Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/bffb1766-780e-3f9b-9528-3a7c35803d05.roa
File:                     bffb1766-780e-3f9b-9528-3a7c35803d05.roa (raw, json)
Hash identifier:          N+TVzWsLmQOLt8yE2MRulNTkgfmkEceYG3FO/nMEAyk=
Subject key identifier:   CC:98:F9:8E:5E:D4:17:0C:8C:55:24:70:8A:C3:C2:78:66:82:25:94
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285846B45A5F056B8A10D32263F280
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/bffb1766-780e-3f9b-9528-3a7c35803d05.roa
Signing time:             Tue 30 Jul 2024 01:00:28 +0000
ROA not before:           Tue 30 Jul 2024 01:00:28 +0000
ROA not after:            Mon 28 Oct 2024 01:00:28 +0000
asID:                     54203
IP address blocks:        2606:b300:a800::/40 maxlen: 40

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 18:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b4:5a:5f:05:6b:8a:10:d3:22:63:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jul 30 01:00:28 2024 GMT
            Not After : Oct 28 01:00:28 2024 GMT
        Subject: CN=10c6de46-acd5-425a-af55-fec00d5cc73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f3:3a:50:b2:fe:8f:29:25:30:39:6a:74:24:
                    dd:04:d6:f3:cc:c1:f4:90:f2:22:fd:4c:40:fd:07:
                    da:d7:d1:84:35:14:97:66:b3:d7:74:bb:c1:19:c0:
                    6b:8c:93:5c:e7:47:dd:05:60:0e:d6:17:c7:fc:d3:
                    dc:13:5c:90:ff:2c:a3:05:1e:db:4d:25:da:c2:3a:
                    34:52:83:5f:18:10:8a:16:87:ee:ea:eb:36:76:8d:
                    4f:92:ff:3b:06:ad:69:ad:7f:ef:b3:3e:d5:e1:5e:
                    1c:2d:40:ae:52:4f:32:7d:10:13:4e:0e:17:88:9e:
                    d9:65:5a:60:73:4a:b1:ca:a6:75:2b:f5:79:3c:75:
                    8b:c1:eb:3f:79:df:21:12:65:f6:65:9e:7d:24:de:
                    c4:6e:e1:eb:6b:9b:a7:6a:b1:7b:59:05:06:f2:86:
                    98:15:76:53:a7:4d:60:04:fc:c3:03:c3:95:bf:dd:
                    ab:09:b4:14:ae:1c:01:4b:e5:7e:3e:3e:98:10:64:
                    54:cc:ad:fb:21:aa:42:ff:08:01:dd:69:b5:05:8b:
                    29:a6:9a:cb:20:1f:21:90:e3:8a:6c:a8:b3:2f:34:
                    a6:7a:27:bf:c7:e3:2a:eb:7b:35:c6:40:18:38:59:
                    ae:e5:eb:8f:23:fe:93:9f:84:7d:e7:16:72:75:af:
                    dd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:98:F9:8E:5E:D4:17:0C:8C:55:24:70:8A:C3:C2:78:66:82:25:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/bffb1766-780e-3f9b-9528-3a7c35803d05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b300:a800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:22:ec:86:d1:7f:c7:06:5d:be:33:00:53:de:67:cb:0a:7d:
         29:59:20:37:f7:60:60:10:11:ec:c8:45:a8:67:5b:02:29:84:
         49:02:7b:ae:f0:08:00:a1:4b:9a:04:bc:8a:f9:2d:fe:45:04:
         a1:98:fb:b7:46:15:0b:89:a9:e2:98:c5:61:99:2a:7b:7e:30:
         dc:6a:65:0d:e8:2c:9b:fa:21:f0:50:75:e8:48:c5:92:96:1a:
         50:33:f2:02:f2:e4:b9:1e:cf:c7:95:45:ff:db:1a:d2:ce:7f:
         14:d1:90:b2:e1:7e:99:12:9a:74:ce:c8:2d:4a:5f:f2:07:d0:
         1d:97:52:16:cd:f1:03:01:de:a8:06:5a:84:e9:06:a4:e8:2f:
         09:7c:29:92:34:6c:5d:93:28:0f:0c:12:c2:5e:2b:37:99:51:
         ba:d0:34:b3:0b:a8:3d:b8:20:b1:1f:57:31:c1:51:ad:05:69:
         0a:a0:ad:e8:76:d0:f9:b8:c1:25:e8:3a:96:45:01:d6:21:92:
         a6:77:7b:21:71:e8:44:86:4b:c3:7a:89:e3:c8:25:28:71:00:
         2f:58:f5:dc:6a:56:f0:b2:7d:07:e4:5a:71:ab:db:06:ea:6f:
         de:2c:84:bc:9d:29:8e:e8:7c:5b:58:a3:26:0b:2f:c7:7e:95:
         27:61:ac:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----