Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/37c902ed-1c5c-3e5c-b750-2db96e540ed4.roa
File:                     37c902ed-1c5c-3e5c-b750-2db96e540ed4.roa (raw, json)
Hash identifier:          q11SxWcBdLmps9W3fnBGxPvg1a2NBAIO0a4sLctXpCo=
Subject key identifier:   C7:83:0D:4A:5A:9B:68:8C:7C:FD:B5:78:75:FD:07:E5:56:B5:89:D0
Certificate issuer:       /CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
Certificate serial:       010D0C9F43285845E193C1FC037CB5413DCE7AC0
Authority key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/37c902ed-1c5c-3e5c-b750-2db96e540ed4.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     32554
IP address blocks:        2607:6b40:100::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 31 May 2024 17:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:c1:fc:03:7c:b5:41:3d:ce:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=bf711ab1-9beb-4555-b8f2-b1695e4a8536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1d:5a:cc:3c:0d:8a:02:10:06:5b:3a:6d:0e:
                    99:81:60:34:19:c1:93:b4:97:47:76:a5:a4:15:4c:
                    ac:f7:f0:2c:a4:cb:7c:dc:44:15:16:65:30:33:e6:
                    41:39:56:58:1b:fa:53:af:e8:06:23:a7:28:8e:cc:
                    a0:c2:b7:06:38:da:6a:27:25:fa:11:83:a6:8d:a7:
                    6a:5b:6f:56:02:2f:b1:5c:1c:e5:dd:30:39:89:e9:
                    1a:a1:6f:ef:83:b8:60:6d:73:b0:37:e1:0c:df:74:
                    f0:96:2f:45:17:61:24:f5:84:20:40:fd:ee:19:17:
                    7b:8d:3b:aa:90:5a:48:b5:2b:95:d6:5a:5d:51:39:
                    e1:7d:be:0a:37:eb:6a:51:16:ed:cc:32:db:77:a9:
                    26:11:27:7b:17:44:32:d4:c7:02:57:7b:69:8f:94:
                    a3:be:29:d6:a9:5a:48:88:7a:7f:0d:80:56:27:b6:
                    00:86:d9:78:b2:1e:c7:d3:af:b8:ec:fa:57:e5:7d:
                    09:95:43:82:10:de:37:b9:b1:d9:e5:59:b4:7c:f0:
                    84:56:30:d9:eb:24:26:9f:a3:b7:82:21:9c:c6:9f:
                    39:af:86:55:44:61:a2:1f:f2:7c:ee:3e:e8:39:c0:
                    77:48:37:5b:bd:62:2c:e6:6a:78:99:5b:0c:e8:fe:
                    70:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:83:0D:4A:5A:9B:68:8C:7C:FD:B5:78:75:FD:07:E5:56:B5:89:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/37c902ed-1c5c-3e5c-b750-2db96e540ed4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl

            X509v3 Authority Key Identifier:
                keyid:26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b40:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:8b:fb:34:a1:33:7a:a3:f7:34:83:c9:b6:92:be:e6:1d:bd:
         8c:48:1f:79:b7:1e:e2:a4:04:53:c3:44:08:f0:19:40:bf:bf:
         d6:74:7a:43:dd:a8:5e:66:4e:19:70:ef:ab:92:c6:d7:9d:79:
         36:d7:eb:5d:82:c3:2a:65:63:65:61:b9:a7:5f:6f:6e:ed:ba:
         a2:c8:22:b8:11:4c:64:11:48:a6:9e:cf:fa:ea:45:56:18:1d:
         c4:ac:31:46:92:c3:7b:42:52:b2:c6:20:19:f1:45:bd:97:05:
         6c:07:23:9c:81:6b:1d:77:b4:83:6a:99:0f:83:6c:fb:9b:1c:
         17:44:14:13:da:f2:8f:93:ce:ed:3b:6d:f7:96:cc:c4:55:b0:
         69:d2:53:cc:21:08:bf:5c:b8:9e:dd:5e:fe:2a:d6:00:78:6f:
         49:2c:44:ca:e3:63:6e:15:a6:13:d2:90:29:aa:f9:96:6f:4d:
         69:f2:4c:e1:4a:e8:8b:da:48:42:25:3d:f4:bc:a4:56:ab:32:
         11:4c:a5:ef:f6:2f:26:62:6b:73:7b:e8:b7:31:84:b0:80:77:
         30:4a:10:63:ce:30:19:c4:53:d3:ca:c9:27:35:92:f4:91:2c:
         9c:1f:d9:cc:e6:2a:24:5b:f4:fe:e1:df:8a:7a:7a:0b:6a:2c:
         75:b1:88:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----