Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/4c523d6c-184e-38c8-8351-32c5236342d3.roa
File:                     4c523d6c-184e-38c8-8351-32c5236342d3.roa (raw, json)
Hash identifier:          g804TBj2n070q8mTzwIsXIQwa1t20RMvMQ18NQAvARk=
Subject key identifier:   37:7C:96:BB:C7:BF:98:1C:89:1E:64:7A:B1:3D:74:8D:B1:B9:B6:03
Certificate issuer:       /CN=bf7d171d-7917-4a21-b6cc-8a27039802a5
Certificate serial:       010D0C9F4328584755AC03E6E2A22C31DDF621B0
Authority key identifier: AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/4c523d6c-184e-38c8-8351-32c5236342d3.roa
Signing time:             Wed 25 Sep 2024 19:50:15 +0000
ROA not before:           Wed 25 Sep 2024 19:50:15 +0000
ROA not after:            Tue 24 Dec 2024 20:50:15 +0000
asID:                     13415
IP address blocks:        2607:f898::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 25 Sep 2024 20:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:55:ac:03:e6:e2:a2:2c:31:dd:f6:21:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf7d171d-7917-4a21-b6cc-8a27039802a5
        Validity
            Not Before: Sep 25 19:50:15 2024 GMT
            Not After : Dec 24 20:50:15 2024 GMT
        Subject: CN=bc669e9a-8cb1-4b6e-9a04-042650fc8878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:57:71:f8:a5:98:24:4b:37:4b:67:f3:cf:8c:
                    43:45:55:19:79:09:f3:bf:1a:7a:0d:0d:1c:53:c3:
                    23:51:92:89:95:45:8e:12:fd:d9:e9:46:19:f8:60:
                    2e:b3:dd:c1:90:e0:87:60:d6:d5:81:49:29:ed:64:
                    81:08:f8:78:7b:6e:07:66:94:d4:d6:e4:e5:84:98:
                    38:e4:7e:6c:14:fe:a7:9e:58:47:b4:85:1c:31:3b:
                    99:bb:ff:9e:5c:85:70:a9:71:31:60:d9:a0:4c:71:
                    d5:ee:74:c4:41:ce:dc:dd:c5:bb:00:ee:0e:f9:fe:
                    55:fb:e5:9c:ac:a2:6e:2f:34:94:39:5d:da:02:58:
                    e1:1d:a0:ed:4a:05:51:3e:d1:e9:e2:3d:d4:f9:07:
                    e6:85:72:b1:47:2d:04:6d:37:8e:e6:ea:c6:5f:6f:
                    87:37:46:d7:1e:5e:db:5e:13:54:17:e0:89:60:71:
                    92:bc:de:0c:0b:65:e4:c2:e3:4c:44:3f:8b:6c:2f:
                    36:8e:39:d4:97:8f:d1:85:b4:f4:02:3a:bd:36:74:
                    a4:43:2f:ee:15:a1:09:e1:a4:51:74:b1:e1:0e:57:
                    e8:0c:b3:24:77:c8:0d:05:9f:96:dd:03:65:cf:4f:
                    94:cc:71:ef:30:4b:2b:61:40:14:43:31:81:28:87:
                    e3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7C:96:BB:C7:BF:98:1C:89:1E:64:7A:B1:3D:74:8D:B1:B9:B6:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/4c523d6c-184e-38c8-8351-32c5236342d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl

            X509v3 Authority Key Identifier:
