Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/cd8bff4e-8921-3c1b-b5bc-300d3bc2a26c.roa
File:                     cd8bff4e-8921-3c1b-b5bc-300d3bc2a26c.roa (raw, json)
Hash identifier:          GWz+qlPPhvEk+qyJQea3HmURwG2tCZIEYv1LJzUzp8s=
Subject key identifier:   80:D3:CB:41:83:F6:CB:0E:27:F4:B6:5E:A7:BC:BC:D0:C1:39:88:52
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584793B11936BE97A7D7E1B0EB80
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/cd8bff4e-8921-3c1b-b5bc-300d3bc2a26c.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54203
IP address blocks:        2606:b300:9600::/40 maxlen: 40

Validation:               Failed, certificate revoked on Fri 18 Oct 2024 18:28:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:19:36:be:97:a7:d7:e1:b0:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=34d2db0c-f5c5-4412-8199-aba5d1ca880e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dc:a8:42:8f:41:92:13:dd:45:c1:c0:f9:1c:
                    e4:08:29:9e:24:57:cd:c8:46:d2:25:6a:bd:b2:29:
                    66:09:3a:cb:e6:96:84:fa:a7:38:05:56:0e:46:44:
                    d5:d5:df:00:70:9d:fe:a3:c7:98:f1:cd:73:8d:11:
                    78:af:fd:22:97:ff:1b:69:4a:e1:50:c0:ea:93:ba:
                    63:48:2c:a5:f1:81:4c:24:b6:fa:a0:4d:19:8f:0e:
                    1e:04:f3:1a:d8:e0:21:96:2e:89:5b:82:56:ad:fa:
                    77:26:1a:fa:71:67:b0:57:2b:86:7d:23:af:3b:b7:
                    bd:02:c1:e2:2a:e7:77:02:a4:a2:42:52:a4:4c:e6:
                    c0:b3:d0:71:14:ba:04:a1:b4:48:b5:60:49:84:31:
                    c7:33:67:a4:86:d0:36:de:91:97:9f:c6:55:e0:44:
                    5e:34:a2:bf:9a:06:24:fe:ae:30:ac:24:4c:5a:81:
                    ce:2a:19:04:a5:dd:f6:54:4e:d4:b6:17:69:a8:e7:
                    ec:a1:64:c1:1d:3f:51:7f:c7:a6:bb:ae:e8:d7:59:
                    1e:c0:c5:f2:7d:8c:43:ca:9e:6d:f2:58:8c:04:f3:
                    f0:37:a5:ad:80:d3:cb:cc:8e:53:e4:ef:1e:14:c5:
                    47:75:e2:54:94:bc:68:3a:c2:ce:01:88:bf:69:a8:
                    f1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D3:CB:41:83:F6:CB:0E:27:F4:B6:5E:A7:BC:BC:D0:C1:39:88:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/cd8bff4e-8921-3c1b-b5bc-300d3bc2a26c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b300:9600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:cd:08:8b:2a:87:81:ac:4d:e2:ef:88:79:93:c4:ae:61:0b:
         ea:0f:5b:0b:b4:f6:e9:fa:0c:68:d5:c6:3d:64:84:61:a2:36:
         84:3e:38:3f:02:35:8a:93:2c:c5:d4:73:bf:93:36:aa:5e:fc:
         41:ca:e7:8c:c3:0b:c3:22:ab:bf:21:60:6b:44:55:cb:a6:ed:
         c0:e8:97:54:bc:c3:ca:f4:73:a1:4a:27:e4:a3:c1:38:87:d2:
         ec:0f:8b:d8:a1:54:62:63:b5:20:59:f1:49:d6:63:11:e0:f5:
         dc:2a:99:e2:b8:42:b7:72:a9:06:9e:4d:28:08:29:88:1a:8f:
         90:c8:ce:d0:05:cc:c9:81:c7:2f:94:e7:2c:49:d8:79:df:81:
         03:e5:5a:9f:d1:b3:fc:6c:3e:95:18:a4:0e:fc:ae:db:09:2e:
         50:9e:d3:3c:4c:3c:0b:00:f5:12:e7:1d:05:69:a7:e3:d8:0f:
         34:cd:29:2a:57:fe:30:6d:b2:59:77:38:53:0f:21:43:4a:4d:
         1f:bd:9b:54:25:d2:59:e6:3b:50:f7:4a:00:2c:3c:95:98:ed:
         cc:a2:f6:20:98:02:51:38:1e:69:8a:d8:4e:82:2f:30:b6:39:
         33:8f:3c:3d:51:e8:d4:0f:2d:c9:b4:d1:19:60:eb:df:57:ee:
         26:c8:fe:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----