Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/38d10301-3deb-371a-a6e4-53d5e6ac5e85.roa
File:                     38d10301-3deb-371a-a6e4-53d5e6ac5e85.roa (raw, json)
Hash identifier:          36ZngsquX/o8FCxi/LtctxgWHp6ewhWgSHTFaDA7YfU=
Subject key identifier:   C9:7B:19:87:BD:0D:28:45:16:97:3F:19:B9:38:FE:FA:7D:34:D8:A9
Certificate issuer:       /CN=813aad25-25fa-4b5c-bb84-15fabea23f87
Certificate serial:       010D0C9F43285841CC7A045110F7D9FB0A08F180
Authority key identifier: 5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/38d10301-3deb-371a-a6e4-53d5e6ac5e85.roa
Signing time:             Thu 04 May 2023 13:30:11 +0000
ROA not before:           Thu 04 May 2023 13:30:11 +0000
ROA not after:            Sun 27 Jul 2025 04:00:00 +0000
asID:                     17024
IP address blocks:        2602:2d1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:cc:7a:04:51:10:f7:d9:fb:0a:08:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813aad25-25fa-4b5c-bb84-15fabea23f87
        Validity
            Not Before: May  4 13:30:11 2023 GMT
            Not After : Jul 27 04:00:00 2025 GMT
        Subject: CN=4a22ff2a-3072-44b5-a5fd-a06857ac3a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e4:04:0a:61:aa:cf:ff:4e:4f:48:61:4d:b1:
                    b8:5d:d9:f5:0e:53:0c:f6:e6:e2:b2:f7:89:3b:7d:
                    8e:3a:75:b6:ff:07:ce:3b:79:16:05:45:40:f7:66:
                    12:7c:d8:bb:a1:6f:4a:bc:b4:47:88:f2:9e:47:94:
                    8c:9b:74:1c:3b:88:12:c8:96:da:8e:c3:15:86:28:
                    58:6d:67:44:ca:bc:cc:57:db:35:c6:e8:b8:4f:1a:
                    a4:be:16:1e:3c:7c:f3:66:4c:09:58:2b:5c:56:67:
                    6b:e1:a5:f1:ca:82:fe:cb:6e:26:fa:90:0c:ba:bb:
                    c3:84:2c:92:71:fd:22:85:78:71:fa:05:1f:12:fd:
                    9a:b2:80:59:ed:ef:55:30:bb:cb:0c:54:b8:36:fb:
                    62:ee:15:3e:ec:f5:1a:55:7f:d7:39:21:7d:eb:66:
                    c1:0b:a7:b3:12:3c:c2:17:75:57:6a:40:69:31:96:
                    22:31:9b:9f:bc:9a:45:f8:73:94:93:2a:47:d5:41:
                    67:d8:01:74:e8:1f:83:b9:a1:f8:c2:bc:c2:4d:b1:
                    42:fe:fd:e1:d0:99:e7:82:39:15:15:c5:b3:67:40:
                    6f:1c:13:bc:c4:d8:56:cf:8c:0d:50:32:b1:dd:a1:
                    db:5f:69:54:dc:c0:f6:26:7a:ee:a8:a2:1a:db:fc:
                    17:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7B:19:87:BD:0D:28:45:16:97:3F:19:B9:38:FE:FA:7D:34:D8:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/38d10301-3deb-371a-a6e4-53d5e6ac5e85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl

            X509v3 Authority Key Identifier:
                keyid:5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2d1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:03:de:4e:0c:be:45:14:52:db:15:c9:7e:d3:be:ea:9b:63:
         8e:3a:b2:d0:1b:63:c9:fb:33:c1:e3:b1:7c:4a:30:ec:30:ed:
         db:56:7d:45:94:b3:53:1c:a0:1f:9c:82:43:e5:c9:43:86:40:
         a5:e2:12:16:51:8c:fe:83:a2:d1:76:e0:7f:8d:e3:5b:6c:6f:
         db:f6:5d:08:a5:24:00:e3:7b:2b:70:51:6c:eb:cd:76:65:a0:
         fc:fd:08:64:3f:c7:be:60:e8:37:61:24:02:15:91:2a:75:da:
         1f:95:41:92:78:2b:cc:16:fe:68:3e:c0:ea:c0:fc:9c:08:6c:
         38:15:5c:90:66:b8:df:20:7c:f6:ff:62:a3:40:96:9f:1f:cb:
         90:86:c8:db:83:e3:68:1f:17:a7:d8:cc:f5:45:46:b1:cd:a8:
         41:24:3f:51:5d:92:85:e3:e1:06:f3:7e:c7:aa:4b:f6:16:17:
         d2:05:d2:75:8e:1d:ef:a1:85:61:52:0a:27:df:95:fa:7b:a4:
         60:da:d3:c2:88:91:ed:62:e0:80:c1:7c:05:a5:35:2b:29:5d:
         07:39:a0:97:d5:67:78:9a:80:e1:d3:7c:ff:d9:14:89:e7:aa:
         cd:5d:cc:a7:31:3d:77:12:a3:b1:12:5f:35:e1:a7:ef:ba:e2:
         29:4e:31:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----