Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6b616ee4-dcbd-37a4-ac99-298b3eddfbcf.roa
File:                     6b616ee4-dcbd-37a4-ac99-298b3eddfbcf.roa (raw, json)
Hash identifier:          /3l3dx3WNcRmkfFk9i+apCqgkNoLpYnzCkTLXdqXZL8=
Subject key identifier:   E8:53:F3:DD:2E:4D:FC:06:FD:71:83:2F:72:47:B2:72:FE:F6:1E:CD
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328583DF208E1D8C563C774F473B444
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6b616ee4-dcbd-37a4-ac99-298b3eddfbcf.roa
Signing time:             Fri 17 Dec 2021 14:41:54 +0000
ROA not before:           Fri 17 Dec 2021 14:41:54 +0000
ROA not after:            Tue 20 Aug 2024 04:00:00 +0000
asID:                     0
IP address blocks:        2620:74:e8::/46 maxlen: 46

Validation:               Failed, certificate revoked on Wed 08 May 2024 13:21:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f2:08:e1:d8:c5:63:c7:74:f4:73:b4:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec 17 14:41:54 2021 GMT
            Not After : Aug 20 04:00:00 2024 GMT
        Subject: CN=4462c372-9ebc-48a2-bbab-29a3b70c0b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fe:80:27:61:81:68:09:48:ad:24:a5:83:83:
                    a9:9e:5d:44:79:f5:38:9e:06:5a:f3:44:ae:15:ca:
                    3d:b3:18:5e:a9:32:f6:7b:f9:ed:c4:cb:7e:f9:3e:
                    ab:6e:aa:19:cd:b0:c8:08:bb:b4:40:f9:64:0e:70:
                    fd:f4:67:6d:26:91:7d:ae:f8:d6:b5:72:b6:a7:cf:
                    94:c0:78:fc:15:5a:b3:c9:39:dd:36:1e:8c:20:31:
                    c6:01:12:67:52:9c:2a:ce:1f:3d:45:9e:51:71:ce:
                    0d:f2:8e:d2:db:fd:84:8e:65:6c:9f:76:c9:7f:4e:
                    9b:a2:5c:df:78:50:f6:e9:a2:55:c4:ac:dd:04:4c:
                    6d:f4:ef:05:81:25:34:8a:69:d5:53:82:82:0f:d7:
                    91:51:30:88:08:aa:d4:c3:69:18:db:68:5d:88:65:
                    9d:05:2f:f9:81:f9:6e:71:7f:de:2f:ee:ac:56:fa:
                    df:66:82:a7:14:2e:8b:a9:8c:76:d2:f8:b1:ac:d2:
                    c9:ca:7b:d6:91:0b:30:2a:12:11:9b:43:f7:e0:19:
                    12:64:fd:75:83:22:f5:c6:e2:e0:c5:a5:3a:38:b3:
                    6a:0e:04:ec:5f:e0:56:1c:07:b6:e4:21:2e:bc:16:
                    d6:f3:24:72:8a:35:7b:0a:da:e8:23:02:fc:61:55:
                    60:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:53:F3:DD:2E:4D:FC:06:FD:71:83:2F:72:47:B2:72:FE:F6:1E:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6b616ee4-dcbd-37a4-ac99-298b3eddfbcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:e8::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:1b:62:d1:a4:71:ea:fe:bb:61:6d:d4:3b:b4:f8:92:19:e5:
         9a:1f:9e:ed:d4:08:1d:a3:d9:6a:78:63:18:a0:3c:c8:f1:cf:
         e9:33:be:e1:9a:2c:53:29:a9:3a:2c:51:4e:19:61:e8:5c:d6:
         ad:e0:d2:34:e6:5c:23:95:f7:b4:0b:64:a9:3a:2b:f3:61:1d:
         57:9c:a9:e9:48:0e:cd:2e:05:61:09:68:23:db:9c:bb:87:0f:
         5f:a6:a7:6a:df:5c:dc:4f:f5:d2:b6:6e:33:4f:14:cc:29:36:
         bd:10:a4:e2:ed:89:2c:87:4c:e0:59:b2:68:20:30:9c:fd:a1:
         9a:bb:46:a5:ea:23:92:4b:8f:d1:d1:4d:c3:9a:a5:03:23:fa:
         cc:e3:de:34:37:74:d4:33:25:01:1b:40:20:3e:72:e1:2f:34:
         b3:36:04:51:5a:60:2c:a7:88:ee:34:92:22:f6:ce:85:75:4a:
         17:46:3d:12:8d:75:82:62:fe:10:81:de:db:2a:25:d9:f2:94:
         94:7b:2c:5c:b4:5d:b1:02:59:55:c1:fa:15:fd:7d:92:15:7e:
         ef:ee:d1:64:15:b3:19:2e:79:ce:0e:87:c6:0c:07:46:9b:7e:
         3c:d5:e1:4b:86:36:ae:2d:1f:9d:a3:fc:e4:fe:52:fe:57:4a:
         b7:88:43:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----