Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/ad1c8365-3ad5-3e6f-ad12-c75e09c07edf.roa
File:                     ad1c8365-3ad5-3e6f-ad12-c75e09c07edf.roa (raw, json)
Hash identifier:          neDEVptkx1Nf9F1VZ1G0FXPvDeSW4EDWHMoLGjzml1g=
Subject key identifier:   1B:51:7B:36:EA:67:D3:FF:5E:A1:03:B2:56:A2:C5:F1:8B:BD:64:C2
Certificate issuer:       /CN=98161ef7-249b-450b-ba6a-5819e613ed63
Certificate serial:       010D0C9F43285841D1F14C6F46586D51ED76BE00
Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/ad1c8365-3ad5-3e6f-ad12-c75e09c07edf.roa
Signing time:             Tue 21 Mar 2023 11:57:11 +0000
ROA not before:           Tue 21 Mar 2023 11:57:11 +0000
ROA not after:            Thu 19 Jun 2025 04:00:00 +0000
asID:                     21738
IP address blocks:        2602:2b7:40::/48 maxlen: 128

Validation:               Failed, certificate revoked on Wed 10 May 2023 00:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:d1:f1:4c:6f:46:58:6d:51:ed:76:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63
        Validity
            Not Before: Mar 21 11:57:11 2023 GMT
            Not After : Jun 19 04:00:00 2025 GMT
        Subject: CN=d169b341-b2ba-4884-bdaf-ac0aa4ce75c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2b:2b:05:be:aa:3c:bd:4a:e9:69:e8:75:f7:
                    79:70:08:8b:c0:8d:ab:6d:76:53:58:00:5e:5a:55:
                    99:fa:cd:8b:80:20:02:3c:97:f0:b2:b6:19:a8:52:
                    19:e1:0a:eb:93:7b:80:16:26:82:7e:3c:d0:0d:06:
                    04:af:21:14:e4:b2:f5:4d:0f:0b:6d:df:96:73:76:
                    34:a7:bd:cc:07:ca:e2:65:d6:2f:7e:01:43:f9:2e:
                    a9:12:69:94:37:25:66:2e:4d:f5:3e:18:37:a8:41:
                    7f:a2:ae:aa:19:f1:d0:b4:d6:4d:e7:5a:6a:f0:ea:
                    24:2a:a2:06:1f:3f:97:88:15:0d:8a:4e:2e:da:30:
                    2c:07:69:a6:c0:d5:7a:68:f3:06:05:7f:8e:30:61:
                    0e:11:77:2a:f6:2a:35:3c:65:0a:59:fa:b7:18:3c:
                    20:27:d0:f7:be:c0:50:4e:94:db:23:43:12:d3:56:
                    dc:da:16:38:f8:d9:e0:57:3d:11:67:a9:95:08:1b:
                    b0:40:54:5b:ab:58:5f:85:c4:2f:46:f1:d1:2a:f0:
                    af:e5:06:67:97:9d:11:9d:8e:f6:32:d4:0f:5f:af:
                    38:0e:7b:ac:e5:39:07:33:77:c3:9e:fa:a4:9f:94:
                    10:24:bf:c0:df:a0:b9:d0:c0:05:3c:c3:f5:14:25:
                    7a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:51:7B:36:EA:67:D3:FF:5E:A1:03:B2:56:A2:C5:F1:8B:BD:64:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/ad1c8365-3ad5-3e6f-ad12-c75e09c07edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl

            X509v3 Authority Key Identifier:
                keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b7:40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:1d:a9:33:d4:7c:96:28:aa:bb:c9:ef:1a:20:21:5d:22:01:
         71:cf:c9:bb:9e:0e:df:29:ce:37:d1:82:dd:a6:e9:93:80:a0:
         5a:2c:26:97:01:50:e9:48:37:b3:81:46:51:d2:76:dd:9b:ca:
         0f:86:c5:b3:d5:cf:fd:4b:bf:48:ef:58:b6:62:61:71:60:f5:
         bd:77:50:76:24:8f:06:79:3d:0a:eb:76:75:c0:59:f1:c7:56:
         00:a1:25:79:cd:ee:c6:f2:b4:8f:e0:14:1e:38:70:f4:18:ba:
         1c:10:e6:4b:ec:a8:08:c4:45:d1:95:d9:b3:0d:46:10:16:6c:
         41:d2:6b:b2:f1:0f:ef:0e:97:d7:d4:4e:a9:7a:ea:4d:80:ba:
         e0:5b:81:2e:28:60:01:94:45:aa:87:b4:b7:8d:1d:d7:0a:de:
         2f:91:50:74:6d:4e:61:64:8b:16:65:b8:2b:79:30:e1:ba:c7:
         81:1b:bb:53:17:e3:7f:70:8b:a4:22:19:82:c4:b0:e0:b8:2b:
         07:96:d1:35:29:99:b4:59:c3:9b:f9:f3:c8:99:2c:6d:40:15:
         fd:4c:c0:56:b7:19:22:08:3a:c1:7f:74:05:ef:76:79:c2:59:
         0b:1d:07:f3:e5:ab:95:cf:c4:42:53:8d:77:ee:22:dc:de:73:
         84:6d:3e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----