Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/a779eb87-ca2a-3863-af7a-2c41e8f76df6.roa
File:                     a779eb87-ca2a-3863-af7a-2c41e8f76df6.roa (raw, json)
Hash identifier:          //1WO8X6j82nJv/1EogM5zb3NYM8i1nyeM4v/km3KzM=
Subject key identifier:   A0:21:B8:AF:9E:DB:34:51:2B:D5:EC:0B:F2:BB:4A:FF:DE:CA:29:51
Certificate issuer:       /CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78
Certificate serial:       010D0C9F43285846F5F58D997D49A25234BA2A00
Authority key identifier: 1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/a779eb87-ca2a-3863-af7a-2c41e8f76df6.roa
Signing time:             Thu 22 Aug 2024 13:00:40 +0000
ROA not before:           Thu 22 Aug 2024 13:00:40 +0000
ROA not after:            Wed 20 Nov 2024 14:00:40 +0000
asID:                     33696
IP address blocks:        2602:fa8a:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 29 Oct 2024 18:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f5:f5:8d:99:7d:49:a2:52:34:ba:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78
        Validity
            Not Before: Aug 22 13:00:40 2024 GMT
            Not After : Nov 20 14:00:40 2024 GMT
        Subject: CN=876448b3-503d-407a-a9fa-bcd8ac043b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0a:09:11:65:76:d3:bf:71:60:dd:51:8b:08:
                    3e:26:be:17:0d:b5:3d:77:cd:18:35:d8:93:2e:6b:
                    4a:6c:ff:b7:44:41:11:1d:af:67:5e:33:08:85:64:
                    4e:11:aa:b1:a3:d7:db:2b:4f:75:e4:91:20:cf:17:
                    5a:76:81:29:42:5c:03:7f:4c:66:79:f2:70:89:0a:
                    ff:8c:4b:4f:45:33:34:00:bc:c1:f2:6f:4c:97:62:
                    0d:98:e9:c7:63:b9:51:33:0f:bf:48:3e:e5:94:8f:
                    ba:3f:25:ef:5f:31:c6:f5:ad:49:8a:9f:c3:94:99:
                    27:2f:13:5e:a7:00:e8:e7:0b:16:8b:06:ee:71:29:
                    6b:ef:58:7a:a4:1a:25:40:b8:24:a3:01:59:47:9e:
                    f9:71:72:1a:f4:0d:69:79:97:35:94:2d:90:97:5e:
                    82:aa:14:8c:5b:77:36:b4:b6:1c:27:66:a5:a4:44:
                    b3:77:3d:7b:ad:8f:01:d2:26:b8:c0:a3:27:75:a3:
                    0e:d6:d3:0b:ab:4d:53:23:77:8e:73:6c:65:f0:b3:
                    05:a1:88:85:59:f4:c8:c9:3e:0f:82:e4:97:f2:e1:
                    dd:7a:5d:ac:7b:d4:80:de:d7:64:11:a1:2f:48:12:
                    d4:ce:15:4f:1c:01:16:2f:bb:47:e0:ec:f3:61:5b:
                    15:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:21:B8:AF:9E:DB:34:51:2B:D5:EC:0B:F2:BB:4A:FF:DE:CA:29:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/a779eb87-ca2a-3863-af7a-2c41e8f76df6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl

            X509v3 Authority Key Identifier:
                keyid:1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa8a:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:10:de:f2:b7:4c:04:83:c9:df:fc:14:d0:2b:55:ef:d7:c8:
         98:34:7d:2e:88:36:1d:81:ad:5e:12:1d:c7:11:3f:ad:3a:66:
         df:9c:f6:16:0a:c7:ee:16:82:68:7d:2c:0d:53:c3:b2:c3:6c:
         26:b7:0d:2c:c3:14:e0:b7:a6:92:f2:79:d5:93:06:cf:37:6e:
         89:97:0b:eb:c0:9c:8b:97:1e:3e:bd:ce:f1:f0:58:fc:65:2d:
         0b:4d:c6:61:6c:52:3a:d3:22:9c:20:d7:2e:3a:15:c5:2d:b7:
         59:f3:3d:ad:f1:ad:5c:e4:d0:21:6b:36:c2:fd:34:61:d9:26:
         48:ab:50:d5:fa:b0:e4:da:eb:86:82:25:ce:a4:34:1e:e9:29:
         11:91:73:93:59:9f:36:90:76:13:59:e4:e9:6e:a2:78:d1:2e:
         53:3d:33:59:09:9e:8d:2f:5d:f9:42:0b:df:5b:de:ec:66:ae:
         16:ac:b8:af:eb:29:6a:d7:e0:e8:c5:05:aa:c8:f1:10:ca:cd:
         29:29:98:d1:82:7d:77:8c:b0:a9:c7:8a:24:27:57:41:59:ff:
         a2:55:fc:fc:9c:dd:6e:9c:83:86:1a:4a:01:3d:d8:50:62:28:
         6d:a1:0e:b0:47:b7:72:0f:9c:14:d6:86:12:ee:6d:81:f5:2c:
         88:51:8c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----