Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f46baa6-7a89-325c-b413-dcbbdfee4c25.roa
File:                     8f46baa6-7a89-325c-b413-dcbbdfee4c25.roa (raw, json)
Hash identifier:          zDmn6okiOH58T+QnDyxLo8iIDHDTb0EbT7zSL8mpVio=
Subject key identifier:   3F:82:FF:B9:66:E5:FC:F0:2E:A4:8D:93:66:EF:99:F0:26:4A:ED:F4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845D933CA04138F531046C22500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f46baa6-7a89-325c-b413-dcbbdfee4c25.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     393667
IP address blocks:        2001:470:69::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 16 May 2024 19:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:ca:04:13:8f:53:10:46:c2:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=e23e2a49-3188-46b5-8893-94b70fcdc46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ba:0e:64:b2:d4:da:21:80:1f:d8:fd:ac:33:
                    ff:ba:86:25:87:34:d7:fd:24:82:c2:b1:3b:5c:fa:
                    55:7f:d5:27:52:f6:3b:a7:6c:70:0a:90:af:3c:73:
                    17:27:78:66:71:29:f0:d4:91:6a:6b:83:41:66:16:
                    2b:16:92:8e:52:bd:36:a3:13:78:e6:2d:b9:02:7c:
                    d5:69:95:08:4b:01:b8:76:81:0a:62:23:cc:46:eb:
                    3a:c5:26:4a:82:96:86:fe:4f:34:36:5d:c0:4b:5f:
                    85:ea:de:c8:e3:9c:5c:41:d8:d9:a2:c3:de:13:3a:
                    1a:e2:3b:09:8c:2f:e3:5d:cc:69:f0:b1:3e:ea:4b:
                    59:c8:bc:6c:17:e6:19:92:3c:8c:f9:db:f5:69:9a:
                    74:60:a2:74:79:97:84:6e:98:41:4f:dd:fc:4b:1a:
                    e4:24:ac:c6:22:a4:0c:bc:1c:33:38:cb:41:1f:cc:
                    3c:f5:05:60:52:ef:6b:1c:2f:59:f8:b3:1f:76:89:
                    77:65:b0:36:ae:d4:2c:cb:3c:a9:8f:c7:d9:18:b2:
                    7c:41:d6:05:69:9e:1d:8b:2e:ef:16:5b:23:cc:fe:
                    75:e6:f9:e3:f5:4a:33:84:47:15:18:3d:73:48:5f:
                    d6:60:4a:f6:15:40:a1:65:86:05:f7:d8:fb:6a:6c:
                    7f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:82:FF:B9:66:E5:FC:F0:2E:A4:8D:93:66:EF:99:F0:26:4A:ED:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f46baa6-7a89-325c-b413-dcbbdfee4c25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:69::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:8e:7e:ca:7f:46:67:be:f5:1e:f1:5f:ff:cc:25:65:64:b5:
         f0:1d:d0:39:e3:cf:23:40:df:f1:00:23:b8:38:5f:be:47:c6:
         5c:f7:33:93:ce:3a:bf:b6:b0:4b:dd:a1:60:d5:a9:71:97:c4:
         fe:cb:4a:cd:14:45:a8:cc:4b:cf:82:9d:1e:9f:de:1c:17:eb:
         3d:41:89:d3:05:39:58:a3:fa:f3:e5:76:ff:0e:a4:90:cb:a7:
         19:b1:71:05:3f:34:47:d8:7c:fb:e9:69:31:8a:f3:45:eb:29:
         42:7a:f6:00:13:e9:93:23:d8:f7:9b:b3:6b:ec:9b:82:91:c9:
         e6:49:31:f5:85:eb:db:0f:22:15:0c:6b:32:13:1d:6f:0a:c5:
         2c:28:67:69:bf:d0:69:19:a4:41:d7:49:cc:50:40:4a:66:fd:
         93:6e:88:5d:92:f9:59:bb:14:8b:e2:7c:8f:ff:96:e0:53:b5:
         11:c3:88:9a:6f:20:a6:58:c9:42:51:79:b1:9d:7c:d6:aa:39:
         82:bb:de:86:09:be:76:07:6d:64:9d:3c:ba:67:5d:36:57:eb:
         eb:55:a7:cb:51:5e:8e:11:4c:c9:b9:f0:71:4d:aa:ef:d5:6a:
         ef:df:be:d1:52:cc:c7:4c:e6:d0:8f:05:4d:79:04:04:3c:0f:
         c3:ca:1e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----