Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/0d4b4817-8c77-36e7-8695-97dea18346e7.roa
File:                     0d4b4817-8c77-36e7-8695-97dea18346e7.roa (raw, json)
Hash identifier:          RiTqwcjPb4aSxyy9/aymOUydkQyaRiWHdzljOK+HNNA=
Subject key identifier:   73:CD:84:90:84:33:5F:7E:05:30:07:6A:ED:83:99:87:42:19:0C:0B
Certificate issuer:       /CN=747306d8-f469-4e78-a1fc-d958dfc4f31b
Certificate serial:       010D0C9F4328584114FBF68DF5F98B0240020180
Authority key identifier: 3A:6B:C4:F3:A8:7E:D4:46:1E:35:DC:C5:58:63:4A:AE:8A:B6:94:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/0d4b4817-8c77-36e7-8695-97dea18346e7.roa
Signing time:             Tue 14 Feb 2023 19:30:07 +0000
ROA not before:           Tue 14 Feb 2023 19:30:07 +0000
ROA not after:            Mon 19 May 2025 04:00:00 +0000
asID:                     199650
IP address blocks:        2602:2a3:200::/40 maxlen: 48

Validation:               Failed, certificate revoked on Sun 19 Mar 2023 12:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:14:fb:f6:8d:f5:f9:8b:02:40:02:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747306d8-f469-4e78-a1fc-d958dfc4f31b
        Validity
            Not Before: Feb 14 19:30:07 2023 GMT
            Not After : May 19 04:00:00 2025 GMT
        Subject: CN=d9b8c813-176c-4dd7-862b-dbb1888101ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:92:8b:49:00:05:3d:28:14:93:ac:40:4e:3f:
                    f3:2e:e5:8a:cc:4e:94:ad:ba:18:33:aa:2b:82:49:
                    a4:ba:55:a3:14:0d:a1:e5:38:59:bb:f8:39:63:64:
                    d9:ad:32:1f:ed:f4:3e:fa:42:0a:df:5f:fe:2c:65:
                    51:7b:42:7c:a8:66:1c:c6:d8:84:e7:4b:6d:a9:83:
                    7e:23:f8:2c:30:e5:f8:6c:87:58:0f:93:87:f8:dc:
                    72:19:5d:dd:fb:df:fe:a6:48:6f:c2:00:be:2c:cd:
                    23:cb:ff:f6:ad:95:de:7b:c6:5a:6e:e1:45:0d:10:
                    ea:40:46:57:fe:6c:d5:fc:ea:e1:8b:31:56:f2:95:
                    a4:8a:46:e0:52:d4:df:78:3b:c6:4d:86:9b:a4:1f:
                    0d:81:c2:66:3a:d1:50:50:c1:98:f8:8e:a3:02:eb:
                    bc:6c:14:89:63:f6:5c:6b:83:8e:91:b3:8d:a7:09:
                    c8:cd:b4:d0:b7:85:9d:73:35:7e:d8:f4:8a:a2:68:
                    9d:88:af:e1:ea:38:3e:ed:0b:0d:3c:4b:8c:01:22:
                    18:77:f1:7d:f0:2f:9a:95:7c:64:3a:cb:2d:7b:9e:
                    5b:fe:e0:7c:38:ea:27:85:6f:c3:ab:4a:65:f8:b3:
                    bb:a6:45:fc:4e:17:e5:e9:17:0a:5f:48:f1:49:83:
                    ab:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CD:84:90:84:33:5F:7E:05:30:07:6A:ED:83:99:87:42:19:0C:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/0d4b4817-8c77-36e7-8695-97dea18346e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/747306d8-f469-4e78-a1fc-d958dfc4f31b.crl

            X509v3 Authority Key Identifier:
                keyid:3A:6B:C4:F3:A8:7E:D4:46:1E:35:DC:C5:58:63:4A:AE:8A:B6:94:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:6e:ed:df:9a:0c:89:5e:02:ad:71:ab:69:cb:a9:d9:3f:46:
         1f:0f:19:aa:5b:37:86:fd:81:fc:5a:88:6f:e1:44:d3:ed:87:
         5b:46:02:6b:bc:3b:6a:1a:59:4d:77:c3:21:98:91:fa:6d:69:
         8e:f8:36:f9:b0:5a:63:49:ee:b9:9f:e7:98:af:91:cb:92:d0:
         b8:05:17:e6:73:8f:e2:af:81:47:f2:70:b6:e3:70:a6:5b:4e:
         6c:7e:48:49:06:ad:ad:8f:97:27:bb:cd:ee:cd:0b:f0:cb:60:
         bd:87:06:6a:9e:49:f2:c1:3f:78:32:6e:79:89:ec:0a:44:fd:
         ec:2e:07:88:4d:70:21:01:9a:87:82:bd:55:88:6a:57:3b:5b:
         de:ba:4f:8f:d5:f9:7c:bf:f9:58:85:99:12:41:eb:81:c2:4c:
         78:06:45:4b:bb:93:c5:7c:4a:58:a1:3f:7d:34:73:03:1f:bb:
         e0:ec:be:65:70:64:39:c4:8d:e6:10:a3:e9:a5:0c:bf:0d:56:
         04:2b:b1:bd:99:aa:e5:89:43:60:e8:ef:fc:2b:68:bf:c2:1a:
         a7:7f:f8:01:48:b5:6b:87:2b:ce:93:63:1e:0b:aa:ab:e3:cb:
         9e:ea:3a:1f:96:e5:ef:08:f3:c6:b1:9e:92:af:9e:20:1c:de:
         37:84:61:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----