Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/131c897c-c374-399c-afb3-16f76da75979.roa
File:                     131c897c-c374-399c-afb3-16f76da75979.roa (raw, json)
Hash identifier:          rszlGC/r6n0u/Yg/DsceSJOh/BXwP/4p4hv+yqUOQ8M=
Subject key identifier:   B0:B8:F6:FD:BD:AB:4A:6C:E5:5C:F3:A1:D3:32:C1:41:40:F7:DA:1A
Certificate issuer:       /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
Certificate serial:       010D0C9F4328584424583E132529468E6127DF80
Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/131c897c-c374-399c-afb3-16f76da75979.roa
Signing time:             Fri 08 Dec 2023 01:26:02 +0000
ROA not before:           Fri 08 Dec 2023 01:26:02 +0000
ROA not after:            Thu 07 Mar 2024 01:26:02 +0000
asID:                     14618
IP address blocks:        2610:e8:3100::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:24:58:3e:13:25:29:46:8e:61:27:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
        Validity
            Not Before: Dec  8 01:26:02 2023 GMT
            Not After : Mar  7 01:26:02 2024 GMT
        Subject: CN=8757c502-7d04-4fab-b299-d81ded0d141f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b0:70:cb:85:68:52:67:5c:b4:8e:15:d9:d7:
                    b9:77:1f:ee:04:48:6e:25:a3:96:18:e9:fe:4c:e1:
                    68:ef:f9:e2:26:a4:dc:93:32:53:a5:fb:8e:cb:02:
                    c8:38:2a:11:b2:16:37:02:6f:58:a3:f7:14:7b:dc:
                    9e:06:0c:da:33:fc:a6:e3:20:8b:04:e2:6e:37:72:
                    c6:13:7e:e1:06:e9:dd:43:c2:3b:ed:6b:f1:1a:77:
                    ee:eb:ad:13:94:5a:91:5c:48:5a:e8:a0:2f:aa:4c:
                    5c:0a:fd:7e:42:c1:9c:81:7b:f0:b3:2d:f5:14:84:
                    2d:88:db:b6:34:78:ec:6a:f3:b2:c2:e6:0a:f7:3b:
                    64:53:67:2c:6c:be:8c:6d:8f:6b:f9:ee:dc:f4:8f:
                    4f:19:48:06:05:8d:42:fe:5e:c0:52:35:3e:d9:7a:
                    23:13:af:2e:24:2e:17:f6:e9:d5:22:fe:7b:b1:78:
                    c2:ca:17:76:f3:40:bf:03:4a:30:1a:03:25:23:b1:
                    6c:49:4d:53:8a:b9:b7:83:63:da:20:86:55:ce:47:
                    2b:00:60:3c:49:2b:f3:00:00:6c:b9:66:0e:41:ea:
                    59:13:5e:1c:ab:4a:05:46:3f:db:84:2c:d1:cb:f8:
                    05:98:48:59:0a:7d:c5:b7:2c:ce:f4:38:2d:1d:69:
                    9a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B8:F6:FD:BD:AB:4A:6C:E5:5C:F3:A1:D3:32:C1:41:40:F7:DA:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/131c897c-c374-399c-afb3-16f76da75979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl

            X509v3 Authority Key Identifier:
                keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:e8:3100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:00:53:d0:d1:26:7a:45:c2:6f:12:54:32:10:d0:e6:b5:f7:
         01:41:21:2d:da:2a:fc:88:18:ee:c0:c5:79:04:b7:b4:ed:97:
         cf:a0:a3:2e:20:aa:27:7f:84:96:eb:05:97:b7:38:e8:54:69:
         23:7f:da:5f:28:55:45:d9:20:51:cc:c7:ff:d0:94:44:e9:78:
         b1:c7:f3:9b:a1:a9:8c:29:78:e2:2a:09:2c:ac:b3:fb:9a:cf:
         09:d5:af:f8:c0:d3:02:77:33:8a:b9:25:91:e1:9a:47:db:a2:
         98:d3:41:42:61:bc:47:97:b5:51:61:25:cb:4a:51:c2:f4:3d:
         ac:8a:94:a1:38:a8:8c:ce:62:9c:85:75:6e:ba:d9:36:6f:c9:
         b7:55:50:01:7b:97:1e:b9:86:4a:3e:f3:5e:bc:16:19:fc:5e:
         39:7a:c4:4c:d4:7f:f4:46:b1:93:f8:b3:e0:81:20:af:6d:80:
         17:e4:15:2b:72:50:43:ed:50:ae:1b:ee:19:af:97:75:8f:8b:
         dc:81:48:d5:37:ef:96:16:b2:45:3a:18:b5:bd:61:a1:b5:f2:
         83:98:74:70:4c:5a:e6:38:a2:15:14:94:fb:58:7e:15:44:5c:
         ff:70:74:a6:35:e3:df:ba:3c:07:ee:67:1c:10:4b:34:cb:b3:
         e0:58:7b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----