                keyid:AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f898::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:8e:3d:02:f0:0c:30:b5:b8:70:b7:96:d0:81:20:08:8c:b6:
         6f:e0:db:4f:83:cf:42:d9:ec:53:b6:43:3d:5c:78:19:c7:30:
         2f:ee:ec:0b:1a:3f:78:4d:b5:90:fd:07:d3:fc:c3:16:ea:8d:
         d7:2e:44:75:95:76:55:18:6a:ee:53:d0:11:29:77:f3:c2:22:
         e5:03:35:f3:d8:df:a7:4e:79:0e:7d:a2:b1:14:3e:44:e0:95:
         5d:ed:8c:e2:62:49:ce:00:48:3c:a7:81:a9:e8:78:6c:a4:33:
         c8:d4:fc:3b:38:2a:3c:00:9e:07:11:b6:4f:b6:e6:b0:28:7c:
         58:7b:34:5c:7a:a6:d8:6b:d5:09:1a:1a:ab:7e:3d:d4:6d:de:
         d9:35:99:45:a4:3b:6d:16:af:52:1c:10:1b:8c:97:9a:37:ae:
         7c:66:86:63:3f:9a:5a:f0:e4:ae:69:32:32:67:62:a0:37:c3:
         d1:dd:a2:43:52:cc:d3:ab:9f:be:b0:4c:75:7d:9a:ad:03:c4:
         3c:bc:fe:d0:17:5f:f3:52:4d:3a:ae:6c:b5:20:88:5b:31:88:
         3a:ac:bb:09:2d:0b:01:ce:7a:15:bf:ba:42:86:5d:5f:fa:26:
         29:95:d5:0d:6f:89:d2:f4:53:6c:9c:31:f1:28:2b:c0:90:cb:
         c8:73:2b:41
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdVrAPm4qIsMd32IbAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmY3ZDE3MWQtNzkxNy00YTIxLWI2Y2MtOGEyNzAzOTgw
MmE1MB4XDTI0MDkyNTE5NTAxNVoXDTI0MTIyNDIwNTAxNVowLzEtMCsGA1UEAxMk
YmM2NjllOWEtOGNiMS00YjZlLTlhMDQtMDQyNjUwZmM4ODc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVdx+KWYJEs3S2fzz4xDRVUZeQnzvxp6DQ0c
U8MjUZKJlUWOEv3Z6UYZ+GAus93BkOCHYNbVgUkp7WSBCPh4e24HZpTU1uTlhJg4
5H5sFP6nnlhHtIUcMTuZu/+eXIVwqXExYNmgTHHV7nTEQc7c3cW7AO4O+f5V++Wc
rKJuLzSUOV3aAljhHaDtSgVRPtHp4j3U+QfmhXKxRy0EbTeO5urGX2+HN0bXHl7b
XhNUF+CJYHGSvN4MC2XkwuNMRD+LbC82jjnUl4/RhbT0Ajq9NnSkQy/uFaEJ4aRR
dLHhDlfoDLMkd8gNBZ+W3QNlz0+UzHHvMEsrYUAUQzGBKIfjowIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDd8lrvHv5gciR5kerE9dI2xubYDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdk
MTcxZC03OTE3LTRhMjEtYjZjYy04YTI3MDM5ODAyYTUvNGM1MjNkNmMtMTg0ZS0z
OGM4LTgzNTEtMzJjNTIzNjM0MmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmY3ZDE3MWQtNzkxNy00YTIxLWI2
Y2MtOGEyNzAzOTgwMmE1L2JmN2QxNzFkLTc5MTctNGEyMS1iNmNjLThhMjcwMzk4
MDJhNS5jcmwwHwYDVR0jBBgwFoAUrfa9+KlGwDdFy21HxWzSxxXvijswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdkMTcxZC03OTE3LTRhMjEtYjZjYy04YTI3
MDM5ODAyYTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf4mDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBgjj0C8Awwtbhwt5bQgSAIjLZv4NtPg89C2exTtkM9XHgZxzAv7uwL
Gj94TbWQ/QfT/MMW6o3XLkR1lXZVGGruU9ARKXfzwiLlAzXz2N+nTnkOfaKxFD5E
4JVd7YziYknOAEg8p4Gp6HhspDPI1Pw7OCo8AJ4HEbZPtuawKHxYezRceqbYa9UJ
Ghqrfj3Ubd7ZNZlFpDttFq9SHBAbjJeaN658ZoZjP5pa8OSuaTIyZ2KgN8PR3aJD
UszTq5++sEx1fZqtA8Q8vP7QF1/zUk06rmy1IIhbMYg6rLsJLQsBznoVv7pChl1f
+iYpldUNb4nS9FNsnDHxKCvAkMvIcytB
-----END CERTIFICATE-----