Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/4666257d-c378-352c-8884-a425e6f961eb.roa
File:                     4666257d-c378-352c-8884-a425e6f961eb.roa (raw, json)
Hash identifier:          semMm6A8TWFhKdRovkz0tUH6B4pudM73TFE9hN+4JU8=
Subject key identifier:   70:E2:40:D7:81:A0:A5:DE:A0:0F:44:FB:0C:5B:AF:02:D9:FA:14:B5
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584538AD49B631FE181F17D1B0C0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/4666257d-c378-352c-8884-a425e6f961eb.roa
Signing time:             Sat 16 Mar 2024 01:00:25 +0000
ROA not before:           Sat 16 Mar 2024 01:00:25 +0000
ROA not after:            Fri 14 Jun 2024 01:00:25 +0000
asID:                     206150
IP address blocks:        2606:f180:e::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 29 Apr 2024 14:42:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:38:ad:49:b6:31:fe:18:1f:17:d1:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Mar 16 01:00:25 2024 GMT
            Not After : Jun 14 01:00:25 2024 GMT
        Subject: CN=68975720-b07c-42de-a88c-7529cde6c9a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:da:1c:aa:eb:e8:d5:5c:e9:96:ea:e0:81:a9:
                    d7:9d:02:f8:8b:50:c1:ff:80:9d:c3:b7:f9:76:37:
                    f1:e6:ae:80:71:ef:f5:08:14:6b:14:46:a3:86:ed:
                    ba:5a:16:82:2b:0d:89:12:5b:a6:ce:28:ac:a0:4f:
                    17:b0:b0:fd:75:61:60:e5:de:80:4c:d7:a8:5c:d9:
                    45:2e:19:cb:ba:58:44:ff:2e:fd:63:15:9d:60:b9:
                    2d:bf:ae:00:1f:5d:48:4f:19:a7:6a:8c:c8:07:af:
                    cf:35:32:1a:9e:36:8a:10:0a:dc:84:57:10:85:49:
                    ee:a1:18:8a:df:a4:cf:26:db:69:a1:38:d1:16:24:
                    b4:89:74:46:61:fe:83:d7:28:97:58:90:ca:36:0b:
                    da:06:e2:16:0e:fe:7a:c1:b9:e1:61:d7:88:4e:b2:
                    a4:10:c9:29:70:0b:e4:94:f2:cb:da:b5:c4:4f:48:
                    3c:f9:14:a3:b7:64:74:c8:22:3c:57:9a:19:8e:25:
                    9b:70:2a:92:f5:15:9a:5d:d9:d6:4d:e1:3f:98:83:
                    be:c7:84:72:fd:c4:66:0f:c5:89:b4:98:07:7d:00:
                    bb:36:79:81:54:8f:a1:20:c0:ce:b3:21:da:e6:de:
                    d2:65:2a:3a:1b:04:df:c0:21:de:0a:76:a0:58:9c:
                    5d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E2:40:D7:81:A0:A5:DE:A0:0F:44:FB:0C:5B:AF:02:D9:FA:14:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/4666257d-c378-352c-8884-a425e6f961eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f180:e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:cd:2e:c3:9e:13:59:18:d4:8f:8a:eb:a6:62:ef:55:02:75:
         0e:63:9f:3d:3b:d6:db:5a:72:cb:1a:2c:98:e3:1f:40:7f:1c:
         0e:97:c3:11:5a:25:12:3d:12:8f:fd:35:f6:b0:4d:9b:cc:20:
         05:da:1f:c9:46:31:21:ad:75:5f:fc:78:33:ef:a5:85:14:f2:
         30:db:bb:a9:15:7e:73:a0:c2:26:ca:51:c1:a2:1a:e9:04:ca:
         77:b3:20:b2:ba:b0:1b:19:c8:a3:5f:aa:ef:a6:20:b1:45:1c:
         b5:a8:98:42:e3:dd:ce:80:12:56:6f:cf:e8:e6:5e:c2:4f:a4:
         65:87:7c:2d:2a:c5:21:c3:65:25:47:ad:f0:c1:20:34:c9:ab:
         4a:cf:de:fd:fd:20:6b:33:b8:dc:2d:47:eb:d9:f1:d1:25:4e:
         69:c5:3a:f6:ff:cd:18:6c:37:43:14:2c:cb:62:eb:ab:ba:2e:
         50:dc:0e:21:53:ed:cc:5b:2b:e8:1f:23:e7:0f:43:1f:27:01:
         f4:c1:5b:40:b9:dc:7b:db:6c:39:1f:5f:71:d8:2b:ab:ae:ae:
         bb:9e:82:8f:90:4e:a3:8e:59:59:94:0f:f2:bc:bd:14:01:03:
         f9:61:d0:eb:6d:7e:0b:f2:31:cf:30:f4:c0:6c:99:8c:86:d5:
         2d:c2:de:18
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEU4rUm2Mf4YHxfRsMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI0MDMxNjAxMDAyNVoXDTI0MDYxNDAxMDAyNVowLzEtMCsGA1UEAxMk
Njg5NzU3MjAtYjA3Yy00MmRlLWE4OGMtNzUyOWNkZTZjOWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNocquvo1VzplurgganXnQL4i1DB/4Cdw7f5
djfx5q6Ace/1CBRrFEajhu26WhaCKw2JElumziisoE8XsLD9dWFg5d6ATNeoXNlF
LhnLulhE/y79YxWdYLktv64AH11ITxmnaozIB6/PNTIanjaKEArchFcQhUnuoRiK
36TPJttpoTjRFiS0iXRGYf6D1yiXWJDKNgvaBuIWDv56wbnhYdeITrKkEMkpcAvk
lPLL2rXET0g8+RSjt2R0yCI8V5oZjiWbcCqS9RWaXdnWTeE/mIO+x4Ry/cRmD8WJ
tJgHfQC7NnmBVI+hIMDOsyHa5t7SZSo6GwTfwCHeCnagWJxd5QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHDiQNeBoKXeoA9E+wxbrwLZ+hS1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvNDY2NjI1N2QtYzM3OC0z
NTJjLTg4ODQtYTQyNWU2Zjk2MWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgbxgAAO
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMXNLsOeE1kY1I+K66Zi71UCdQ5jnz071ttacssaLJjjH0B/HA6X
wxFaJRI9Eo/9NfawTZvMIAXaH8lGMSGtdV/8eDPvpYUU8jDbu6kVfnOgwibKUcGi
GukEynezILK6sBsZyKNfqu+mILFFHLWomELj3c6AElZvz+jmXsJPpGWHfC0qxSHD
ZSVHrfDBIDTJq0rP3v39IGszuNwtR+vZ8dElTmnFOvb/zRhsN0MULMti66u6LlDc
DiFT7cxbK+gfI+cPQx8nAfTBW0C53HvbbDkfX3HYK6uurruego+QTqOOWVmUD/K8
vRQBA/lh0OttfgvyMc8w9MBsmYyG1S3C3hg=
-----END CERTIFICATE-----