec:b0:17:
                    d0:45:6c:e4:63:d7:89:38:25:eb:b5:cd:83:01:f7:
                    7f:26:06:1b:63:b5:bb:1e:1d:68:3f:2e:02:ac:0e:
                    71:49:1a:12:34:0e:d2:da:58:b6:e6:4f:fd:49:ba:
                    18:89:a7:cd:91:92:77:03:c7:3e:24:cd:8f:cf:fc:
                    17:d2:05:6e:fb:44:df:f1:02:75:8c:02:0b:68:fd:
                    e7:b6:73:06:f7:b3:35:f2:e3:f5:a7:14:08:f3:c6:
                    dc:d4:42:d9:bf:2c:ff:39:ab:25:48:db:e5:95:42:
                    f0:f3:b4:a7:1e:f1:24:3e:51:19:8c:e2:81:77:4f:
                    38:4f:bb:70:15:4d:8a:d5:8b:82:a4:e0:58:48:48:
                    95:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1E:55:1D:91:ED:D2:7F:19:8B:F0:50:1E:84:98:BE:DD:03:37:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5/8ffb3044-d1dd-353a-b7a8-dc97b90cd6b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5/76577e62-26cf-4652-b145-46ee5148cca5.crl

            X509v3 Authority Key Identifier:
                keyid:F7:77:2C:6D:C1:CD:10:63:7C:FC:AA:BA:7E:96:CE:98:E8:71:0F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8cf::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:da:bd:f7:af:0e:27:67:4a:f4:53:bf:de:d0:2d:21:5d:f6:
         c2:98:25:5c:ad:bd:a8:06:ae:02:61:90:d8:3b:a4:b4:d4:19:
         b3:ed:95:9b:cd:2e:09:2a:ca:22:17:dd:75:6c:2c:76:b7:50:
         1b:92:bd:3d:d7:22:5a:22:78:4a:03:2b:6a:36:1c:98:d0:97:
         8b:b1:32:82:37:fa:a7:ee:36:2a:aa:92:47:a5:9f:1a:32:23:
         16:85:d1:2f:53:82:61:ce:15:57:11:f9:30:61:0f:49:97:55:
         8d:87:59:57:d7:22:78:0e:45:09:25:bb:f8:08:89:a1:7c:f2:
         ee:54:09:cf:c0:cf:1c:a2:15:3f:a2:0c:41:8b:6c:60:c8:10:
         de:e1:40:8e:2b:2c:8f:d2:25:17:9d:3c:82:9b:33:54:9a:07:
         b1:20:53:34:68:09:e1:16:5e:fb:2b:78:64:5d:fb:7f:28:00:
         b1:e5:09:ef:85:39:ff:2e:93:65:42:8e:9d:96:b8:99:27:fc:
         01:9e:a7:3c:9c:cf:18:ff:f5:3e:fb:c5:1e:73:df:84:36:3d:
         4d:8c:75:7a:f5:ff:0a:2c:9f:9a:2b:35:4f:84:10:cc:c9:87:
         e5:dc:77:96:3f:31:cb:cd:fd:d0:6d:5d:b5:48:e7:56:ad:4c:
         69:58:3f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----