Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f7d1bab-d137-3c76-bf7e-771c20d1f2af.roa
File:                     5f7d1bab-d137-3c76-bf7e-771c20d1f2af.roa (raw, json)
Hash identifier:          1TvYF0hzW4uUbTyGUQ6B2gp6lwQHxxDI+w80psKuJds=
Subject key identifier:   7A:9E:B0:08:07:9A:86:E1:B8:74:C7:9D:92:BA:E6:2E:C0:00:51:50
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858454C471FDF3B7F062F0A6727C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f7d1bab-d137-3c76-bf7e-771c20d1f2af.roa
Signing time:             Sat 23 Mar 2024 01:30:49 +0000
ROA not before:           Sat 23 Mar 2024 01:30:49 +0000
ROA not after:            Fri 21 Jun 2024 01:30:49 +0000
asID:                     399976
IP address blocks:        2001:470:112::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 07 Apr 2024 19:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4c:47:1f:df:3b:7f:06:2f:0a:67:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 23 01:30:49 2024 GMT
            Not After : Jun 21 01:30:49 2024 GMT
        Subject: CN=e7f03a37-cec8-4979-817f-0242fcde9c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ba:81:b0:e0:32:7f:1d:27:cd:ce:2e:a5:69:
                    d5:fe:86:f0:0d:14:6e:d0:2d:5c:67:21:5f:33:ed:
                    a8:31:f5:ee:1f:88:e6:bc:e3:71:09:d8:38:3f:56:
                    d4:51:15:27:f3:f8:8c:ec:e7:7a:c5:49:0b:43:c8:
                    02:a0:96:b5:00:c1:92:83:bd:b2:92:3e:fb:f1:cc:
                    8a:cc:c6:56:61:e1:aa:04:e7:ec:51:a7:d4:6e:d8:
                    f1:a7:3d:40:d9:f6:67:28:1e:e4:90:33:8f:6c:15:
                    c4:53:35:09:3d:60:9e:04:f4:bc:bb:58:64:88:98:
                    03:51:4a:a5:ad:86:5e:d4:89:38:4b:5d:9f:ae:7d:
                    27:b7:19:96:a4:a9:e9:3c:1b:ac:b7:d7:25:d4:15:
                    9e:fa:d2:53:72:77:c8:92:92:63:3e:6b:27:93:ac:
                    b2:42:e0:e3:51:d3:18:00:c8:b0:ff:44:e6:b5:8f:
                    0b:0e:14:ed:92:56:eb:3a:a1:38:b6:19:60:13:ad:
                    61:77:f4:b0:ab:75:b1:d8:98:f4:80:6a:ad:48:4f:
                    e9:23:0d:00:65:8d:8a:70:23:fc:40:57:c4:45:55:
                    4c:b0:db:42:b3:d6:70:05:47:54:6d:75:4e:6d:f1:
                    59:24:64:f5:1f:eb:f8:e5:77:45:2b:09:25:3f:18:
                    af:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9E:B0:08:07:9A:86:E1:B8:74:C7:9D:92:BA:E6:2E:C0:00:51:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f7d1bab-d137-3c76-bf7e-771c20d1f2af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:112::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:06:e9:b1:4a:12:14:3c:32:0e:ff:eb:48:d7:63:0b:51:74:
         42:56:9e:9b:3e:d9:2e:e3:3d:5d:3c:37:18:4b:90:8a:8a:cc:
         9e:f3:0b:ba:26:52:30:ac:ce:ef:5a:cf:63:d9:40:f4:b4:7a:
         37:3e:05:b6:4d:cb:d6:c5:df:a2:ef:f5:ec:3e:26:df:15:29:
         43:01:66:7d:b2:91:16:6c:f7:24:cf:03:16:a2:b1:d6:c7:fe:
         60:aa:09:d6:33:14:01:73:b7:16:f4:8b:62:76:56:c1:4e:2f:
         05:eb:d3:dd:c3:d6:fe:6a:c4:57:f4:88:a2:42:bc:99:f3:c4:
         f4:06:12:00:d5:0d:e0:68:6f:02:43:ac:48:a5:44:85:78:bb:
         b2:6b:9c:21:c2:50:c1:47:5a:28:32:d3:eb:ae:57:c5:99:b6:
         a5:54:39:f0:80:80:e7:3d:d3:e4:47:53:9d:3b:39:6e:ae:f0:
         45:b6:bb:46:62:02:7b:b8:05:40:08:9f:19:c5:2c:0e:6d:94:
         59:a4:5f:f5:d7:de:d7:60:c6:98:c3:ba:76:ca:ee:c2:bf:b8:
         f1:ea:1a:2b:b8:db:a6:ec:f1:b7:70:b5:14:eb:c0:9c:2b:1d:
         0f:3a:34:8d:38:28:37:17:b7:ec:e8:41:e6:7c:75:8b:40:10:
         49:fc:ac:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----