Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/925caa5a-1d51-3862-9c52-5f0dd90c54f5.roa
File:                     925caa5a-1d51-3862-9c52-5f0dd90c54f5.roa (raw, json)
Hash identifier:          ugmYbw/WD7yY5iK7IYem15m7FNbQYtYqj2ETkhqa40A=
Subject key identifier:   76:E9:86:76:91:30:11:B4:4E:A0:A3:E4:BA:75:57:CB:AB:72:B7:9C
Certificate issuer:       /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
Certificate serial:       010D0C9F432858469E04E20909F9A02FB5070B00
Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/925caa5a-1d51-3862-9c52-5f0dd90c54f5.roa
Signing time:             Mon 22 Jul 2024 01:00:27 +0000
ROA not before:           Mon 22 Jul 2024 01:00:27 +0000
ROA not after:            Sun 20 Oct 2024 01:00:27 +0000
asID:                     16611
IP address blocks:        2606:ae40::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 27 Aug 2024 17:32:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:9e:04:e2:09:09:f9:a0:2f:b5:07:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
        Validity
            Not Before: Jul 22 01:00:27 2024 GMT
            Not After : Oct 20 01:00:27 2024 GMT
        Subject: CN=c594bc51-a07e-438c-be46-0e25d9cc80d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b2:6b:bc:fe:a1:65:40:db:60:e8:10:89:07:
                    bb:26:55:89:65:49:a6:5d:eb:e1:6c:72:49:4b:f4:
                    52:43:36:a7:22:ba:9f:1e:59:7c:a0:cb:49:3e:63:
                    61:a6:e9:d7:c9:51:66:ab:f0:d7:d3:9c:07:47:68:
                    1e:e4:5b:ac:65:1e:6d:ba:f3:41:8c:27:40:9f:c0:
                    ca:fa:6c:4f:a4:95:38:02:52:79:92:6f:f1:73:7d:
                    50:a5:8a:79:03:3d:1a:64:42:05:5f:ba:a4:64:d1:
                    43:a2:fc:78:97:2c:d6:d9:08:33:74:5e:04:80:bd:
                    67:8f:d9:72:86:a6:85:ab:ad:e0:1f:aa:38:68:97:
                    d3:0b:df:73:9e:d9:17:ca:6b:86:3f:63:24:8e:81:
                    33:ff:a8:46:4c:84:10:51:28:a6:c4:69:ed:c8:b9:
                    c4:04:5d:93:53:1d:bb:3a:12:c6:c9:1a:5a:be:51:
                    4a:15:f3:e2:dd:63:16:f0:76:25:c9:0f:40:00:f0:
                    1f:bf:30:23:70:2d:d0:e4:0c:7d:66:f6:23:77:89:
                    9c:d5:71:a5:56:c7:19:95:c4:a6:7a:99:9d:42:ea:
                    69:02:ff:36:8d:9f:07:6f:23:0d:d6:96:e3:92:fc:
                    fd:18:1f:72:6b:d6:64:75:b2:9c:0a:8b:94:74:63:
                    72:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E9:86:76:91:30:11:B4:4E:A0:A3:E4:BA:75:57:CB:AB:72:B7:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/925caa5a-1d51-3862-9c52-5f0dd90c54f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl

            X509v3 Authority Key Identifier:
                keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ae40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:06:34:47:24:5a:fd:ec:10:75:02:0e:95:3e:af:e0:5e:07:
         2d:81:9a:33:4b:31:54:8f:77:e2:68:86:c1:9e:2d:2e:9c:6d:
         40:52:85:69:67:e8:16:77:5a:53:64:4e:df:a6:46:54:b7:db:
         dd:90:d3:93:58:3f:09:2b:b4:2d:48:6e:91:4d:c2:59:2e:1b:
         f6:9f:1c:55:15:ae:bb:3d:14:02:38:36:02:84:cb:17:a9:70:
         44:2a:a8:a5:31:91:1e:a3:b4:18:9a:23:d4:90:fc:62:a1:44:
         14:69:6f:d5:f3:7d:a8:da:b2:41:34:0b:ed:d1:e5:5d:0c:b2:
         82:5b:78:cb:55:15:8e:0b:02:4a:a2:d9:b0:ae:14:2d:49:e5:
         3a:03:37:ad:b5:34:0e:4b:86:99:14:02:34:8c:4a:8e:7f:bf:
         d2:ff:41:28:30:e8:05:92:3e:15:69:82:b7:5c:07:f8:64:e6:
         28:92:ca:9d:49:f1:ac:99:7c:6c:22:0e:f5:21:bb:e8:e9:b7:
         fe:b9:ee:2a:a7:90:07:88:fd:7e:75:04:1c:35:37:d9:53:12:
         10:1f:b2:71:e5:73:d5:93:fc:bd:a5:e0:ab:64:92:ff:53:c8:
         a7:c4:0e:3a:0c:7a:12:65:e5:41:d8:5c:44:f0:b2:5a:bf:95:
         75:55:39:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----