Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/cd4d3d44-a27b-3aba-9692-eb9f153902b4.roa
File:                     cd4d3d44-a27b-3aba-9692-eb9f153902b4.roa (raw, json)
Hash identifier:          M9Rg/PzJVQdFl6+S+CUM/tyXeQNh7rExgqtHzjzYcMw=
Subject key identifier:   DC:36:DB:99:16:E2:86:CC:03:DE:07:F5:54:7B:FA:AB:D4:30:BC:8E
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285847A605ED390D7E845EDD938700
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/cd4d3d44-a27b-3aba-9692-eb9f153902b4.roa
Signing time:             Thu 24 Oct 2024 14:36:05 +0000
ROA not before:           Thu 24 Oct 2024 14:36:05 +0000
ROA not after:            Wed 22 Jan 2025 15:36:05 +0000
asID:                     22781
IP address blocks:        2607:fb50:900::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 24 Oct 2024 15:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a6:05:ed:39:0d:7e:84:5e:dd:93:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Oct 24 14:36:05 2024 GMT
            Not After : Jan 22 15:36:05 2025 GMT
        Subject: CN=31f4a7b7-5e2e-48c7-a656-f07e27787301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d8:20:f6:66:fc:21:8d:2b:64:d2:88:02:64:
                    64:45:54:86:d5:5c:7e:ca:45:47:16:ab:04:43:46:
                    a8:b2:6c:b2:d6:e6:94:4a:76:72:56:5d:66:f3:24:
                    31:ca:03:4c:54:b8:aa:99:91:83:0a:b2:48:ec:f2:
                    46:7e:da:d4:78:7e:ff:53:2f:ff:f2:bd:83:44:66:
                    6d:8b:a9:9d:67:61:7f:d3:29:cb:8a:ff:47:73:6e:
                    22:f6:10:b2:8d:a2:a1:a9:7a:a9:e3:a9:8a:5e:07:
                    8f:95:6d:2c:0a:8b:54:bc:5c:65:7c:80:cb:d8:2c:
                    dc:7c:53:80:8b:70:62:76:a3:68:3e:c2:41:31:84:
                    40:88:f3:70:4c:49:d5:56:83:46:f9:ee:3e:d9:3f:
                    a0:49:02:36:83:b2:53:b9:ec:d0:ab:ed:06:df:4f:
                    f1:66:8a:07:54:a0:5b:fd:2d:33:dc:f7:fe:c6:51:
                    47:bc:18:1e:fd:34:14:77:75:8a:5f:3d:cb:d8:21:
                    6a:05:0b:ea:3e:38:00:4d:6b:5b:e5:b3:e4:ae:32:
                    10:97:11:0e:a5:2a:87:3d:28:47:bf:79:c3:bf:22:
                    78:45:cc:15:92:b5:84:b0:3f:14:cd:69:45:14:d8:
                    c5:c2:82:9a:b8:e8:5c:05:4b:89:b5:e5:31:05:4d:
                    14:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:36:DB:99:16:E2:86:CC:03:DE:07:F5:54:7B:FA:AB:D4:30:BC:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/cd4d3d44-a27b-3aba-9692-eb9f153902b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb50:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:04:7e:61:96:13:d0:12:04:14:62:26:aa:b3:e1:b6:12:ac:
         50:59:73:10:01:19:78:bc:80:95:28:55:22:37:60:01:dd:99:
         17:70:41:1c:a9:2e:87:43:c3:e5:85:4e:f9:17:69:aa:45:fb:
         a7:c4:f4:72:3e:27:53:d6:e1:83:f4:bf:47:fa:12:4d:88:c7:
         72:63:a2:63:77:10:2b:1f:a0:23:d8:20:6c:20:14:85:79:9c:
         f9:b3:18:29:7d:48:63:f5:1f:96:57:0e:82:47:51:83:ae:20:
         0c:4f:bf:2a:83:df:26:45:79:46:7e:e9:4e:55:2a:c3:01:ab:
         67:48:40:be:73:b4:5e:60:7a:f4:30:41:54:d9:57:74:a6:97:
         28:dd:82:b3:00:f5:31:f9:4f:24:81:9e:9d:14:3b:72:c0:38:
         ac:42:ee:20:28:26:b5:e5:57:f1:55:74:15:80:0b:91:cd:3c:
         03:54:2d:df:72:af:d0:09:13:5f:c1:81:34:1b:42:18:25:33:
         47:aa:9a:09:1a:36:93:dd:4a:c5:5b:a7:87:54:b4:2b:68:37:
         11:50:30:6e:b2:e6:f6:de:c6:3e:e5:2d:06:fa:75:b9:cd:fd:
         b3:cb:e3:e4:04:ae:b6:1d:07:2d:11:a7:57:9f:3c:31:9e:9c:
         4a:c6:17:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----