Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/818817b0-1c84-34be-b386-8534160c64d6.roa
File:                     818817b0-1c84-34be-b386-8534160c64d6.roa (raw, json)
Hash identifier:          1v11xMc6STX+8HOFTFmwtY1oifmu6efMNAnQLIfTHCI=
Subject key identifier:   F5:D7:5F:83:23:CE:44:E1:38:D0:F2:2B:2D:6D:25:53:8A:16:42:B8
Certificate issuer:       /CN=b3f5323f-8bea-48c6-aa03-949255dd1997
Certificate serial:       010D0C9F43285846DFC97175947CCE08B9D66B20
Authority key identifier: 53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/818817b0-1c84-34be-b386-8534160c64d6.roa
Signing time:             Wed 14 Aug 2024 14:24:09 +0000
ROA not before:           Wed 14 Aug 2024 14:24:09 +0000
ROA not after:            Tue 12 Nov 2024 15:24:09 +0000
asID:                     46474
IP address blocks:        2602:819:e002::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 14 Aug 2024 20:41:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:df:c9:71:75:94:7c:ce:08:b9:d6:6b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3f5323f-8bea-48c6-aa03-949255dd1997
        Validity
            Not Before: Aug 14 14:24:09 2024 GMT
            Not After : Nov 12 15:24:09 2024 GMT
        Subject: CN=187335a6-b94e-412e-95db-479475c5aa59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ba:e9:56:ee:70:82:6b:05:f9:bf:aa:6b:79:
                    c2:d6:dd:53:3c:e8:01:7c:b0:7c:1f:8f:15:1d:c1:
                    64:e4:da:ab:da:bb:68:65:6f:44:71:3f:cc:4d:fc:
                    c7:d0:f3:e6:b3:1f:1e:17:9b:23:6d:ef:97:e3:16:
                    35:8f:c1:ea:0b:78:a3:27:f0:73:31:26:65:2f:89:
                    6a:89:f3:08:af:f4:a7:eb:89:0c:45:12:ec:83:e2:
                    25:35:4e:8b:af:e1:4c:8f:a5:ec:45:51:30:d2:2c:
                    a0:2a:d9:f3:10:3e:dd:55:b4:de:bc:20:ac:fd:9e:
                    75:c4:96:dc:9d:ba:af:80:31:05:0c:34:72:67:73:
                    be:e3:26:28:47:93:68:e8:02:5b:63:48:1f:ea:50:
                    2c:db:a5:d6:39:f2:99:1b:b1:98:b6:4d:15:48:13:
                    a0:92:7f:ea:d3:f1:50:cf:9e:4b:5a:de:d6:a5:0e:
                    63:01:2a:4e:21:7e:03:1f:91:13:d5:bb:d0:90:76:
                    38:83:ca:eb:5c:99:10:fe:33:25:7c:65:93:59:6e:
                    85:58:e4:01:d2:a1:dc:35:9f:ae:28:9e:b2:8f:d5:
                    0a:c6:b1:97:33:a8:1c:cc:c7:2b:19:dc:aa:31:b5:
                    1a:2c:4f:00:ab:6c:c7:b0:e0:f4:5c:7f:fa:e4:a1:
                    c4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D7:5F:83:23:CE:44:E1:38:D0:F2:2B:2D:6D:25:53:8A:16:42:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/818817b0-1c84-34be-b386-8534160c64d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl

            X509v3 Authority Key Identifier:
