Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/d91b4b45-e8d9-3764-b79d-cb358d860708.roa
File:                     d91b4b45-e8d9-3764-b79d-cb358d860708.roa (raw, json)
Hash identifier:          Cp9TTwnQ5vYvZ/gx56/mHW++rhG8P2OR6DBraTcsedg=
Subject key identifier:   C8:4D:10:B7:AF:52:05:27:0C:C3:B0:C7:8D:25:A1:D8:1D:0A:0D:60
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F43285846E5E67A16C9B2698F7EDD94C0
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/d91b4b45-e8d9-3764-b79d-cb358d860708.roa
Signing time:             Fri 16 Aug 2024 18:57:30 +0000
ROA not before:           Fri 16 Aug 2024 18:57:30 +0000
ROA not after:            Thu 14 Nov 2024 19:57:30 +0000
asID:                     8987
IP address blocks:        2601:a004:f001::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 20 Aug 2024 22:39:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e5:e6:7a:16:c9:b2:69:8f:7e:dd:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Aug 16 18:57:30 2024 GMT
            Not After : Nov 14 19:57:30 2024 GMT
        Subject: CN=56712272-5e19-48fa-98ee-30f3f67a09ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fe:bd:a3:0c:2a:b0:7b:51:54:a0:af:5f:3f:
                    32:0f:07:04:70:30:43:0e:ab:4a:73:b1:9b:6f:f1:
                    0d:8d:8e:2f:cd:e1:4e:ca:e8:e8:6e:32:61:b5:90:
                    3f:a9:00:e2:56:18:36:d0:c6:df:bc:87:d4:7e:0c:
                    0b:01:f3:d9:a0:b0:9f:21:19:df:e9:11:ca:02:72:
                    27:c1:06:e2:26:c4:23:c3:59:bd:5a:2f:f5:6b:ec:
                    9b:0f:ca:9e:66:5d:6a:d8:4f:88:c4:5d:e3:4d:15:
                    d3:2b:ac:83:e5:de:d0:62:2f:8a:12:49:6d:24:37:
                    15:04:94:9a:82:72:ed:41:49:21:20:c0:1f:1f:3c:
                    ce:8a:e3:4f:be:70:11:fb:f0:8c:25:e4:37:07:11:
                    f2:4c:a3:b9:d9:fb:d5:bf:3d:ef:dd:7f:20:3e:8c:
                    47:f1:19:d1:f0:14:a6:6a:34:c4:43:d5:2a:c3:09:
                    9d:1e:75:9c:37:03:0f:1d:cc:95:84:ba:6b:86:f0:
                    bd:e6:d3:8a:6e:a4:c3:a9:bb:8d:81:a2:08:d4:b6:
                    9a:ea:2f:98:3e:78:62:e4:73:07:3a:26:ec:9d:87:
                    26:70:c2:e1:1a:e1:80:65:1d:e3:2f:fc:35:fd:9e:
                    1e:09:6b:c6:1a:96:42:fc:d7:24:b5:96:1d:f3:61:
                    6f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4D:10:B7:AF:52:05:27:0C:C3:B0:C7:8D:25:A1:D8:1D:0A:0D:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/d91b4b45-e8d9-3764-b79d-cb358d860708.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:a004:f001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:9e:7d:12:e2:2a:6f:ac:b4:dc:61:a9:48:2a:37:18:1e:b5:
         43:4b:91:b6:3a:c6:9b:a4:20:ea:02:62:ae:fd:43:49:3f:e1:
         13:09:d8:10:db:a8:e1:d4:f8:98:9c:76:f4:05:68:fb:5a:12:
         49:05:a6:9e:6d:9d:c0:1b:c5:ba:9b:32:c5:d4:80:9d:46:1f:
         6d:43:79:00:27:5b:7d:d8:0c:ed:b1:02:1b:58:69:c8:da:67:
         bb:e9:ee:21:85:f2:02:b1:81:7a:c2:72:ec:5d:c9:7b:57:5a:
         c0:c8:e4:1e:56:a3:82:c7:e3:c3:34:37:4a:b4:ae:e2:ad:0c:
         74:cb:54:0a:5a:10:2b:81:05:61:3f:b3:34:4d:0b:79:76:9b:
         9e:45:e8:2b:c9:7d:1b:cc:3a:69:48:25:fc:9d:e4:27:f2:65:
         b9:d0:19:1e:68:75:8b:ca:f0:3e:65:b5:f6:a6:db:99:2e:13:
         0f:8f:4a:c3:3a:fb:2e:70:5a:bc:be:47:ff:e2:39:98:2e:84:
         b9:ee:c8:6e:1e:fa:f8:14:14:43:66:f6:0d:94:40:dc:5c:1c:
         11:b4:51:d3:cf:3d:68:f6:ab:5e:9c:df:17:bd:4d:e6:fd:bc:
         05:89:cd:ce:e4:a7:16:7b:44:51:5a:b9:f6:95:95:4e:3e:d6:
         82:c3:d6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----