Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12e2244f-c38e-4b53-9402-9dfacc484a1b/1648a2e5-d90e-383c-b972-9eb1fd70c0c5.roa
File:                     1648a2e5-d90e-383c-b972-9eb1fd70c0c5.roa (raw, json)
Hash identifier:          I5XewIRNveF7ujEoEE+e4YnJsxlzSTponiCOlFI6tfM=
Subject key identifier:   5C:E3:C3:1A:DF:69:F7:36:43:FB:94:B9:30:80:FE:7A:BB:4E:6D:BD
Certificate issuer:       /CN=12e2244f-c38e-4b53-9402-9dfacc484a1b
Certificate serial:       010D0C9F43285846A0227897F44590C076688E00
Authority key identifier: 90:45:F0:B7:C4:13:43:DF:EA:1A:D1:A5:60:A4:59:EA:49:BC:31:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12e2244f-c38e-4b53-9402-9dfacc484a1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12e2244f-c38e-4b53-9402-9dfacc484a1b/1648a2e5-d90e-383c-b972-9eb1fd70c0c5.roa
Signing time:             Mon 22 Jul 2024 19:11:48 +0000
ROA not before:           Mon 22 Jul 2024 19:11:48 +0000
ROA not after:            Sun 20 Oct 2024 19:11:48 +0000
asID:                     36064
IP address blocks:        2607:c740::/32 maxlen: 48

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 00:08:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a0:22:78:97:f4:45:90:c0:76:68:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e2244f-c38e-4b53-9402-9dfacc484a1b
        Validity
            Not Before: Jul 22 19:11:48 2024 GMT
            Not After : Oct 20 19:11:48 2024 GMT
        Subject: CN=05c7ee9f-af99-4b4b-9cbb-58b4d2c61ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e5:ad:c6:54:a8:09:2a:c6:67:96:54:15:83:
                    d1:f2:c0:f8:6c:bb:8a:77:80:87:8b:6f:0b:6b:4e:
                    83:6c:9b:c4:b0:6b:7f:91:22:ae:06:78:cd:4e:93:
                    7a:07:c7:cf:07:54:ff:78:8c:4f:98:1c:fe:56:2a:
                    6a:67:41:8c:69:cf:b3:2a:20:62:75:da:56:17:a3:
                    3b:83:03:1b:13:d4:18:df:ca:56:eb:01:62:0a:3c:
                    1b:00:2d:1e:62:9e:a8:11:5f:f4:6f:25:95:27:49:
                    e5:36:9e:2e:1d:f0:54:62:ae:ae:89:cc:19:f2:f3:
                    1c:d1:37:09:cb:4d:da:ee:98:77:c6:94:05:9d:f6:
                    54:49:b9:35:d0:cd:fd:31:28:17:82:44:fe:2d:09:
                    54:46:56:a9:2d:4c:2d:99:02:fb:81:e4:21:87:48:
                    96:7f:df:2e:c5:ae:8b:f4:fc:26:10:e3:c9:03:c8:
                    e3:f5:a3:aa:13:82:f8:d2:62:87:a3:2b:4c:c6:a4:
                    87:ce:c0:52:3a:34:89:10:cf:02:e8:42:9e:22:36:
                    91:84:5f:81:94:88:8c:c1:b8:1a:48:da:c6:80:f6:
                    13:8e:5a:5d:78:d1:da:64:57:aa:8f:65:51:9e:11:
                    8d:2e:20:53:a2:a1:19:33:9c:df:54:e7:b5:53:62:
                    85:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E3:C3:1A:DF:69:F7:36:43:FB:94:B9:30:80:FE:7A:BB:4E:6D:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12e2244f-c38e-4b53-9402-9dfacc484a1b/1648a2e5-d90e-383c-b972-9eb1fd70c0c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12e2244f-c38e-4b53-9402-9dfacc484a1b/12e2244f-c38e-4b53-9402-9dfacc484a1b.crl

            X509v3 Authority Key Identifier:
                keyid:90:45:F0:B7:C4:13:43:DF:EA:1A:D1:A5:60:A4:59:EA:49:BC:31:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12e2244f-c38e-4b53-9402-9dfacc484a1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:c740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:82:4e:52:30:97:26:22:c1:48:47:fa:55:92:d9:76:84:b3:
         73:26:c3:37:34:c7:b7:59:7d:9d:11:f6:9e:cc:7a:3e:59:da:
         cf:23:cd:c6:01:9c:2e:3b:e4:bc:41:e3:70:d0:86:47:a9:0b:
         1c:70:01:4d:39:11:4d:ca:42:bd:a6:e1:d8:e8:59:f6:f8:42:
         66:03:29:59:fb:10:e6:6a:d1:11:04:52:d2:35:d0:34:7e:c3:
         ea:39:7c:eb:35:73:25:0b:09:ba:ce:a6:18:01:f1:fe:ff:47:
         0e:da:63:e7:2e:b1:8c:3d:ec:f0:5b:4e:32:3b:19:6a:35:15:
         b1:30:99:a8:88:8a:95:fa:9e:25:45:40:70:8b:40:a6:b9:8f:
         9e:70:3f:53:8a:55:8e:d5:1c:92:21:de:c5:42:ad:77:20:1c:
         cf:a4:08:76:c2:4e:be:02:4f:a7:65:29:c3:80:4b:fd:3e:17:
         e4:aa:99:c9:c6:d3:a0:f5:df:f6:14:52:45:52:e8:ab:98:70:
         b8:8c:d2:a7:ab:67:f3:ee:bd:7e:4a:9f:1b:eb:72:ac:79:87:
         a3:f1:72:8a:29:6c:80:4a:d7:5c:e5:ff:4d:5b:c3:ab:ec:2d:
         ad:a4:c3:b8:20:90:79:c8:81:38:2d:32:52:0d:2d:6c:00:34:
         1b:f0:32:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----