Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/548b702f-838a-3900-afe3-9a7245f4989e.roa
File:                     548b702f-838a-3900-afe3-9a7245f4989e.roa (raw, json)
Hash identifier:          44UsB4+R5dSe516GO0UFfYIdpxddAAzh6k3xXU648Bg=
Subject key identifier:   AE:F9:2B:42:2C:6C:2A:50:4C:92:1D:66:CF:DF:49:69:7B:87:58:08
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285847A606953336869B42DC0A6680
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/548b702f-838a-3900-afe3-9a7245f4989e.roa
Signing time:             Thu 24 Oct 2024 14:37:24 +0000
ROA not before:           Thu 24 Oct 2024 14:37:24 +0000
ROA not after:            Wed 22 Jan 2025 15:37:24 +0000
asID:                     22781
IP address blocks:        2607:fb50:1100::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 24 Oct 2024 15:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a6:06:95:33:36:86:9b:42:dc:0a:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Oct 24 14:37:24 2024 GMT
            Not After : Jan 22 15:37:24 2025 GMT
        Subject: CN=83af86ac-99fe-44d4-81d8-cd464b3c5faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ef:38:50:07:f5:ef:c7:66:f1:de:5d:0e:77:
                    3f:69:3f:64:82:c8:6c:ee:6e:fc:d6:5c:22:6d:8b:
                    b5:f3:26:34:cc:2f:3c:77:8e:a2:16:16:a2:11:19:
                    dc:ad:3f:d2:fd:64:f8:00:5e:e3:cb:25:19:aa:62:
                    fa:d3:a1:87:ea:ee:69:05:87:61:25:d1:f8:d7:0d:
                    fa:6b:b0:0c:b5:4c:c0:38:9b:a1:98:fe:be:7c:02:
                    91:8e:0e:0e:16:9f:72:49:0a:f7:7a:53:45:73:a4:
                    3e:e0:f6:15:5a:a3:7f:41:4e:25:ba:8c:99:c2:c8:
                    31:43:1c:91:bf:61:59:62:84:db:93:93:5e:44:f1:
                    8f:b0:ae:8c:85:3a:c0:89:e2:14:b8:a6:7f:55:c8:
                    e6:c6:d2:54:f4:66:e9:74:10:56:4a:08:ce:dc:c2:
                    7e:78:8e:c3:2d:0f:91:2a:ed:05:ad:a1:8a:b3:c4:
                    40:7d:5b:91:f1:c9:c7:2f:03:d7:52:a2:30:ab:ad:
                    47:49:e5:80:49:97:40:1c:41:24:5d:17:ef:2d:57:
                    7d:86:23:ce:0d:2b:d1:a4:82:e2:73:bf:26:5f:4d:
                    b8:4c:ef:14:24:89:6d:80:58:ba:81:ff:0f:93:19:
                    38:2d:e8:a2:2c:06:c9:40:75:4b:04:74:e7:ae:b0:
                    48:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F9:2B:42:2C:6C:2A:50:4C:92:1D:66:CF:DF:49:69:7B:87:58:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/548b702f-838a-3900-afe3-9a7245f4989e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb50:1100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:5f:00:8f:75:b3:a1:c4:87:86:08:bc:ec:55:1c:77:cf:23:
         1d:9f:6f:98:6b:5b:3a:e6:59:e4:30:cb:0b:3f:61:05:e1:1a:
         a1:19:75:34:d6:ae:53:25:ce:9d:5d:16:69:37:e4:fe:cb:7c:
         a6:57:d4:40:41:d1:fa:36:0e:13:d0:1c:bc:76:52:36:57:a5:
         ea:a9:4c:8f:0e:b1:12:0a:90:70:bf:d9:fa:bd:a7:d1:0f:5c:
         a7:02:b7:0d:f0:b6:06:57:99:06:d5:c4:31:4d:6b:4c:56:6f:
         85:89:9a:79:87:68:c7:ef:d5:71:0d:9f:9f:1d:3b:2d:43:8d:
         68:e4:75:4b:ac:a8:1b:74:43:e6:c8:af:52:fa:23:4c:00:c5:
         b7:e8:ba:d2:35:15:d4:d1:bc:1e:78:9d:05:ec:00:96:82:d1:
         6f:f3:c8:ff:00:d8:bd:fa:ac:41:92:9a:b0:45:31:4a:a2:27:
         ba:af:76:b3:af:b1:37:f3:eb:61:48:2f:7e:7e:09:d5:b4:f6:
         1d:ae:63:6b:a2:cb:d6:bc:aa:1e:5f:49:80:da:49:18:bb:0d:
         e8:0a:b6:7f:ec:8d:b5:cc:ea:30:28:b6:ed:5b:99:e8:58:29:
         da:67:b3:32:f8:7c:3e:ca:77:d2:ef:39:88:31:dd:c9:11:47:
         47:e2:b5:a0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEemBpUzNoabQtwKZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI0MTAyNDE0MzcyNFoXDTI1MDEyMjE1MzcyNFowLzEtMCsGA1UEAxMk
ODNhZjg2YWMtOTlmZS00NGQ0LTgxZDgtY2Q0NjRiM2M1ZmFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie84UAf178dm8d5dDnc/aT9kgshs7m781lwi
bYu18yY0zC88d46iFhaiERncrT/S/WT4AF7jyyUZqmL606GH6u5pBYdhJdH41w36
a7AMtUzAOJuhmP6+fAKRjg4OFp9ySQr3elNFc6Q+4PYVWqN/QU4luoyZwsgxQxyR
v2FZYoTbk5NeRPGPsK6MhTrAieIUuKZ/VcjmxtJU9GbpdBBWSgjO3MJ+eI7DLQ+R
Ku0FraGKs8RAfVuR8cnHLwPXUqIwq61HSeWASZdAHEEkXRfvLVd9hiPODSvRpILi
c78mX024TO8UJIltgFi6gf8Pkxk4LeiiLAbJQHVLBHTnrrBI8QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFK75K0IsbCpQTJIdZs/fSWl7h1gIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNTQ4YjcwMmYtODM4YS0z
OTAwLWFmZTMtOWE3MjQ1ZjQ5ODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf7UBEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAPF8Aj3WzocSHhgi87FUcd88jHZ9vmGtbOuZZ5DDLCz9hBeEaoRl1
NNauUyXOnV0WaTfk/st8plfUQEHR+jYOE9AcvHZSNlel6qlMjw6xEgqQcL/Z+r2n
0Q9cpwK3DfC2BleZBtXEMU1rTFZvhYmaeYdox+/VcQ2fnx07LUONaOR1S6yoG3RD
5sivUvojTADFt+i60jUV1NG8HnidBewAloLRb/PI/wDYvfqsQZKasEUxSqInuq92
s6+xN/PrYUgvfn4J1bT2Ha5ja6LL1ryqHl9JgNpJGLsN6Aq2f+yNtczqMCi27VuZ
6Fgp2mezMvh8Psp30u85iDHdyRFHR+K1oA==
-----END CERTIFICATE-----