Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ef22a95-298b-4f50-99c7-02995e73687f/c4b1cb8d-4814-3e21-8a9c-a3b4ea0e5b0c.roa
File:                     c4b1cb8d-4814-3e21-8a9c-a3b4ea0e5b0c.roa (raw, json)
Hash identifier:          Vfym19dWGHuztvMMvBS0st/q6bJqlPsBW+qg3cRPUeY=
Subject key identifier:   11:30:35:3D:3E:79:D1:BE:E1:EA:28:43:FA:32:96:4D:0D:0D:ED:D5
Certificate issuer:       /CN=3ef22a95-298b-4f50-99c7-02995e73687f
Certificate serial:       010D0C9F43285846AB13446C2F478679D394FA40
Authority key identifier: 4A:B3:65:80:98:4B:F2:2D:A7:E3:BD:91:CE:D2:76:68:2F:29:BA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ef22a95-298b-4f50-99c7-02995e73687f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ef22a95-298b-4f50-99c7-02995e73687f/c4b1cb8d-4814-3e21-8a9c-a3b4ea0e5b0c.roa
Signing time:             Fri 26 Jul 2024 17:15:04 +0000
ROA not before:           Fri 26 Jul 2024 17:15:04 +0000
ROA not after:            Thu 24 Oct 2024 17:15:04 +0000
asID:                     399970
IP address blocks:        2620:10f:f000::/44 maxlen: 44

Validation:               Failed, certificate revoked on Mon 29 Jul 2024 13:14:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ab:13:44:6c:2f:47:86:79:d3:94:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ef22a95-298b-4f50-99c7-02995e73687f
        Validity
            Not Before: Jul 26 17:15:04 2024 GMT
            Not After : Oct 24 17:15:04 2024 GMT
        Subject: CN=5ade3bff-1171-40ce-a38e-8dc0957a5c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4f:d6:fa:88:bb:42:48:82:4c:ee:7f:36:9f:
                    df:8b:4f:fb:2d:75:fc:44:6b:27:b5:cf:2e:9a:96:
                    8e:ef:ba:32:6f:92:4e:52:fc:ae:44:38:da:6f:66:
                    a5:f0:b3:40:2b:61:d4:43:1f:a3:06:70:01:99:e9:
                    0e:4c:67:56:08:80:9e:e6:96:44:47:6e:9d:c7:8c:
                    71:42:ba:ae:6a:ef:b2:6c:86:68:e6:d1:c4:36:37:
                    ce:49:4a:30:b9:16:7a:59:db:1a:7b:ed:b4:4e:24:
                    d6:2b:ba:0e:ab:cf:55:60:26:d5:e1:d1:38:9b:46:
                    76:e3:7e:5f:ae:0e:37:a5:b4:42:56:47:55:00:38:
                    6f:1e:99:10:a1:cb:e9:b9:70:95:40:b3:64:f8:98:
                    ac:02:8f:df:93:30:b3:ac:4b:e7:fc:84:77:e8:5f:
                    50:31:52:0a:3d:7f:c2:4b:3a:da:41:68:0d:e2:9c:
                    80:99:0d:8f:13:b0:e4:85:1a:0b:71:b7:01:c1:5f:
                    62:b5:0a:c8:91:46:79:fc:9c:3d:6b:a0:7e:34:f7:
                    55:d6:ea:60:8c:fa:0c:8b:cc:4c:c9:07:c1:d0:36:
                    c6:ae:7d:1d:41:07:fb:aa:ef:15:a9:26:b5:d2:e5:
                    d4:3d:78:c2:ae:89:2a:4b:3b:55:3e:f0:31:1f:60:
                    c1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:30:35:3D:3E:79:D1:BE:E1:EA:28:43:FA:32:96:4D:0D:0D:ED:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ef22a95-298b-4f50-99c7-02995e73687f/c4b1cb8d-4814-3e21-8a9c-a3b4ea0e5b0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ef22a95-298b-4f50-99c7-02995e73687f/3ef22a95-298b-4f50-99c7-02995e73687f.crl

            X509v3 Authority Key Identifier:
                keyid:4A:B3:65:80:98:4B:F2:2D:A7:E3:BD:91:CE:D2:76:68:2F:29:BA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ef22a95-298b-4f50-99c7-02995e73687f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10f:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:33:88:42:e5:07:ba:5c:e7:72:bb:a9:ee:6d:e6:2b:9b:44:
         69:5d:04:a7:0c:d8:83:31:e0:5b:d8:fb:2e:d3:63:39:54:c9:
         d6:7b:f2:8a:f6:76:43:86:ec:95:3b:6a:9b:ba:66:07:71:c8:
         1c:ee:87:25:1c:ab:a6:de:8c:5f:a2:65:74:86:5f:5b:67:f9:
         3e:d4:fc:82:7b:5b:82:5b:27:b1:89:3c:fc:6a:bd:47:b9:a4:
         99:76:c3:43:37:cc:ae:5b:06:76:1e:c3:c9:89:cd:8e:47:9a:
         cc:f8:d5:ab:a2:4f:2e:61:7f:bf:e1:7e:f3:a8:bc:12:03:e4:
         97:4b:e6:01:2e:70:35:7b:40:08:6b:18:26:ca:e5:54:14:1a:
         4f:cd:51:9e:47:22:7f:41:ad:b5:c0:2c:2c:e0:31:51:c4:bf:
         04:40:02:79:de:35:81:25:7b:dc:b2:57:1c:8b:0c:d3:77:90:
         b8:cf:54:81:61:ea:c7:65:30:e8:0c:08:d3:27:01:b8:b9:69:
         2b:57:d1:d3:85:f2:5a:61:d5:4d:5a:3b:95:5a:4c:c2:e7:10:
         10:1e:4a:91:54:a8:76:91:b5:f9:43:27:6b:d4:df:ba:6b:db:
         a7:46:03:dc:be:b3:54:2f:00:fb:cb:12:41:3a:d0:f4:12:de:
         6c:1b:df:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----