Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/9cfdc057-4733-3711-ac74-4e50dc09f8b2.roa
File:                     9cfdc057-4733-3711-ac74-4e50dc09f8b2.roa (raw, json)
Hash identifier:          bjtk9hjSRx25WXyc7H5ztaUPI6xIpIhhZVAlsxeGR5Q=
Subject key identifier:   91:9A:95:55:74:AE:C6:54:D4:65:4A:71:0D:4A:49:E2:DF:39:21:6F
Certificate issuer:       /CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e
Certificate serial:       010D0C9F4328584546A2B1716A4232359906EC80
Authority key identifier: 8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/9cfdc057-4733-3711-ac74-4e50dc09f8b2.roa
Signing time:             Thu 21 Mar 2024 01:00:25 +0000
ROA not before:           Thu 21 Mar 2024 01:00:25 +0000
ROA not after:            Wed 19 Jun 2024 01:00:25 +0000
asID:                     199632
IP address blocks:        2602:fab0:20::/44 maxlen: 48

Validation:               Failed, certificate revoked on Fri 07 Jun 2024 03:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:a2:b1:71:6a:42:32:35:99:06:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e
        Validity
            Not Before: Mar 21 01:00:25 2024 GMT
            Not After : Jun 19 01:00:25 2024 GMT
        Subject: CN=f5fad535-7027-4f52-a0a7-6821cfa4de17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c9:55:d4:7e:11:2f:65:b3:11:3b:b7:cc:16:
                    82:7a:32:1d:86:d4:97:17:28:56:b2:f5:22:35:f4:
                    d5:36:3a:eb:d7:e1:2f:db:e5:c4:c4:4a:35:27:c2:
                    d0:fc:cc:39:99:13:89:48:f5:51:44:65:c6:75:27:
                    76:b0:e0:33:89:97:bc:77:fe:f1:bb:45:2a:a9:d8:
                    10:5e:33:82:ba:0f:77:48:ea:5a:dc:0b:f7:55:8d:
                    0b:1c:95:01:0f:a7:71:24:a7:a4:ec:1a:1b:54:3b:
                    99:ee:e8:c2:b5:e8:fd:6c:17:3c:5c:39:4a:83:03:
                    45:6f:7b:31:4e:30:b8:4e:4c:c0:27:02:87:c5:8e:
                    cf:be:7a:7e:72:f5:9b:ce:f1:f7:2b:c3:6f:a1:97:
                    ed:4c:a0:0b:1c:ff:5b:6d:22:f5:04:ba:32:32:c8:
                    8b:cb:05:6b:f3:df:a4:dc:04:aa:42:cc:fb:e3:36:
                    da:ce:5c:4f:6b:15:53:6e:12:80:a4:01:16:78:62:
                    96:63:f5:72:66:74:7a:39:1e:8e:86:bd:b7:e1:95:
                    c9:71:a0:87:8d:24:ae:15:f6:fe:c9:63:3a:dc:8a:
                    34:00:6a:cb:1f:a4:c3:55:7f:2e:08:f3:3a:3b:1d:
                    fa:1f:fa:c9:cf:59:b8:ee:81:ba:df:93:83:5e:7e:
                    e1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9A:95:55:74:AE:C6:54:D4:65:4A:71:0D:4A:49:E2:DF:39:21:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/9cfdc057-4733-3711-ac74-4e50dc09f8b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl

            X509v3 Authority Key Identifier:
                keyid:8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fab0:20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:d4:33:f0:22:32:4a:9e:05:bc:60:04:26:81:01:4f:0d:9c:
         f4:23:b7:77:78:a7:9d:7b:17:16:69:0c:3d:ce:9d:7f:0c:1c:
         e5:a6:89:eb:5e:ff:4c:ca:12:46:a8:d5:95:c5:fe:8f:2a:46:
         61:5d:89:6a:8e:50:2c:e5:1c:5f:7c:16:a7:e2:dd:af:90:5f:
         d7:cb:e0:1d:b0:86:c9:59:c9:44:54:ed:8c:71:e6:70:a4:4a:
         e9:28:a1:40:41:8f:87:be:4e:3f:00:25:81:86:d0:63:39:5d:
         63:ac:fb:92:bf:86:32:9a:dd:c9:ef:6f:f1:39:3b:8c:8d:ff:
         a8:08:c8:d9:6a:d2:12:c2:1b:6e:b9:1e:a0:92:b0:3b:d2:75:
         cc:51:15:d8:dc:5a:c6:f9:56:c1:df:f1:c4:8e:9c:08:07:21:
         c5:dd:31:de:42:eb:95:59:35:de:8c:38:2e:d8:96:5a:d2:bd:
         99:e9:5d:63:7c:14:02:14:50:98:87:b8:34:40:03:7f:3d:e0:
         e9:3a:d0:3a:c9:b9:b1:ba:25:8e:d9:2b:d7:fe:a3:bd:a4:b1:
         e8:e9:e7:7a:fa:9f:98:4a:2c:eb:0d:81:22:d7:6c:05:1a:44:
         92:f8:d9:a0:ca:d3:5e:d0:f4:46:1c:19:a7:87:9c:06:13:a1:
         d9:04:67:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----