Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8165de14-ec5b-3d8a-acee-5f58a94bb0de.roa
File:                     8165de14-ec5b-3d8a-acee-5f58a94bb0de.roa (raw, json)
Hash identifier:          KWFM2RSIVpaHD1Fmn+aLlB25lx18EER+SkHF/mpt3Tg=
Subject key identifier:   62:A0:B7:2A:70:0C:DB:DF:7F:22:A4:71:7D:FB:9F:C9:F7:A3:0A:1C
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285846B2F51C427E8A1FE90B55EA00
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8165de14-ec5b-3d8a-acee-5f58a94bb0de.roa
Signing time:             Mon 29 Jul 2024 13:00:38 +0000
ROA not before:           Mon 29 Jul 2024 13:00:38 +0000
ROA not after:            Sun 27 Oct 2024 13:00:38 +0000
asID:                     54203
IP address blocks:        2606:b300::/33 maxlen: 33

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 17:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b2:f5:1c:42:7e:8a:1f:e9:0b:55:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jul 29 13:00:38 2024 GMT
            Not After : Oct 27 13:00:38 2024 GMT
        Subject: CN=92edc205-eea7-4614-9e40-f02bfa987285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:db:54:f2:bd:d2:16:ec:76:d4:07:15:e6:
                    fb:39:c4:89:d1:b3:25:c0:0b:33:49:6a:e7:aa:63:
                    1a:8b:bc:db:85:59:02:11:b0:82:fc:30:9a:a2:05:
                    c0:62:70:84:58:a0:ca:ef:7d:6c:1f:a2:6a:5a:e3:
                    92:24:d2:d6:0d:3a:85:fd:72:ce:54:fb:91:d6:89:
                    e3:0d:1f:2f:0a:2d:6b:40:51:cc:a7:0b:2c:96:6d:
                    fc:2a:80:14:af:f2:d7:e4:83:63:fe:4f:70:e9:82:
                    2c:4e:3a:bf:76:b1:02:5c:25:58:48:13:b2:06:2f:
                    be:6d:b5:d6:07:41:1d:f9:97:77:44:69:0a:e2:08:
                    d6:2e:97:a9:bc:6e:e3:d3:f7:4d:69:11:2b:9c:40:
                    a8:d2:ca:d4:3a:37:30:fc:e4:34:e9:e4:06:6e:08:
                    58:2d:50:01:8f:d9:15:29:cf:f3:e8:f1:60:11:33:
                    b9:b9:34:01:20:1c:51:e3:4a:10:a0:fc:3b:27:e5:
                    ed:03:11:c7:c6:73:2a:1d:99:8a:96:44:a4:f7:36:
                    cb:57:fd:61:2c:26:62:e0:0b:e5:28:c7:7c:4d:70:
                    9b:c8:3f:14:65:6a:67:1a:d7:83:84:71:6f:c7:b4:
                    c2:7d:2a:43:1d:58:24:a5:b6:26:57:db:be:a1:4f:
                    b6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A0:B7:2A:70:0C:DB:DF:7F:22:A4:71:7D:FB:9F:C9:F7:A3:0A:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8165de14-ec5b-3d8a-acee-5f58a94bb0de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b300::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:50:7f:d1:b1:c4:80:de:5a:e7:43:5c:a2:a9:ca:af:9a:a3:
         81:1e:fa:47:03:dd:0e:e2:23:df:0e:e4:92:08:61:43:34:df:
         25:2e:45:90:37:ef:51:46:17:b1:43:f0:9c:7f:98:b5:8d:a9:
         a6:73:eb:10:b4:d3:d9:25:b1:a6:7f:03:24:7b:b6:60:4e:8a:
         2e:3a:48:6d:47:b4:46:73:c6:fb:21:b4:7c:7d:26:97:5a:9c:
         54:87:e5:42:41:81:c3:b8:26:c1:b4:5f:66:10:34:25:45:8f:
         99:31:c0:c1:6f:5e:a2:24:b9:64:af:38:56:04:ce:79:7c:22:
         f3:59:67:00:18:cd:59:b4:46:6d:2c:a1:35:88:e1:50:e5:ff:
         83:84:8c:b4:4b:3d:c4:03:68:50:05:44:8c:c2:88:00:89:9f:
         9b:22:a0:aa:a8:9e:37:3c:4f:93:ae:0f:36:fc:d7:ed:41:3f:
         1f:f2:32:a6:dc:ac:27:fd:ca:11:b7:fb:ed:80:04:4d:05:d2:
         72:3f:f8:7a:61:a3:da:26:43:56:5f:5a:96:50:6a:b3:17:eb:
         dd:45:14:c8:3b:92:20:4c:40:63:37:b4:4f:8d:a1:63:e4:bd:
         d2:93:c1:9d:f2:e8:db:18:40:9f:ed:3c:5d:84:05:7f:b3:71:
         35:71:b6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----