Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/da892998-83f4-3456-88e8-afbae630f0b4.roa
File:                     da892998-83f4-3456-88e8-afbae630f0b4.roa (raw, json)
Hash identifier:          KO+NW1BIn714lHdfcu6c7MAuJDeHzw9sfQhwEjbCpEo=
Subject key identifier:   4A:DA:82:06:50:06:65:FF:D9:66:B0:93:72:CF:77:C4:77:15:C7:E2
Certificate issuer:       /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9
Certificate serial:       010D0C9F43285846864A3847F7CCD6BF6B28E180
Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/da892998-83f4-3456-88e8-afbae630f0b4.roa
Signing time:             Sat 13 Jul 2024 13:00:33 +0000
ROA not before:           Sat 13 Jul 2024 13:00:33 +0000
ROA not after:            Fri 11 Oct 2024 13:00:33 +0000
asID:                     396073
IP address blocks:        2602:f9f4:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 18:54:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:86:4a:38:47:f7:cc:d6:bf:6b:28:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9
        Validity
            Not Before: Jul 13 13:00:33 2024 GMT
            Not After : Oct 11 13:00:33 2024 GMT
        Subject: CN=1d4a0a6b-49bc-44d1-975a-352baed54718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:38:95:1a:9e:25:0d:a8:55:1d:c4:1c:b0:f6:
                    a8:db:2d:38:a3:9a:e9:fd:04:2f:4c:8b:f8:fe:f0:
                    75:07:ef:72:0e:d6:a7:c7:07:65:d7:34:f4:a9:b1:
                    ce:e6:08:b0:e9:43:73:e5:13:db:68:91:42:79:b3:
                    bb:4f:72:0c:b6:ae:61:a8:bf:ac:81:1d:b2:ce:e8:
                    7f:14:a0:55:49:bd:79:5a:ba:05:04:59:8c:9b:2e:
                    1f:68:6b:a7:98:63:a3:94:31:8c:6c:47:38:cf:2d:
                    cd:67:82:18:48:15:b3:93:9c:c2:43:a5:3b:6b:8a:
                    3d:51:07:18:ed:4e:e7:45:0c:7d:a6:63:54:e7:b9:
                    4f:13:05:93:ff:3d:ab:9c:78:12:d4:a7:f1:52:88:
                    4c:fd:41:f9:1d:36:8e:2a:e3:5e:5a:e8:37:7a:68:
                    7e:31:25:88:18:72:8a:8e:4f:5a:da:e0:04:5d:28:
                    7b:02:99:4a:ec:b8:ee:78:d9:95:d1:4a:d7:e7:ae:
                    1d:d5:44:87:b5:ec:99:9c:7d:cc:a0:3e:b9:62:5d:
                    dd:69:b9:52:51:d0:15:2f:00:34:aa:d2:9e:cc:81:
                    bf:0d:fc:d3:17:fa:d8:f6:2f:39:2d:50:b1:9f:74:
                    7d:6e:e3:a6:16:65:24:1a:a9:e7:6c:31:42:3e:2c:
                    37:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DA:82:06:50:06:65:FF:D9:66:B0:93:72:CF:77:C4:77:15:C7:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/da892998-83f4-3456-88e8-afbae630f0b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl

            X509v3 Authority Key Identifier:
                keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f4:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:e6:41:0e:e6:1c:aa:6c:cf:bd:79:aa:5b:47:c8:95:e9:f3:
         a7:7e:d9:eb:87:4c:30:d9:7c:4f:46:9d:94:09:9e:8a:8d:0a:
         0a:97:0f:66:7a:dd:15:cb:c9:ee:69:e8:4c:98:98:93:47:f1:
         89:e5:cf:b7:d0:51:ac:d3:f3:eb:54:f8:7d:ac:af:b2:ff:7d:
         1d:49:d7:6f:41:d6:0e:70:a8:d6:af:e6:eb:d5:aa:e4:1e:eb:
         94:c7:ff:5b:da:06:5c:10:98:d6:42:af:88:ac:8a:3e:4c:be:
         2d:d9:98:29:96:3b:28:9f:1b:b6:74:ba:ff:b6:c5:a2:a4:07:
         09:f1:ff:3b:fe:96:db:89:04:a1:ed:08:c5:9d:f6:60:66:a1:
         31:4c:e3:3d:bc:49:f1:61:5d:e2:09:b1:78:1c:8b:7c:9a:f1:
         d3:37:ef:28:fc:46:73:b1:6d:30:3d:d8:10:11:06:55:32:1c:
         aa:93:af:8d:1b:0a:3e:22:78:d0:d0:5e:65:dd:c9:6a:96:5e:
         88:5a:9c:35:a3:a2:6d:d1:61:69:64:ff:7d:08:a3:86:38:5f:
         a0:ab:4f:7e:fa:49:28:98:d1:72:c9:72:b9:ae:16:77:cf:4f:
         69:db:43:bd:8d:be:81:0b:4b:6f:d4:11:73:09:e4:d9:a0:f3:
         25:b4:c6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----