Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/e19a0633-4460-3072-8ea1-5ad515817dba.roa
File:                     e19a0633-4460-3072-8ea1-5ad515817dba.roa (raw, json)
Hash identifier:          QNFg0CLi2Rbvakh+drQC+lkZbynIuH3yEvRcRMw389o=
Subject key identifier:   A1:10:8A:DA:33:DD:51:2E:EB:E6:5F:DD:CD:D2:BC:B0:29:9C:3A:68
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F43285844D368AED5602C4E29ABFF8000
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/e19a0633-4460-3072-8ea1-5ad515817dba.roa
Signing time:             Thu 08 Feb 2024 18:25:37 +0000
ROA not before:           Thu 08 Feb 2024 18:25:37 +0000
ROA not after:            Wed 08 May 2024 17:25:37 +0000
asID:                     16509
IP address blocks:        2606:9fc0::/40 maxlen: 56

Validation:               Failed, certificate revoked on Fri 09 Feb 2024 03:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d3:68:ae:d5:60:2c:4e:29:ab:ff:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Feb  8 18:25:37 2024 GMT
            Not After : May  8 17:25:37 2024 GMT
        Subject: CN=6de05965-8488-4677-bcd4-7aefb88d178f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:4d:af:41:c1:de:73:6b:07:f7:fd:6d:87:
                    61:0f:99:de:b0:fa:28:84:f4:f5:5f:41:14:e2:b3:
                    90:74:fb:80:24:28:ff:0b:43:2f:62:ea:c3:7a:35:
                    e4:65:f5:ab:3c:0f:35:3b:34:66:91:05:4e:f6:fb:
                    02:51:75:5e:fa:38:72:3e:86:dc:4d:08:81:a5:8e:
                    8d:f5:f6:2a:b0:d2:94:9e:70:9d:08:5c:30:45:f7:
                    a1:c0:38:cb:d1:a1:0b:86:d8:0b:c6:dd:6a:ca:94:
                    0b:36:03:3e:49:fe:38:50:cd:c6:f7:42:14:39:ae:
                    96:6a:97:0d:de:e9:27:e9:1b:8b:c3:97:f6:dc:37:
                    e6:12:96:2f:0a:8e:ba:9e:9c:a4:e5:04:08:39:32:
                    6e:a9:c0:94:17:5c:7e:ff:39:d9:02:bd:be:47:b8:
                    d3:73:ab:3b:8c:bc:df:cb:b6:45:0d:dd:0e:cb:fd:
                    b0:a7:13:95:47:47:b4:cd:cd:8a:52:65:53:cc:e8:
                    57:0f:d0:d4:e6:28:d9:b9:7e:6d:2e:ed:48:81:95:
                    73:9c:12:56:85:e8:63:95:b8:f8:8a:aa:dc:5d:23:
                    50:41:cd:42:65:7a:d8:66:4c:48:df:2a:86:f6:6e:
                    68:fb:03:64:50:a7:4c:ad:4a:e6:bc:fc:ec:62:ab:
                    7e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:10:8A:DA:33:DD:51:2E:EB:E6:5F:DD:CD:D2:BC:B0:29:9C:3A:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/e19a0633-4460-3072-8ea1-5ad515817dba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:c4:7d:c6:f9:07:42:f3:02:94:e1:90:da:cc:35:31:68:c1:
         da:bf:a3:0a:1d:18:3c:54:e4:32:8c:21:e8:fd:45:e8:4e:c1:
         a6:59:1c:5a:be:b9:2e:63:f6:14:96:39:d7:4e:3e:a6:c4:12:
         8e:34:99:06:ef:20:fb:3b:aa:1e:42:24:a2:1a:e7:0d:57:13:
         c4:67:62:a1:2f:a3:89:f2:81:a4:78:d4:c4:95:34:e0:89:d2:
         b4:5b:39:1a:61:0f:e9:6d:7d:ba:1c:d7:23:56:e0:b5:08:dd:
         c9:f2:5e:27:4a:26:7b:dd:ad:06:51:9e:ad:d5:9f:3b:b8:3a:
         15:bc:7d:81:06:7a:76:fc:04:2d:a8:b8:2f:fc:eb:88:33:03:
         e3:f0:f1:bc:05:df:f9:e7:6d:6d:2a:4c:c6:b9:68:75:42:ba:
         b9:ce:23:c1:72:07:77:db:a7:47:32:43:b6:dd:6e:5c:6e:66:
         0a:4c:82:e1:16:49:d0:3a:92:1e:27:b0:1b:bb:a3:0b:6c:79:
         a7:3e:d0:80:69:c1:a9:a9:df:f6:f0:c7:60:95:ca:fc:95:e0:
         56:3c:7b:fb:d4:d5:2e:0c:d5:12:25:c3:4e:06:5b:77:e6:cf:
         b7:4e:f9:25:14:49:6f:25:9e:5f:25:91:0c:db:03:6d:43:c7:
         0f:85:18:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----