                keyid:53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:819:e002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:02:f7:65:20:56:4e:9f:1e:e7:1f:34:93:c4:66:9a:67:5a:
         6c:13:11:b2:fd:8c:2f:72:a8:34:f3:d3:6e:96:cf:17:ef:fa:
         42:26:9c:ad:b1:51:66:9f:e6:85:f2:d7:24:21:b5:df:3d:d9:
         89:96:78:04:ff:f7:70:2f:bf:43:a3:b0:15:9f:37:ef:70:cd:
         24:86:46:a0:dc:ac:72:36:c4:91:e4:ec:18:a7:88:bc:2b:e1:
         a2:61:00:22:4c:6b:3b:ed:b0:e9:08:b5:a7:22:5b:b8:24:be:
         57:58:6c:64:e2:54:ee:d7:99:8d:69:cf:56:64:56:40:76:20:
         b1:f5:80:4f:75:e3:b4:b1:0c:f9:5f:0c:d8:fb:d3:ef:d6:c1:
         26:a8:71:1b:ba:1a:85:de:16:e7:36:ca:60:c9:89:cc:c8:91:
         ca:03:47:7d:3e:3f:12:9e:2a:71:77:a9:26:46:3b:18:0d:e9:
         32:90:5d:eb:47:70:8e:80:c3:fb:16:c5:83:e1:8e:74:63:49:
         bb:0e:c8:d8:68:ac:59:a8:7e:f2:29:2f:bc:b9:1f:78:5e:aa:
         41:20:d7:e6:18:c0:12:77:64:3c:d0:10:15:18:64:06:37:39:
         96:71:2d:f9:37:f9:95:f0:bc:f0:e4:6f:a8:b9:26:78:9d:bd:
         6e:3c:38:b5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEbfyXF1lHzOCLnWayAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjNmNTMyM2YtOGJlYS00OGM2LWFhMDMtOTQ5MjU1ZGQx
OTk3MB4XDTI0MDgxNDE0MjQwOVoXDTI0MTExMjE1MjQwOVowLzEtMCsGA1UEAxMk
MTg3MzM1YTYtYjk0ZS00MTJlLTk1ZGItNDc5NDc1YzVhYTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorrpVu5wgmsF+b+qa3nC1t1TPOgBfLB8H48V
HcFk5Nqr2rtoZW9EcT/MTfzH0PPmsx8eF5sjbe+X4xY1j8HqC3ijJ/BzMSZlL4lq
ifMIr/Sn64kMRRLsg+IlNU6Lr+FMj6XsRVEw0iygKtnzED7dVbTevCCs/Z51xJbc
nbqvgDEFDDRyZ3O+4yYoR5No6AJbY0gf6lAs26XWOfKZG7GYtk0VSBOgkn/q0/FQ
z55LWt7WpQ5jASpOIX4DH5ET1bvQkHY4g8rrXJkQ/jMlfGWTWW6FWOQB0qHcNZ+u
KJ6yj9UKxrGXM6gczMcrGdyqMbUaLE8Aq2zHsOD0XH/65KHEhQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPXXX4MjzkThONDyKy1tJVOKFkK4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iM2Y1
MzIzZi04YmVhLTQ4YzYtYWEwMy05NDkyNTVkZDE5OTcvODE4ODE3YjAtMWM4NC0z
NGJlLWIzODYtODUzNDE2MGM2NGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjNmNTMyM2YtOGJlYS00OGM2LWFh
MDMtOTQ5MjU1ZGQxOTk3L2IzZjUzMjNmLThiZWEtNDhjNi1hYTAzLTk0OTI1NWRk
MTk5Ny5jcmwwHwYDVR0jBBgwFoAUU4ELix9UHi+CHErdwD5wsGKV7F0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iM2Y1MzIzZi04YmVhLTQ4YzYtYWEwMy05NDky
NTVkZDE5OTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIGeAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEAC92UgVk6fHucfNJPEZppnWmwTEbL9jC9yqDTz026Wzxfv+kIm
nK2xUWaf5oXy1yQhtd892YmWeAT/93Avv0OjsBWfN+9wzSSGRqDcrHI2xJHk7Bin
iLwr4aJhACJMazvtsOkItaciW7gkvldYbGTiVO7XmY1pz1ZkVkB2ILH1gE9147Sx
DPlfDNj70+/WwSaocRu6GoXeFuc2ymDJiczIkcoDR30+PxKeKnF3qSZGOxgN6TKQ
XetHcI6Aw/sWxYPhjnRjSbsOyNhorFmofvIpL7y5H3heqkEg1+YYwBJ3ZDzQEBUY
ZAY3OZZxLfk3+ZXwvPDkb6i5JnidvW48OLU=
-----END CERTIFICATE-----