Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b/ec345da9-2279-3ac4-84ca-5826cf5cecc6.roa
File:                     ec345da9-2279-3ac4-84ca-5826cf5cecc6.roa (raw, json)
Hash identifier:          zCFdFFrGnWYxyKrdTEdX2cpizRcq2iXrt9kmcekRYCU=
Subject key identifier:   EE:DA:63:02:37:A1:84:95:9A:3C:84:14:13:45:90:44:F0:A1:25:C7
Certificate issuer:       /CN=195aa559-2ee4-466a-993d-e35043b7752b
Certificate serial:       010D0C9F43285848B05B6BA97D87AA3A0616DFC0
Authority key identifier: C8:74:0E:F2:1B:CC:D0:36:65:A9:AE:02:D3:6A:A3:E5:B7:BD:97:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b/ec345da9-2279-3ac4-84ca-5826cf5cecc6.roa
Signing time:             Tue 28 Jan 2025 00:13:21 +0000
ROA not before:           Tue 28 Jan 2025 00:13:21 +0000
ROA not after:            Sun 27 Apr 2025 23:13:21 +0000
asID:                     0
IP address blocks:        2620:10f:f000::/46 maxlen: 46
Validation:               Failed, certificate revoked on Fri 14 Feb 2025 23:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b0:5b:6b:a9:7d:87:aa:3a:06:16:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195aa559-2ee4-466a-993d-e35043b7752b
        Validity
            Not Before: Jan 28 00:13:21 2025 GMT
            Not After : Apr 27 23:13:21 2025 GMT
        Subject: CN=3bb8488f-19df-4d52-8902-9272a5c73a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7e:52:f7:9e:5c:22:84:af:13:64:f3:fe:f3:
                    ad:8f:17:c3:28:e9:0e:17:cd:1f:ff:5c:98:50:dd:
                    1e:2d:35:7f:f3:14:82:42:5a:14:be:ff:95:0d:ca:
                    27:6a:89:14:ef:83:0c:d9:54:f0:35:09:73:d1:9b:
                    b5:59:ee:8d:7f:c2:12:c5:97:bc:19:67:44:8b:22:
                    3e:04:84:20:7a:42:1a:e1:54:d5:e1:1a:2e:46:bd:
                    02:c0:3a:e2:62:8b:af:ba:94:57:74:bc:d3:3d:5d:
                    03:24:ba:ba:fd:82:dd:81:de:2b:9e:e9:e7:7f:d2:
                    e8:20:c8:be:ca:ef:4b:c4:66:60:9e:3f:62:1f:63:
                    42:e2:33:4e:54:2f:35:df:d2:86:4d:ca:24:2d:4a:
                    db:cd:08:8c:ea:f9:56:3d:88:57:b0:83:2e:0c:fe:
                    c3:2a:4d:6f:7d:05:d6:16:e8:7a:28:34:cd:0a:cf:
                    7f:e8:44:ad:5d:ab:e3:5d:39:ec:d9:2a:fd:98:e4:
                    94:6a:95:76:c7:d1:23:0f:55:9a:c6:3e:06:a1:4f:
                    5d:b1:4d:4b:0b:bc:95:fe:82:ed:57:ff:d6:26:f0:
                    ba:e5:e1:3b:b7:44:0b:c9:70:ca:9b:22:a9:14:3b:
                    62:19:25:3c:3c:8f:56:63:39:c3:da:c7:bf:51:63:
                    6a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DA:63:02:37:A1:84:95:9A:3C:84:14:13:45:90:44:F0:A1:25:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b/ec345da9-2279-3ac4-84ca-5826cf5cecc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b/195aa559-2ee4-466a-993d-e35043b7752b.crl

            X509v3 Authority Key Identifier:
                keyid:C8:74:0E:F2:1B:CC:D0:36:65:A9:AE:02:D3:6A:A3:E5:B7:BD:97:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10f:f000::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:eb:0a:2b:2e:b2:c2:cc:de:01:00:21:7c:8f:96:c8:81:d6:
         3a:a6:71:9a:b7:d3:ec:94:ed:09:fa:70:09:76:6e:8c:0d:5e:
         f4:21:84:6a:2f:66:5f:73:40:d8:b7:45:8f:1b:3b:cb:5b:6b:
         89:4c:43:02:2f:8c:7b:fd:f3:95:d8:4b:f6:b7:66:b7:e0:c1:
         cf:ce:55:62:73:32:64:64:20:5d:69:f9:51:a9:ed:ac:65:20:
         dd:af:50:07:3d:4b:b2:c1:f8:3e:f0:33:15:8d:6e:0a:36:92:
         82:e2:37:32:0d:87:7f:d9:39:4f:06:7e:6f:90:34:66:9e:ed:
         82:25:cc:15:51:95:86:9b:60:a9:66:71:95:37:68:e8:b8:fa:
         51:41:28:3c:bd:e4:9b:c4:3c:98:2a:cf:28:22:4e:92:38:8d:
         97:26:a3:9d:dd:a3:dc:72:6c:e8:b9:42:ff:d8:10:cb:5f:97:
         00:ac:e2:10:93:da:62:33:99:f3:f3:0f:94:69:01:1d:eb:f5:
         de:c6:bd:e2:41:2a:12:e5:47:ea:c4:09:1c:f6:57:da:10:5f:
         5f:28:85:49:cb:b8:28:5f:52:c3:1b:0f:28:f2:e5:58:e4:fc:
         c5:9c:1a:14:a4:da:68:3c:29:a0:43:23:d0:0e:6f:3f:cf:37:
         1c:55:66:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----