Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c5869ca0-6b78-3da4-8590-19c7b642569f.roa
File:                     c5869ca0-6b78-3da4-8590-19c7b642569f.roa (raw, json)
Hash identifier:          Qruulfze5e3dCkn6fUqfH4K3/x1s4w7Vf1yj8i+wsiU=
Subject key identifier:   9C:3D:56:A2:4B:56:33:1B:4C:9F:ED:97:D9:59:4E:05:94:CF:24:62
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F432858467EDFEF510ED5BC49A36C2E4A
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c5869ca0-6b78-3da4-8590-19c7b642569f.roa
Signing time:             Wed 10 Jul 2024 21:16:04 +0000
ROA not before:           Wed 10 Jul 2024 21:16:04 +0000
ROA not after:            Tue 08 Oct 2024 21:16:04 +0000
asID:                     198949
IP address blocks:        2620:147::/36 maxlen: 48

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 18:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7e:df:ef:51:0e:d5:bc:49:a3:6c:2e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Jul 10 21:16:04 2024 GMT
            Not After : Oct  8 21:16:04 2024 GMT
        Subject: CN=c32d8014-9573-4ba7-aee6-0e1af7484010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5a:d6:7d:77:53:be:a2:eb:93:a1:ef:e8:1e:
                    b3:dc:93:6b:bc:b5:f4:0a:11:68:0d:6f:68:c6:17:
                    79:d8:95:37:17:c2:59:8b:da:e3:61:36:ac:aa:53:
                    07:1b:57:39:aa:77:49:6e:74:10:82:7d:c8:23:41:
                    48:8e:82:71:d4:eb:f6:9a:a5:75:df:ba:47:73:9f:
                    78:24:83:e9:e0:cc:86:eb:c4:15:91:20:ee:56:90:
                    eb:5b:f6:e6:14:32:70:78:47:9a:35:dd:b9:0f:f8:
                    60:5a:6e:7b:89:3c:22:dd:bd:80:c1:17:a8:a8:65:
                    a9:f0:32:e5:6c:b6:b5:49:e6:e5:33:91:15:24:e4:
                    91:c9:a3:a5:15:6f:62:67:fb:38:a8:23:8f:16:ab:
                    cb:83:2c:d8:de:fa:f5:9e:e5:cb:e3:f1:56:26:f3:
                    4e:25:7c:cb:c0:95:13:d9:1e:6b:38:2a:26:33:f1:
                    f1:67:2b:29:71:69:25:20:a4:af:93:ec:8a:ca:56:
                    0c:e6:f1:8e:40:52:9f:c4:04:30:96:84:9b:cf:21:
                    c9:d8:15:8e:92:bc:6e:16:fb:35:90:9e:64:b5:13:
                    1a:50:10:d6:76:49:79:39:2f:b4:b9:52:f3:e3:f5:
                    26:98:66:60:63:50:0a:cc:d8:8f:35:33:e1:45:49:
                    65:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3D:56:A2:4B:56:33:1B:4C:9F:ED:97:D9:59:4E:05:94:CF:24:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c5869ca0-6b78-3da4-8590-19c7b642569f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:5e:be:59:db:6c:70:f3:96:97:59:6d:cb:fb:36:f2:47:70:
         fe:b5:b0:58:34:39:46:16:2c:30:6b:45:f7:b7:26:de:95:ca:
         42:2e:fc:8f:25:f5:b5:b7:00:88:4b:0d:3a:37:1e:ed:8d:8d:
         f2:8a:3d:ac:71:7a:cc:a4:e7:2d:9d:3a:da:57:72:90:cf:ba:
         12:e7:d1:43:a9:ca:c8:be:b8:50:4a:df:3f:39:13:78:85:87:
         6b:a3:3c:b5:82:2a:3f:80:63:15:5f:44:67:5a:f9:d9:86:bb:
         8c:06:30:02:ae:4e:ac:fa:24:06:fa:0f:99:0d:06:dd:f6:f6:
         23:d5:49:f7:1f:eb:f8:90:f4:b8:dd:20:d7:23:d4:28:cb:96:
         8c:31:34:8b:09:20:81:86:6f:31:51:9b:c2:7e:bd:ea:e7:89:
         cc:99:b2:85:3c:e9:fe:96:90:df:18:6e:cb:78:9b:56:aa:7f:
         89:74:8d:2b:e9:b9:82:ce:ba:03:e8:19:c9:db:89:fc:9d:27:
         b1:8c:b4:84:ec:25:6e:20:e7:25:8e:27:e0:a3:b9:bd:15:d8:
         4a:e6:3e:a6:71:af:2f:82:7c:27:23:2a:84:2b:dc:e8:4f:af:
         6c:e6:3c:34:99:f0:a8:2d:a2:ca:c1:b8:67:cc:d3:dc:1a:10:
         3f:1b:40:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----