Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/2b0e538d-3ba4-3fb5-8043-3be73d2e1315.roa
File:                     2b0e538d-3ba4-3fb5-8043-3be73d2e1315.roa (raw, json)
Hash identifier:          +mXeFbIq586GRLTDPOhhufJb7jiiWwc5uOP/hh6KxIY=
Subject key identifier:   B1:AC:CF:6C:5D:A8:D3:BF:D4:79:DE:72:71:A3:AB:87:B9:43:FE:3C
Certificate issuer:       /CN=ea3f9044-c185-4062-8dad-240b32b11348
Certificate serial:       010D0C9F432858492D5D311BE2976BE083E3F460
Authority key identifier: FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/2b0e538d-3ba4-3fb5-8043-3be73d2e1315.roa
Signing time:             Thu 13 Mar 2025 18:52:58 +0000
ROA not before:           Thu 13 Mar 2025 18:52:58 +0000
ROA not after:            Wed 11 Jun 2025 18:52:58 +0000
asID:                     395661
IP address blocks:        2607:bc40::/44 maxlen: 48
Validation:               Failed, certificate revoked on Wed 26 Mar 2025 21:18:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2d:5d:31:1b:e2:97:6b:e0:83:e3:f4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea3f9044-c185-4062-8dad-240b32b11348
        Validity
            Not Before: Mar 13 18:52:58 2025 GMT
            Not After : Jun 11 18:52:58 2025 GMT
        Subject: CN=d0d89446-ae46-4abd-871c-5a4ecad84503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2f:a3:1b:fb:fb:bd:58:80:28:4d:0c:29:d8:
                    99:b2:54:29:b0:91:cc:75:37:0b:7e:6b:7b:4a:8d:
                    30:66:65:ed:10:eb:10:40:ef:ee:5e:ad:82:d7:b3:
                    7a:c2:83:a1:6a:44:e7:0f:6b:2a:77:d3:30:d4:2e:
                    2e:25:2b:fb:77:dc:52:66:58:39:ad:2b:22:90:80:
                    85:7f:c7:3f:a2:f4:a8:63:a6:1e:d5:8a:00:ee:f4:
                    47:0f:96:93:48:d6:5b:1c:6c:a6:0c:7b:13:a8:7f:
                    ed:d5:8c:32:07:16:89:c8:fc:40:ad:f9:4b:7c:14:
                    f4:40:54:6e:36:d1:71:30:0e:ad:ec:0e:df:a4:65:
                    c5:96:3a:03:5f:c9:da:fa:28:41:1e:7b:ba:af:72:
                    ab:4f:a2:29:eb:34:9e:47:30:52:14:e4:b9:d4:80:
                    65:d8:37:5a:9a:cc:9a:75:b1:97:a7:00:2f:48:d9:
                    9c:42:4d:bf:e7:78:e7:d1:ab:e3:ac:02:8f:94:42:
                    e8:e3:70:a4:8e:eb:30:5b:83:65:1c:0e:cd:6d:93:
                    46:b2:0a:22:4b:b1:f2:15:5b:4b:40:87:ba:60:9a:
                    c0:a3:86:6d:33:a4:f7:25:de:80:03:ca:a6:91:06:
                    38:e5:fc:bb:1d:18:0b:8f:be:00:83:07:15:7d:5d:
                    0a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AC:CF:6C:5D:A8:D3:BF:D4:79:DE:72:71:A3:AB:87:B9:43:FE:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/2b0e538d-3ba4-3fb5-8043-3be73d2e1315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl

            X509v3 Authority Key Identifier:
                keyid:FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:bc40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:49:0c:e7:7b:68:95:9d:0f:df:b9:64:d0:e6:6e:ff:29:2f:
         75:23:3c:d3:8e:89:39:b4:7e:df:b0:9b:60:a7:f3:96:9f:c7:
         43:4f:7a:a9:00:e4:6d:59:19:65:dd:6c:91:ab:5a:4f:61:0f:
         b9:0d:e5:5f:03:48:5f:b7:c7:e1:e1:c7:6e:71:48:58:97:a3:
         e8:40:81:7b:6e:56:66:bc:ba:70:78:ec:c7:5d:c2:2d:96:fc:
         4f:b3:3c:ed:72:5e:9d:d3:39:b3:2a:81:77:80:77:80:9c:08:
         59:ee:e2:b7:6d:b2:40:51:41:3b:39:1c:83:4b:9d:e2:8e:27:
         39:f0:be:16:50:84:09:d8:9f:3c:d0:3a:24:d9:32:e5:16:fe:
         c7:41:61:53:00:4a:d3:bd:06:9e:e5:d6:45:af:c1:56:1e:14:
         f9:5e:dc:54:db:69:f5:d6:92:e6:a9:4a:3e:3c:6d:58:89:15:
         c5:88:7f:e1:30:c5:13:8d:74:cf:c2:0b:26:8b:60:a2:d3:ce:
         1f:7e:bb:68:0f:17:93:f2:94:65:3d:57:e9:47:c7:e1:c2:dc:
         90:83:17:47:21:9d:95:9e:8f:39:7a:04:a7:36:75:a8:1f:17:
         9d:07:6c:65:f7:de:98:96:89:5f:ab:5f:6c:0b:41:ec:69:e0:
         41:f0:1b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----