Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/4dc60464-9659-36ad-b533-b42e5b3caa01.roa
File:                     4dc60464-9659-36ad-b533-b42e5b3caa01.roa (raw, json)
Hash identifier:          Fl3DWsTeurTfGTRJuqpFtIC7DZcqEg2sEBTFRdZ0El0=
Subject key identifier:   77:58:87:65:55:DE:E6:2F:1D:DF:A7:26:CF:BD:64:A5:60:53:09:10
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F432858442E2EB310ED9B012F6FCCD500
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/4dc60464-9659-36ad-b533-b42e5b3caa01.roa
Signing time:             Mon 11 Dec 2023 14:00:20 +0000
ROA not before:           Mon 11 Dec 2023 14:00:20 +0000
ROA not after:            Sun 10 Mar 2024 13:00:20 +0000
asID:                     3477
IP address blocks:        2601:a000::/20 maxlen: 48

Validation:               Failed, certificate revoked on Mon 05 Feb 2024 16:32:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:2e:2e:b3:10:ed:9b:01:2f:6f:cc:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Dec 11 14:00:20 2023 GMT
            Not After : Mar 10 13:00:20 2024 GMT
        Subject: CN=8e1e3461-9c51-41e2-88a2-b69120b26d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d2:fd:c3:a0:ad:95:ff:b1:10:9e:5f:26:98:
                    f8:5f:d8:f1:4c:86:03:a3:a7:39:d8:c8:34:09:78:
                    8a:2e:1a:79:cc:3a:da:e3:31:c5:ee:68:8b:42:bd:
                    4a:37:0c:1e:49:39:e2:21:a3:4f:b2:c3:dd:a1:d4:
                    d1:a6:19:93:8a:40:82:b8:ce:8c:57:52:b9:e0:03:
                    ec:5a:58:e4:89:08:6c:5f:2b:c4:e1:8b:8e:07:64:
                    2c:d2:f4:37:03:f8:6c:95:d3:c1:b6:c6:0f:58:61:
                    58:fd:dc:2e:f4:1b:b5:f5:b0:c7:3c:ac:6d:52:3f:
                    be:f0:44:f9:d3:44:cc:25:3a:9c:37:25:73:02:05:
                    2c:99:bd:b2:36:45:30:c5:72:a5:e6:79:5a:59:80:
                    b3:df:b7:7f:65:d4:6e:91:d2:d7:72:9d:ab:7f:03:
                    4a:77:30:56:a9:4b:cf:86:0f:f8:a9:1c:1c:a1:9f:
                    4e:32:7e:28:a8:53:e2:62:d9:0a:7c:4f:23:bd:45:
                    0f:a5:4c:d1:14:fe:27:2c:8a:0a:55:1e:da:ff:a5:
                    da:24:5a:4c:27:f7:71:e5:ca:d0:93:03:66:ac:75:
                    e9:3a:89:24:d1:5a:d8:ad:23:ea:25:32:c3:2c:2e:
                    df:60:ae:b4:9c:81:cd:53:27:5a:91:92:e9:0a:16:
                    98:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:58:87:65:55:DE:E6:2F:1D:DF:A7:26:CF:BD:64:A5:60:53:09:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/4dc60464-9659-36ad-b533-b42e5b3caa01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:a000::/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:b4:6f:a5:b1:7b:0a:18:a3:65:ac:c9:45:13:cb:f4:b6:5c:
         e3:80:12:93:4f:da:ec:a5:ae:e5:f6:54:bb:ac:bc:74:25:8e:
         b1:85:55:b1:38:1e:39:7b:7a:b7:bf:8c:78:e7:ea:73:3f:28:
         8d:26:7a:18:1c:1d:93:8c:6e:43:09:bd:06:09:78:dc:b0:0d:
         18:ea:d1:17:c9:e1:c5:3a:b3:4d:53:ff:45:db:0f:28:b0:a2:
         8d:89:90:8b:b6:f0:b9:94:58:8a:37:c1:02:f7:55:bc:81:ba:
         9d:2c:89:64:2f:98:4d:be:47:9d:92:09:7a:81:50:5a:35:bb:
         53:20:e3:05:58:5d:41:de:d8:5f:2f:32:de:fc:39:86:34:e1:
         50:d2:e4:71:3b:f5:73:88:7f:30:bb:39:fb:df:55:ae:b4:71:
         3f:8c:0a:16:ac:54:e3:53:a8:78:4c:b0:cc:ad:42:e5:63:5e:
         d9:98:e3:fb:a9:40:c0:be:8a:9c:17:a5:59:51:c1:74:ba:95:
         63:2f:73:63:aa:51:0d:9e:7a:7f:5e:6b:6b:17:9a:3c:8a:55:
         69:06:4b:9c:fa:a8:4d:13:1e:be:25:48:6c:68:73:b6:cb:9d:
         70:4f:87:b9:35:04:1c:ae:fc:4c:96:cc:c3:88:74:00:2c:79:
         60:78:79:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----