Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/81957559-a1bc-3039-ad2a-fa5d4a58bfb1.roa
File:                     81957559-a1bc-3039-ad2a-fa5d4a58bfb1.roa (raw, json)
Hash identifier:          fVeq+g3bNPej01oQpKAfZJ8A88Z3C+HcRZ8ouFjqCFY=
Subject key identifier:   12:89:F5:AD:73:9D:D7:CB:2A:11:D1:FD:DC:C4:B9:EC:7B:D3:78:D6
Certificate issuer:       /CN=b673aad8-2248-407c-90e8-0781473d6616
Certificate serial:       010D0C9F4328584991A5AEEDD64F9894A2CDC5D0
Authority key identifier: F9:FD:FD:BD:A6:1D:EE:47:EC:43:95:41:41:00:B6:7D:0A:68:54:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/81957559-a1bc-3039-ad2a-fa5d4a58bfb1.roa
Signing time:             Fri 18 Apr 2025 16:59:52 +0000
ROA not before:           Fri 18 Apr 2025 16:59:52 +0000
ROA not after:            Thu 17 Jul 2025 16:59:52 +0000
asID:                     393772
IP address blocks:        2602:f676::/40 maxlen: 40
Validation:               Failed, certificate revoked on Fri 18 Apr 2025 19:33:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:a5:ae:ed:d6:4f:98:94:a2:cd:c5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b673aad8-2248-407c-90e8-0781473d6616
        Validity
            Not Before: Apr 18 16:59:52 2025 GMT
            Not After : Jul 17 16:59:52 2025 GMT
        Subject: CN=74db4577-8926-45a5-b269-9ded75324171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:23:79:2f:85:3d:cb:ec:81:c7:a0:f8:c9:44:
                    82:b0:4d:4a:75:4d:f3:7f:f1:6b:eb:5f:f0:bf:61:
                    e2:3a:d2:4c:fb:0d:68:e3:6b:8a:9f:21:c1:58:1a:
                    8a:b0:3c:f5:55:ae:c0:7f:2e:23:f1:ae:82:50:be:
                    17:83:78:cf:b5:fb:6f:c2:33:58:9e:1c:7d:bc:69:
                    74:57:a7:a0:74:55:35:13:ec:34:2c:86:3e:e1:6c:
                    6a:24:a0:64:de:eb:a7:d2:ef:a6:ed:b0:25:4b:f2:
                    ad:c9:a7:2c:f2:5f:55:77:da:ce:07:ff:78:96:32:
                    43:28:fe:ee:2a:69:46:bc:fe:ed:ba:7f:cd:db:f4:
                    d8:5f:c4:49:70:bf:05:b5:ec:5f:6e:a2:f1:d8:07:
                    81:b7:73:05:a4:dd:6a:ba:97:59:dc:cd:ab:11:e7:
                    75:3a:74:26:0e:5f:e4:ab:b8:64:51:f9:83:e4:35:
                    0a:f1:49:8b:b2:e8:c8:89:1e:ab:7e:2f:d8:4c:59:
                    1f:94:5a:6d:ce:87:4c:90:82:27:f5:63:25:6a:41:
                    d8:5f:78:63:ee:06:92:b6:55:91:10:9b:f3:1c:50:
                    f5:7d:1a:95:89:5f:8a:eb:0b:a0:b5:35:17:e6:23:
                    8f:c9:e2:d3:3e:b4:7f:40:4d:c4:f8:fa:4a:fc:72:
                    fd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:89:F5:AD:73:9D:D7:CB:2A:11:D1:FD:DC:C4:B9:EC:7B:D3:78:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/81957559-a1bc-3039-ad2a-fa5d4a58bfb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/b673aad8-2248-407c-90e8-0781473d6616.crl

            X509v3 Authority Key Identifier:
                keyid:F9:FD:FD:BD:A6:1D:EE:47:EC:43:95:41:41:00:B6:7D:0A:68:54:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f676::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:2c:fd:b4:d7:d2:05:80:0b:e3:5b:22:e7:18:60:b7:75:8f:
         4e:0d:8d:5c:00:83:38:b6:83:67:a1:48:21:48:c7:2f:92:2e:
         da:77:80:2f:e3:dd:73:0d:d1:1d:29:9f:5d:8e:10:fb:f6:f9:
         3d:77:c1:c3:8f:0a:56:c7:ca:9d:07:00:3b:d0:38:5e:46:2d:
         25:bf:e2:1d:f3:66:82:72:b4:ef:81:45:3e:bd:3b:e1:f4:53:
         34:ab:a5:6e:e1:b5:91:6f:91:f8:01:2d:6e:bc:c6:e0:82:b6:
         75:9e:0a:1d:ba:f8:b5:0f:f3:50:93:20:db:f8:b1:ee:1e:4a:
         58:ce:02:a3:28:6c:36:04:47:75:fe:de:6a:37:1e:70:db:68:
         4e:e4:58:be:4b:48:56:d3:8e:82:b4:63:20:f0:49:3d:78:e1:
         ca:c9:ad:50:47:29:21:74:59:0f:ae:ea:28:78:f0:4f:58:16:
         90:1f:3c:a5:af:71:a2:04:f9:16:cd:1c:ef:9a:87:e8:a4:f8:
         27:58:89:65:d6:d3:bf:02:0d:52:3f:a6:cc:b3:58:12:c5:9a:
         4c:c2:3c:6c:09:da:e1:d0:44:c8:39:3e:ee:37:9e:40:59:a6:
         8c:f8:c6:f3:14:96:37:a6:e1:48:30:72:5d:3a:8b:88:43:50:
         59:60:f3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----