Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/b5e334a0-1d62-362d-865c-405c19da1c49.roa
File:                     b5e334a0-1d62-362d-865c-405c19da1c49.roa (raw, json)
Hash identifier:          Fg8YfPmvwixdvYloTmKJrU/hYv4SCFI1Z0V4+1sAtt4=
Subject key identifier:   8C:D5:57:A8:DB:5F:7F:25:17:07:DD:48:2B:22:B9:FF:5C:86:6C:23
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285844FA3D7EC6C831032935F75E00
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/b5e334a0-1d62-362d-865c-405c19da1c49.roa
Signing time:             Thu 22 Feb 2024 16:15:08 +0000
ROA not before:           Thu 22 Feb 2024 16:15:08 +0000
ROA not after:            Wed 22 May 2024 15:15:08 +0000
asID:                     11232
IP address blocks:        2001:48f8::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 07 May 2024 16:17:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fa:3d:7e:c6:c8:31:03:29:35:f7:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Feb 22 16:15:08 2024 GMT
            Not After : May 22 15:15:08 2024 GMT
        Subject: CN=4a80edea-98e6-4e47-a9d9-f8c4037bf589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:06:f9:97:84:1c:78:01:ff:c7:0a:fe:09:f2:
                    f7:dd:56:18:fe:77:20:3b:f3:8b:cf:53:61:a0:72:
                    31:f8:ba:43:4d:53:48:56:ab:c3:4b:c8:d3:58:10:
                    8a:11:fb:77:bc:c8:71:41:63:41:40:5b:0e:33:f5:
                    f2:6b:de:03:2a:d5:b2:1b:ef:8d:de:cc:95:a5:e6:
                    d1:9c:b2:5c:35:de:9e:68:ec:3f:e8:15:03:da:fb:
                    07:66:71:05:44:75:2f:57:d6:98:24:17:d9:f6:06:
                    6b:f3:35:1d:92:17:e5:81:9a:9d:97:63:9b:db:19:
                    a2:9d:a4:8b:bb:2b:05:bd:f4:ca:97:26:32:01:fc:
                    47:5d:fb:ea:c1:b6:ac:75:96:93:57:ff:9e:37:28:
                    9e:7a:44:9f:8c:e0:aa:0a:17:2c:81:02:79:ae:eb:
                    cb:d9:99:65:88:70:bb:19:e8:f7:15:43:78:52:f4:
                    e0:32:f2:55:22:88:26:ec:19:1f:a8:72:58:2b:1a:
                    5a:61:b0:40:c5:d2:49:a4:58:f1:b6:2c:cd:13:3c:
                    fd:ca:5f:b0:8b:be:6c:7f:0f:7d:a7:bd:44:4e:45:
                    f3:a5:66:16:8a:fa:eb:4a:1e:b6:16:26:ac:3b:2d:
                    12:91:f2:ac:51:02:b2:51:5f:e3:d6:fc:1b:95:f2:
                    76:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D5:57:A8:DB:5F:7F:25:17:07:DD:48:2B:22:B9:FF:5C:86:6C:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/b5e334a0-1d62-362d-865c-405c19da1c49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48f8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:a7:c4:67:49:a0:e4:e8:62:21:d8:b5:59:73:14:df:75:65:
         fe:bd:d5:82:0a:c6:a2:f7:5e:4d:36:8e:26:3a:87:7f:41:f5:
         15:7e:29:e3:bd:d8:4d:13:ef:a1:6a:fc:d6:9b:19:8d:a7:72:
         b6:c6:52:67:fb:ad:f4:3f:46:4c:39:b0:47:a8:12:71:43:f8:
         1a:75:2f:2f:98:0e:79:ca:1e:64:ef:1e:51:db:50:bb:9a:3a:
         d0:a4:c9:06:8b:1a:9e:26:7d:bf:4d:7d:57:2e:23:a6:1c:45:
         ab:8b:ce:3b:40:99:7d:1c:6f:f9:66:7d:bb:e6:ef:12:78:f9:
         c4:50:7f:5e:df:70:74:c5:96:15:df:28:76:72:34:ff:ae:6c:
         51:71:c0:3a:05:4c:ee:d9:32:a0:10:e2:bd:4e:d3:2d:9a:00:
         ad:fb:19:ba:ac:34:f3:cc:08:b9:19:2b:60:6d:42:36:6a:2e:
         d7:f1:b5:8e:a2:60:fe:8e:a3:b1:9f:b3:3a:3a:c1:a8:f2:c7:
         01:de:92:d5:3b:56:eb:7d:7e:a4:da:be:68:e2:c2:c6:87:d0:
         c8:1c:35:58:6f:3a:0d:53:c9:93:cd:2b:ec:da:7c:4a:44:0d:
         f2:1b:93:99:ad:96:b7:d5:3a:0a:91:7c:1a:2d:23:f5:5a:78:
         ef:25:45:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----