Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/07cc18a6-7b48-38c5-b3f3-487e721820d6.roa
File:                     07cc18a6-7b48-38c5-b3f3-487e721820d6.roa (raw, json)
Hash identifier:          HFW0vYaMiM4Gy6mikEr2o+jlUSwMuykFTY88RSIsS6o=
Subject key identifier:   10:FD:70:8D:A5:3D:8D:AC:53:E1:66:43:29:A8:CD:50:BD:DD:E4:36
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584538AD49E445270728A69686F2
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/07cc18a6-7b48-38c5-b3f3-487e721820d6.roa
Signing time:             Sat 16 Mar 2024 01:00:25 +0000
ROA not before:           Sat 16 Mar 2024 01:00:25 +0000
ROA not after:            Fri 14 Jun 2024 01:00:25 +0000
asID:                     42708
IP address blocks:        2606:f180:10::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 29 Apr 2024 14:43:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:38:ad:49:e4:45:27:07:28:a6:96:86:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Mar 16 01:00:25 2024 GMT
            Not After : Jun 14 01:00:25 2024 GMT
        Subject: CN=a3268e54-33a2-4182-884a-5aaa697c1183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5e:a8:26:91:75:a7:50:35:5b:6d:c8:00:b9:
                    67:77:f2:69:93:34:2a:9d:f7:62:9c:06:8c:de:f5:
                    c0:56:e8:c6:b5:84:2b:79:86:a0:ae:30:f6:e8:ee:
                    29:67:73:ca:f9:84:2e:ff:60:f2:a4:cd:40:bc:79:
                    9c:23:41:e3:82:31:be:e3:69:40:2a:8f:3f:54:16:
                    e7:c6:81:eb:13:32:e1:6e:6a:e2:84:c5:57:87:94:
                    3f:ab:db:9b:91:14:a0:9c:fb:26:d1:cb:ce:3f:e4:
                    e3:ae:4a:7d:91:ed:33:4f:34:08:38:a2:7f:09:f4:
                    8c:2a:0c:c0:1a:04:f8:80:b1:69:e7:57:83:aa:c4:
                    e7:c9:ef:e1:a7:9a:d8:25:e9:7e:6c:7d:86:0c:cb:
                    93:9a:b3:ef:e1:c7:a6:fc:61:d7:6c:68:06:03:99:
                    14:8d:56:8b:62:41:75:e7:83:26:b3:b5:a1:d7:85:
                    15:29:27:33:92:73:60:c3:52:b4:5a:c3:09:87:a3:
                    ec:a6:d3:5c:31:4b:0d:f5:8c:62:fe:b6:75:1c:ae:
                    13:72:02:55:b5:d3:5e:91:58:e5:a1:bf:93:3c:5e:
                    95:5c:ea:c0:21:f4:88:fc:2d:96:e3:95:96:2a:36:
                    88:d7:b4:39:97:a4:02:58:ab:d8:dd:57:f0:c2:c7:
                    78:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FD:70:8D:A5:3D:8D:AC:53:E1:66:43:29:A8:CD:50:BD:DD:E4:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/07cc18a6-7b48-38c5-b3f3-487e721820d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f180:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:a4:76:ab:54:b1:b3:f6:29:91:47:51:35:5e:a0:3d:3a:5f:
         54:5a:09:2a:84:15:82:08:a3:5a:04:1a:e3:79:16:ba:6f:b9:
         e7:e6:96:cd:df:3b:45:2f:e1:06:07:3d:40:f9:ee:36:d1:ec:
         46:63:69:db:81:d7:df:b1:04:92:3c:6f:bc:17:9a:0a:b4:44:
         bc:a4:18:5f:84:78:03:8a:1e:6e:a9:26:ef:14:66:88:08:4d:
         1d:2a:55:08:6b:4f:52:de:5e:cd:bf:80:9a:19:42:b9:2a:c8:
         c2:50:5a:10:09:49:f6:de:1c:09:81:3a:4a:41:e1:34:98:4e:
         0b:5d:3f:d4:b7:4d:c7:33:69:6b:a2:c4:98:4f:26:e5:72:13:
         b7:1d:75:59:11:41:48:95:1c:4c:dd:76:e0:06:0a:fd:6c:21:
         29:cd:fa:51:f1:6d:0d:02:21:e6:06:ab:63:82:7a:fe:32:d9:
         8b:6c:f6:20:6a:fe:c8:7b:92:a8:fd:52:8f:f1:58:32:7b:0e:
         61:eb:73:b6:da:fd:fd:32:53:93:57:db:5c:35:f3:37:e5:ff:
         ad:f3:9f:67:f6:f2:e9:89:19:20:4a:8a:da:e0:9c:71:19:9f:
         9d:ba:24:eb:58:8e:39:d6:a5:5a:4b:fb:3c:b1:d2:55:1b:a5:
         b6:29:ee:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----