Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/084050a6-bfbb-3588-8c3b-a945764df76e.roa
File:                     084050a6-bfbb-3588-8c3b-a945764df76e.roa (raw, json)
Hash identifier:          gpCPH3LxpgltR54HjxliwBH9poQLYrCR204urFxc0Jc=
Subject key identifier:   52:B6:D7:11:66:59:17:67:AA:3F:9E:FD:80:B9:D3:80:A5:D8:17:00
Certificate issuer:       /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial:       010D0C9F432858474E7D421776ED6408A7ECE700
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/084050a6-bfbb-3588-8c3b-a945764df76e.roa
Signing time:             Mon 23 Sep 2024 06:05:23 +0000
ROA not before:           Mon 23 Sep 2024 06:05:23 +0000
ROA not after:            Sun 22 Dec 2024 07:05:23 +0000
asID:                     14618
IP address blocks:        2607:d540:3::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 17:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4e:7d:42:17:76:ed:64:08:a7:ec:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
        Validity
            Not Before: Sep 23 06:05:23 2024 GMT
            Not After : Dec 22 07:05:23 2024 GMT
        Subject: CN=7d4ba36c-7bf8-42fb-ba5b-38e5550ccbc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b4:5b:7d:ae:21:d7:bd:ac:1c:3b:c2:0a:f4:
                    ab:9b:15:c4:76:81:56:9b:61:9d:e4:25:dc:80:b1:
                    17:11:d5:9b:08:1f:32:d9:66:29:b1:0a:a3:34:99:
                    b7:75:72:cc:4a:22:c1:3b:3c:72:fa:39:ad:6e:2b:
                    66:93:96:ad:1c:70:e0:90:1e:4a:40:3c:fa:f8:f3:
                    04:21:27:e1:bd:f2:09:31:91:46:19:0b:69:bc:f1:
                    6c:47:65:de:6b:e2:af:24:5d:3d:54:08:8f:01:7e:
                    00:c2:1f:13:20:82:64:c3:33:f5:de:bd:d5:88:ca:
                    53:22:19:22:2c:48:39:fc:85:3c:5d:93:a4:9c:b4:
                    e9:1c:05:93:2a:16:64:4b:fe:14:d4:20:9a:d8:75:
                    1a:ff:99:ce:58:d2:db:5a:4c:62:85:2f:c8:ee:4d:
                    19:88:27:f7:f3:4a:65:aa:88:2f:d5:52:fb:05:a7:
                    f5:1f:0b:fa:b2:54:8c:e2:16:a7:5a:b0:a0:09:50:
                    2f:92:41:c8:68:16:33:66:11:e4:ca:66:82:fa:23:
                    27:6f:b0:15:86:f8:32:2c:b6:10:86:45:56:96:42:
                    97:17:f7:9e:20:e8:6c:71:56:fb:d7:17:21:1d:90:
                    d0:20:5b:9a:1c:c2:e2:42:b0:84:d3:c9:0d:2b:8c:
                    b0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B6:D7:11:66:59:17:67:AA:3F:9E:FD:80:B9:D3:80:A5:D8:17:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/084050a6-bfbb-3588-8c3b-a945764df76e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl

            X509v3 Authority Key Identifier:
                keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d540:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:c6:12:fc:af:cd:3f:70:22:56:c8:c0:7b:26:1b:52:8f:b9:
         e8:ae:d1:81:ba:22:55:5b:64:a7:66:6d:82:0c:ca:c7:f5:71:
         29:93:39:10:04:92:d8:90:79:eb:dc:56:0e:4e:2b:3e:00:ad:
         3d:e1:c8:84:f0:32:2d:43:04:dd:61:ff:35:2a:72:8e:31:09:
         27:cd:70:3b:fe:12:2b:f0:bc:3f:47:70:f0:1d:de:7e:7c:33:
         88:60:ee:c5:c9:13:4d:78:51:35:5e:ab:aa:03:cd:38:d5:10:
         45:fd:6d:9c:a3:cb:b7:65:4b:45:a2:f0:9b:83:a1:9e:00:3b:
         17:f5:31:83:60:44:7c:f9:96:da:ea:11:24:cc:5c:61:d9:08:
         4f:43:76:4e:e0:a2:ab:bb:ff:84:f5:13:9d:c8:f5:61:04:f0:
         84:a3:43:1e:72:7c:df:b0:3c:4b:6c:34:64:70:79:f9:9d:a5:
         1f:43:5b:df:62:c4:cb:4b:1b:44:f7:31:25:b1:69:0a:a7:8c:
         ec:53:1e:22:56:a0:61:89:35:53:ce:de:2f:c9:79:69:c9:d3:
         3e:c7:07:e9:22:df:e0:3d:56:69:0a:99:b3:60:86:d0:0d:9a:
         e2:1c:79:a5:6d:ea:5d:b6:8e:1e:2b:ba:a0:7e:97:d1:ff:3c:
         07:9c:b9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----