Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5d053f32-5485-34e5-9703-b389b2c5414d.roa
File:                     5d053f32-5485-34e5-9703-b389b2c5414d.roa (raw, json)
Hash identifier:          MAtcr7DYEZzRvuWLizgygj5aaPDgo6OC/ke0XycjK/8=
Subject key identifier:   88:60:B3:9D:B8:C2:C2:96:C3:69:55:50:DB:4C:33:A6:7D:AD:C3:E6
Certificate issuer:       /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial:       010D0C9F4328584A07D537E18E20A342DC4A9420
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5d053f32-5485-34e5-9703-b389b2c5414d.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     8987
IP address blocks:        2602:f9e7:26::/47 maxlen: 48
Validation:               Failed, certificate revoked on Fri 13 Jun 2025 18:03:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:37:e1:8e:20:a3:42:dc:4a:94:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=cb0eb6cd-a760-4801-b6b6-4f1412e31280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:41:47:ec:2d:a3:22:d7:25:81:0c:05:d3:9b:
                    bd:24:9f:b3:e5:04:05:2e:1b:a7:82:47:04:a9:39:
                    35:db:72:0d:73:a3:77:ef:23:ec:48:91:31:ec:91:
                    2f:56:65:e0:4b:37:8c:b3:44:55:82:28:c2:e3:68:
                    2e:4f:36:5d:d8:12:e7:0e:3a:65:c3:7b:3c:4d:80:
                    71:d2:30:bd:8b:67:d2:c7:98:b6:fd:cf:1a:57:9f:
                    92:05:38:5d:62:38:d3:1a:91:ca:81:00:ca:76:1d:
                    03:c4:03:33:ee:33:37:ea:f2:2e:c6:9b:34:38:4a:
                    55:a3:70:45:64:38:10:16:41:74:e5:22:a1:73:81:
                    63:11:2d:18:74:da:ce:dc:87:43:29:ef:b8:8f:0a:
                    0b:25:d4:60:48:52:39:36:dd:22:4d:e8:71:4e:b8:
                    33:9f:34:29:cb:19:5f:4d:03:f9:00:ff:81:85:b5:
                    e7:fb:8e:dc:2e:cb:7f:04:ec:f6:a6:55:a4:47:30:
                    d4:c3:03:02:09:73:c1:37:b5:ee:b9:36:83:52:96:
                    b7:60:dc:0e:0d:62:2f:06:7f:fd:3e:c6:d3:07:98:
                    b8:db:98:20:9b:e9:9c:42:56:ff:ad:48:32:d6:fc:
                    7b:e1:8e:43:a2:fd:48:e6:a3:f0:24:5a:c2:af:a4:
                    b7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:60:B3:9D:B8:C2:C2:96:C3:69:55:50:DB:4C:33:A6:7D:AD:C3:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5d053f32-5485-34e5-9703-b389b2c5414d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl

            X509v3 Authority Key Identifier:
                keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9e7:26::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:a6:ca:68:73:55:b3:0f:b5:59:e8:54:cd:3e:65:0e:a2:e0:
         57:e8:77:7d:97:56:72:87:1f:eb:fe:c4:79:ea:da:88:5a:09:
         72:fe:6a:55:a8:4e:4f:57:8f:20:1d:6a:e5:16:8e:72:89:5b:
         ee:d9:51:18:82:8b:01:8c:ca:80:ad:9d:c4:ed:a3:46:fe:c2:
         e6:9d:93:46:f3:3f:35:83:5b:e2:d3:1f:e8:45:59:1e:ae:da:
         f7:e9:37:9e:d7:a3:78:28:e9:65:e7:89:40:14:8f:d7:44:47:
         51:77:74:6e:aa:50:9d:4a:8d:e7:ba:16:41:05:b2:5d:87:79:
         f9:46:c5:f1:26:e4:a1:ac:19:b0:9e:80:22:df:6a:f8:e3:4f:
         b0:32:a2:77:e1:b7:d1:6b:58:c8:c4:57:24:65:b3:76:35:28:
         b9:8b:1b:a5:c0:67:e3:d7:04:c5:92:3f:e2:ce:c4:1c:f1:16:
         6f:b7:b0:cf:56:d1:7f:bb:3f:ae:83:a0:6f:cc:c9:a9:21:66:
         b4:1a:7c:85:fb:72:04:dd:24:4d:58:ea:a2:df:4a:32:f9:56:
         b3:27:c0:d6:fe:13:ea:f0:b8:49:ce:a6:a2:60:78:49:52:c7:
         aa:45:92:42:b0:fe:e8:b9:38:5d:af:f4:49:f3:b8:6f:08:0c:
         22:5c:1e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----