Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/14a29e59-e466-391c-804b-75e710812d28.roa
File:                     14a29e59-e466-391c-804b-75e710812d28.roa (raw, json)
Hash identifier:          CxDKRe7hgjfGTr6lGYHUmrXAFsO/j1D8qmuglU/pi0g=
Subject key identifier:   FB:D2:A8:37:E6:15:DD:1B:32:64:6A:6F:AB:F2:7E:E6:1B:1C:97:2C
Certificate issuer:       /CN=239e2a72-9347-4316-9be7-20bdf6512711
Certificate serial:       010D0C9F43285846464F02B6F6F89CA3E3962400
Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/14a29e59-e466-391c-804b-75e710812d28.roa
Signing time:             Thu 20 Jun 2024 14:58:48 +0000
ROA not before:           Thu 20 Jun 2024 14:58:48 +0000
ROA not after:            Wed 18 Sep 2024 14:58:48 +0000
asID:                     51082
IP address blocks:        2606:f280::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 13:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:46:4f:02:b6:f6:f8:9c:a3:e3:96:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711
        Validity
            Not Before: Jun 20 14:58:48 2024 GMT
            Not After : Sep 18 14:58:48 2024 GMT
        Subject: CN=f80b00d5-c5f4-44d0-abc4-1e06749e78bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:50:13:e6:1a:22:c1:4a:de:dd:8a:90:5a:5f:
                    35:01:bb:59:84:98:50:7b:fa:f2:3d:c7:b4:08:5f:
                    d9:f6:83:d0:30:ad:0a:be:db:95:ab:41:dc:a8:f5:
                    3c:63:14:89:27:46:7b:28:80:8a:be:61:6d:e8:6b:
                    58:0c:67:42:7f:f1:44:0b:93:82:3e:75:27:24:21:
                    9e:87:8d:05:68:a5:38:d1:80:f5:80:54:23:4f:be:
                    3a:67:58:16:d8:e6:e0:b9:7a:65:28:1b:64:6c:3e:
                    a4:3a:76:a0:76:52:5d:3f:20:28:90:a3:f0:93:1b:
                    36:bd:b2:ac:f2:04:49:36:3c:84:2c:39:dd:4f:f1:
                    ee:2a:df:ff:bc:e2:c6:80:79:35:b2:ee:f2:50:e4:
                    b6:0f:aa:67:ea:22:53:49:46:3c:87:a7:5f:7c:e7:
                    a0:1f:ce:01:2a:f9:9a:3d:3d:bd:66:65:25:47:55:
                    ef:db:d3:23:56:9b:be:ba:09:26:74:45:86:05:36:
                    59:b8:4f:77:16:a8:49:21:d0:93:6c:b0:37:81:02:
                    16:45:e7:73:27:d1:6a:89:e6:01:09:fc:ad:83:92:
                    99:57:96:c6:89:96:a8:d1:20:82:0d:0b:5f:2b:8a:
                    78:61:62:f2:dc:c4:c5:0c:eb:d9:ce:5a:81:cf:46:
                    a1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D2:A8:37:E6:15:DD:1B:32:64:6A:6F:AB:F2:7E:E6:1B:1C:97:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/14a29e59-e466-391c-804b-75e710812d28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl

            X509v3 Authority Key Identifier:
                keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f280::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:fc:70:a8:d9:95:be:ec:8f:c8:bc:f2:7c:27:2f:50:70:69:
         86:f7:9f:bf:b4:cb:16:71:4b:5f:06:87:0d:28:69:37:4f:91:
         ce:fd:39:05:98:45:57:4e:30:29:f7:c3:c1:95:6c:03:4c:7c:
         b8:79:be:a0:ce:08:69:bf:c5:1a:cd:3b:b4:b2:0d:34:d2:c8:
         47:88:91:ae:42:d3:af:51:de:b4:9e:8e:80:e7:87:93:da:9c:
         1a:0e:f5:99:f9:cf:03:b7:5f:e5:d5:f5:8f:dc:11:2a:ed:09:
         e8:65:bc:18:00:17:41:fc:ec:f6:4b:21:7b:a1:c1:22:d5:d1:
         97:a8:76:a9:1a:b1:ac:5a:47:09:53:34:1d:6d:2b:56:76:70:
         48:09:a8:26:14:4d:0f:aa:0e:3b:f2:d7:b7:fc:12:f7:35:40:
         66:56:34:57:0f:05:ab:be:45:d4:b4:03:36:0d:ec:84:ec:88:
         51:c9:15:a8:b5:de:9d:84:54:cf:c5:ab:76:63:e9:69:7f:b0:
         3c:01:42:93:b3:e7:fe:2c:56:db:33:c0:3b:19:72:95:68:5d:
         1d:fe:b6:7c:68:fc:70:91:86:0b:f7:8b:0d:b4:5b:e0:f1:00:
         6f:c5:e2:37:73:76:dd:a7:04:51:f2:65:a1:25:f4:86:c5:0b:
         1b:de:6e:f4
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEZGTwK29vico+OWJAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjM5ZTJhNzItOTM0Ny00MzE2LTliZTctMjBiZGY2NTEy
NzExMB4XDTI0MDYyMDE0NTg0OFoXDTI0MDkxODE0NTg0OFowLzEtMCsGA1UEAxMk
ZjgwYjAwZDUtYzVmNC00NGQwLWFiYzQtMWUwNjc0OWU3OGJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9lAT5hoiwUre3YqQWl81AbtZhJhQe/ryPce0
CF/Z9oPQMK0KvtuVq0HcqPU8YxSJJ0Z7KICKvmFt6GtYDGdCf/FEC5OCPnUnJCGe
h40FaKU40YD1gFQjT746Z1gW2ObguXplKBtkbD6kOnagdlJdPyAokKPwkxs2vbKs
8gRJNjyELDndT/HuKt//vOLGgHk1su7yUOS2D6pn6iJTSUY8h6dffOegH84BKvma
PT29ZmUlR1Xv29MjVpu+ugkmdEWGBTZZuE93FqhJIdCTbLA3gQIWRedzJ9FqieYB
Cfytg5KZV5bGiZao0SCCDQtfK4p4YWLy3MTFDOvZzlqBz0ahHQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPvSqDfmFd0bMmRqb6vyfuYbHJcsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMzll
MmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJkZjY1MTI3MTEvMTRhMjllNTktZTQ2Ni0z
OTFjLTgwNGItNzVlNzEwODEyZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjM5ZTJhNzItOTM0Ny00MzE2LTli
ZTctMjBiZGY2NTEyNzExLzIzOWUyYTcyLTkzNDctNDMxNi05YmU3LTIwYmRmNjUx
MjcxMS5jcmwwHwYDVR0jBBgwFoAUxwBadkJgEZ/tem9/Z5RiZOwta1QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMzllMmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJk
ZjY1MTI3MTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbygDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCW/HCo2ZW+7I/IvPJ8Jy9QcGmG95+/tMsWcUtfBocNKGk3T5HO/TkF
mEVXTjAp98PBlWwDTHy4eb6gzghpv8UazTu0sg000shHiJGuQtOvUd60no6A54eT
2pwaDvWZ+c8Dt1/l1fWP3BEq7QnoZbwYABdB/Oz2SyF7ocEi1dGXqHapGrGsWkcJ
UzQdbStWdnBICagmFE0Pqg478te3/BL3NUBmVjRXDwWrvkXUtAM2DeyE7IhRyRWo
td6dhFTPxat2Y+lpf7A8AUKTs+f+LFbbM8A7GXKVaF0d/rZ8aPxwkYYL94sNtFvg
8QBvxeI3c3bdpwRR8mWhJfSGxQsb3m70
-----END CERTIFICATE-----