Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/2698a124-df0c-317b-b134-62ec2b417e39.roa
File:                     2698a124-df0c-317b-b134-62ec2b417e39.roa (raw, json)
Hash identifier:          Qt7dGEcRLSATVzMr8XXtiwClm0HiY33Rbi4dnbHUsSY=
Subject key identifier:   C3:D4:14:22:82:B7:EB:BA:06:DE:B0:86:5F:81:10:62:05:CD:A8:83
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285846B48AB1DE1551DD83296A27C0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/2698a124-df0c-317b-b134-62ec2b417e39.roa
Signing time:             Tue 30 Jul 2024 02:37:58 +0000
ROA not before:           Tue 30 Jul 2024 02:37:58 +0000
ROA not after:            Mon 28 Oct 2024 02:37:58 +0000
asID:                     36040
IP address blocks:        2620:11a:a037::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 22:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b4:8a:b1:de:15:51:dd:83:29:6a:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 30 02:37:58 2024 GMT
            Not After : Oct 28 02:37:58 2024 GMT
        Subject: CN=2b10a102-3a39-4583-90cf-8a1bfb77091d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5e:e5:8c:d1:b7:85:90:ee:8e:96:64:3e:44:
                    00:84:37:a6:fb:78:4b:6e:25:43:f0:b0:19:66:04:
                    81:3c:72:2d:c3:1c:d1:4b:26:33:1d:32:e7:25:9d:
                    ba:73:80:99:06:89:cf:df:a9:df:79:e7:65:06:02:
                    d3:de:cd:a3:dd:1f:7b:c5:f3:e8:9d:7c:3e:cd:a1:
                    ea:4e:fc:12:d8:b3:3d:17:4d:df:ab:a5:ff:c4:0e:
                    49:1c:2e:96:27:1b:1f:62:b9:cb:5b:1c:b0:4c:45:
                    a0:b3:80:b7:26:1a:10:8a:4a:2c:d4:cd:5c:a3:4d:
                    74:e1:e4:31:34:4b:03:34:94:40:77:9c:1b:04:ee:
                    e0:19:11:fa:96:00:f8:db:37:68:0c:4e:93:cc:24:
                    f0:1e:09:55:c0:5f:a7:e3:73:59:11:44:8a:7a:26:
                    27:31:60:19:c8:a4:e7:30:2d:d7:1f:6c:00:64:e7:
                    82:6d:5f:74:5c:ac:b9:f5:82:b1:8c:c9:f4:df:46:
                    98:7a:26:9d:5d:48:c1:a2:1a:7c:49:6a:59:a9:99:
                    11:26:bc:77:b6:86:01:33:63:75:e8:38:aa:fb:b9:
                    b5:57:1a:38:dc:03:af:de:94:d0:46:af:d8:5a:87:
                    c6:39:7a:78:73:a7:ff:78:14:ea:c8:6b:31:a7:99:
                    97:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D4:14:22:82:B7:EB:BA:06:DE:B0:86:5F:81:10:62:05:CD:A8:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/2698a124-df0c-317b-b134-62ec2b417e39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:a037::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:db:2d:bd:02:d2:b0:cc:75:4f:37:40:5f:1e:9d:09:48:8c:
         97:23:f8:de:62:4e:aa:8a:eb:df:88:26:c5:26:70:30:ca:ec:
         f2:f8:21:64:4f:6d:2b:02:c3:a9:61:1b:9b:16:0e:fc:8c:26:
         53:e6:30:0c:e1:81:0a:91:75:71:67:4f:51:eb:dd:74:50:ec:
         84:26:78:9d:2c:51:84:96:94:27:c9:43:70:31:83:0b:84:cd:
         d8:a6:18:e0:34:99:2d:fd:6e:ff:19:89:88:9d:34:3e:52:0b:
         3b:39:ce:ed:9c:04:d5:5a:97:7d:72:6c:30:0c:05:1f:f2:f9:
         d3:c7:33:d5:59:9f:2d:52:b6:61:a3:b5:fb:6b:f8:d5:43:02:
         92:c2:58:58:de:8a:d5:09:af:28:6b:7c:a7:64:cd:c9:26:a3:
         b4:6d:65:fd:70:53:ce:b2:c6:df:d8:ad:d5:6f:d1:a9:c2:3a:
         5c:02:ff:2d:eb:52:6a:99:d4:6a:c5:57:b1:65:d5:3d:0d:9b:
         62:d5:c1:f9:8e:ab:60:2b:a9:b5:e7:a7:ff:d5:6f:e9:94:98:
         79:f0:85:a3:ac:30:19:bf:cd:e4:14:00:89:f5:31:47:fb:ea:
         1b:d9:4b:5a:b2:ce:c1:40:07:cc:da:a9:70:92:f5:73:b3:c0:
         dd:56:b8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----