Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/5e69bf29-027a-3a68-bef9-60fc893c62de.roa
File:                     5e69bf29-027a-3a68-bef9-60fc893c62de.roa (raw, json)
Hash identifier:          8IdpkkYG6O2E+ezGWEA0LRA9zaYVXtaKUvAA+0aXSwk=
Subject key identifier:   5C:C5:69:A0:B5:B2:3A:FE:44:43:36:25:A4:62:C3:4B:80:88:7B:FE
Certificate issuer:       /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial:       010D0C9F43285840E6322BC2A71AF0CB4B92F780
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/5e69bf29-027a-3a68-bef9-60fc893c62de.roa
Signing time:             Wed 25 Jan 2023 14:54:49 +0000
ROA not before:           Wed 25 Jan 2023 14:54:49 +0000
ROA not after:            Tue 29 Apr 2025 04:00:00 +0000
asID:                     18639
IP address blocks:        2602:277:d0::/48 maxlen: 56

Validation:               Failed, certificate revoked on Fri 17 Mar 2023 17:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:e6:32:2b:c2:a7:1a:f0:cb:4b:92:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
        Validity
            Not Before: Jan 25 14:54:49 2023 GMT
            Not After : Apr 29 04:00:00 2025 GMT
        Subject: CN=bc20128d-26b2-4e5c-bdd9-21f805a83b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d7:28:fd:91:f6:ed:05:07:4e:cf:a2:d8:db:
                    1a:89:dd:bd:ce:6d:05:b2:bd:87:ca:b1:a8:b6:2e:
                    88:d6:96:7e:e3:ad:27:2e:53:6c:33:52:cb:1a:53:
                    23:31:40:a4:50:54:75:4b:00:c0:19:08:d2:29:96:
                    ae:67:99:63:50:d4:8c:a8:70:98:c6:a1:40:2f:32:
                    64:db:01:2d:62:94:8d:d3:29:3e:6c:48:79:c9:8a:
                    58:5b:4b:cf:9a:4a:5a:ac:a5:b6:67:df:a6:9f:66:
                    5d:9c:4c:41:ac:20:b0:3c:88:4a:ea:a1:d5:7d:9b:
                    2d:8a:9e:c6:f1:5d:c1:16:da:aa:0e:aa:40:db:12:
                    17:8e:fd:9a:b1:1d:b3:07:24:3d:24:ec:2a:70:ad:
                    8f:0e:0a:f3:f6:9b:de:08:1d:f6:ee:0d:f2:be:65:
                    6b:8d:56:93:9c:49:0e:27:c5:b9:b1:cf:4a:1c:d0:
                    9b:a9:4e:7f:2d:93:cb:6f:88:b6:49:bd:85:8d:4e:
                    49:43:1d:76:53:55:02:b0:e7:81:19:5f:f6:8c:13:
                    75:35:d1:d0:4a:29:d0:5a:80:2d:52:17:89:19:58:
                    cc:09:1d:e9:ec:a0:dd:20:5e:c0:33:5b:75:52:e4:
                    cb:84:13:ce:57:ca:23:09:97:89:62:0b:fd:df:79:
                    ab:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C5:69:A0:B5:B2:3A:FE:44:43:36:25:A4:62:C3:4B:80:88:7B:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/5e69bf29-027a-3a68-bef9-60fc893c62de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl

            X509v3 Authority Key Identifier:
                keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:277:d0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:a7:61:85:c6:61:0c:a2:86:c0:fd:6b:d5:b1:1a:c0:db:6c:
         49:00:0f:0d:8e:e5:f5:55:c9:21:50:4c:7f:8b:77:06:7b:98:
         d7:5f:37:e3:9c:77:21:22:22:ac:51:10:fc:a3:c9:f9:83:b9:
         e9:ec:ff:3a:c2:75:77:c2:dd:3b:20:6d:94:ec:72:bc:6b:f7:
         15:cc:a5:44:22:f8:6f:11:b5:fd:ff:03:d1:d8:aa:58:b4:cf:
         24:45:f9:b9:f2:f2:ce:08:3d:d5:49:65:49:39:6e:a7:b5:48:
         08:b0:54:08:c4:88:6f:9e:89:4f:3e:b3:e8:68:52:69:b0:db:
         bc:88:a8:e5:73:91:e2:43:34:9e:02:5c:e2:db:63:d1:1f:22:
         be:b0:fd:25:be:ec:2a:26:60:94:b9:aa:5f:0c:d3:51:59:a4:
         ae:a6:81:71:8d:bc:46:0e:a5:87:67:cf:ec:61:01:75:1b:c1:
         b9:15:4d:2a:81:a2:9c:8e:2c:a7:72:89:cb:7c:3b:50:b6:63:
         aa:e1:53:91:4d:53:89:28:26:c7:37:37:11:3a:a0:7a:44:ee:
         14:54:b6:69:b3:21:68:d8:14:30:2e:fe:5e:3f:d9:7d:f6:73:
         df:52:76:0c:0d:17:c6:35:37:1c:90:54:8e:f3:46:57:33:a9:
         52:3e:71:4a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEDmMivCpxrwy0uS94AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWIxMTAxZjQtYTUyNy00NTliLThjMTYtZDc4YjI2MWU2
ZGUzMB4XDTIzMDEyNTE0NTQ0OVoXDTI1MDQyOTA0MDAwMFowLzEtMCsGA1UEAxMk
YmMyMDEyOGQtMjZiMi00ZTVjLWJkZDktMjFmODA1YTgzYjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdco/ZH27QUHTs+i2Nsaid29zm0Fsr2HyrGo
ti6I1pZ+460nLlNsM1LLGlMjMUCkUFR1SwDAGQjSKZauZ5ljUNSMqHCYxqFALzJk
2wEtYpSN0yk+bEh5yYpYW0vPmkparKW2Z9+mn2ZdnExBrCCwPIhK6qHVfZstip7G
8V3BFtqqDqpA2xIXjv2asR2zByQ9JOwqcK2PDgrz9pveCB327g3yvmVrjVaTnEkO
J8W5sc9KHNCbqU5/LZPLb4i2Sb2FjU5JQx12U1UCsOeBGV/2jBN1NdHQSinQWoAt
UheJGVjMCR3p7KDdIF7AM1t1UuTLhBPOV8ojCZeJYgv933mr0QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFzFaaC1sjr+REM2JaRiw0uAiHv+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjEx
MDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhiMjYxZTZkZTMvNWU2OWJmMjktMDI3YS0z
YTY4LWJlZjktNjBmYzg5M2M2MmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxMTAxZjQtYTUyNy00NTliLThj
MTYtZDc4YjI2MWU2ZGUzL2FiMTEwMWY0LWE1MjctNDU5Yi04YzE2LWQ3OGIyNjFl
NmRlMy5jcmwwHwYDVR0jBBgwFoAUmZxX2Q4wTnTaeEpb0pxnHt56bjMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYjExMDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhi
MjYxZTZkZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICdwDQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHunYYXGYQyihsD9a9WxGsDbbEkADw2O5fVVySFQTH+LdwZ7mNdf
N+OcdyEiIqxREPyjyfmDuens/zrCdXfC3TsgbZTscrxr9xXMpUQi+G8Rtf3/A9HY
qli0zyRF+bny8s4IPdVJZUk5bqe1SAiwVAjEiG+eiU8+s+hoUmmw27yIqOVzkeJD
NJ4CXOLbY9EfIr6w/SW+7ComYJS5ql8M01FZpK6mgXGNvEYOpYdnz+xhAXUbwbkV
TSqBopyOLKdyict8O1C2Y6rhU5FNU4koJsc3NxE6oHpE7hRUtmmzIWjYFDAu/l4/
2X32c99SdgwNF8Y1NxyQVI7zRlczqVI+cUo=
-----END CERTIFICATE-----