Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/717bb925-5892-3611-8545-adae24a0e055.roa
File:                     717bb925-5892-3611-8545-adae24a0e055.roa (raw, json)
Hash identifier:          t9Cr8Go0yRR/e0PKCUgfFPsd+MVB8sDJcF4DdB5H9+U=
Subject key identifier:   DE:E2:2A:88:0D:77:95:30:DE:77:95:71:25:F1:B0:C8:2B:94:07:9F
Certificate issuer:       /CN=e7557763-e46b-4ec1-afa8-bcf257b54911
Certificate serial:       010D0C9F43285846B9374D2DE899844C7B281599
Authority key identifier: 20:05:AA:3B:64:BB:D6:7C:B2:7A:AE:9C:97:F0:CC:AE:9D:64:0B:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/717bb925-5892-3611-8545-adae24a0e055.roa
Signing time:             Wed 31 Jul 2024 18:48:59 +0000
ROA not before:           Wed 31 Jul 2024 18:48:59 +0000
ROA not after:            Tue 29 Oct 2024 18:48:59 +0000
asID:                     26568
IP address blocks:        2604:61c0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 19:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b9:37:4d:2d:e8:99:84:4c:7b:28:15:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7557763-e46b-4ec1-afa8-bcf257b54911
        Validity
            Not Before: Jul 31 18:48:59 2024 GMT
            Not After : Oct 29 18:48:59 2024 GMT
        Subject: CN=74dc091b-bbd4-4dd4-9477-1a6a09c6c96b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2d:8f:8f:3a:64:39:4e:7d:38:29:f7:68:76:
                    54:65:2e:d1:96:f9:c6:44:22:eb:b6:bd:74:5c:6b:
                    9d:6d:c9:f2:e2:95:f4:44:c2:c0:ef:ce:75:85:ff:
                    fe:85:af:a3:c6:c7:e2:3a:69:cc:02:67:1b:46:43:
                    5a:f4:23:da:9d:29:ac:e6:f3:1a:eb:0e:78:72:c6:
                    0e:c0:75:8b:ee:d9:ea:34:d7:ef:bf:70:c8:9a:35:
                    e8:ea:d6:d0:bd:d9:49:cd:e2:a2:d0:f9:f0:00:97:
                    df:83:f5:11:48:09:1b:59:bd:25:73:f3:70:0e:28:
                    5f:4c:44:bd:27:b6:b5:db:2a:7c:fe:3d:00:9d:c5:
                    32:7d:48:b5:64:2d:e1:6c:bc:a0:c2:91:00:4f:ef:
                    22:e1:be:a3:a9:38:37:74:7f:c4:77:89:d3:3d:09:
                    bd:9f:03:d6:8a:ee:1f:9c:b2:4b:a6:24:67:0e:9a:
                    88:55:3a:67:8f:e2:b2:a9:a5:4a:87:7b:52:8f:77:
                    7b:ed:01:07:98:6c:3f:f9:ad:1a:90:89:b4:cc:c7:
                    75:86:8a:d6:76:6b:cc:c4:f9:b4:e8:56:21:1b:42:
                    03:b4:93:d6:10:93:32:d4:30:32:5d:12:e2:dd:e7:
                    d1:43:36:c4:d4:4c:22:4b:cf:07:2f:85:27:99:51:
                    b4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E2:2A:88:0D:77:95:30:DE:77:95:71:25:F1:B0:C8:2B:94:07:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/717bb925-5892-3611-8545-adae24a0e055.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/e7557763-e46b-4ec1-afa8-bcf257b54911.crl

            X509v3 Authority Key Identifier:
                keyid:20:05:AA:3B:64:BB:D6:7C:B2:7A:AE:9C:97:F0:CC:AE:9D:64:0B:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:61c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:a3:5d:27:2f:f7:6b:67:47:75:96:b7:5a:35:b8:fb:e0:f1:
         58:97:07:60:26:e7:af:29:d6:68:b4:a5:b3:e8:9f:08:bb:41:
         93:b4:a2:18:cc:16:b2:5b:a3:01:3d:f8:e9:61:0a:f3:41:e9:
         5e:0e:40:69:fb:8c:e9:4d:ce:31:3e:7a:ab:d7:95:f2:3f:ea:
         d4:e3:a1:ec:f3:2f:ed:b0:f8:ff:f4:f1:33:c9:58:60:08:de:
         5d:46:20:e2:58:0f:22:54:55:97:46:01:b4:9d:26:1a:19:76:
         af:68:fd:a6:b8:63:7a:f1:05:27:dd:88:f9:62:07:ac:01:3b:
         ce:4f:e8:10:19:0d:7e:6e:22:61:15:9b:78:ae:59:85:04:e5:
         b3:00:9d:9b:3c:36:a1:58:ba:c3:30:8d:2e:96:ad:4d:10:b1:
         65:ff:6a:25:6b:dc:0f:77:ca:21:76:75:0b:86:dc:b8:a1:3e:
         c7:3f:61:88:01:7e:20:d9:00:f1:f5:7a:5a:7c:06:3f:ee:53:
         63:e3:d7:a4:4c:5e:11:b6:c9:ec:d3:be:bc:ca:6c:a5:99:42:
         55:bf:da:e0:a5:6e:0b:62:e8:d5:dd:90:a9:42:ca:46:99:80:
         ce:79:34:14:3c:65:95:bc:08:6b:3b:fc:06:6f:c7:25:98:b5:
         d1:e8:29:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----