Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/d856e1da-6f5f-3289-85ce-1e26e151d41b.roa
File:                     d856e1da-6f5f-3289-85ce-1e26e151d41b.roa (raw, json)
Hash identifier:          jdRJMJuyv5LT8vaoaazeBHLWTVL3LKVqReQpMkRA35Y=
Subject key identifier:   9B:89:16:A9:AB:4C:2B:AA:5A:5E:D1:95:15:59:C6:B5:5B:40:A5:46
Certificate issuer:       /CN=415b363a-8f59-46ca-baf4-e6cb4b8fdf20
Certificate serial:       010D0C9F432858454272BCD31DA0ACC5C47DCE80
Authority key identifier: 39:D9:D1:A1:3D:AC:AE:DF:23:16:FE:9B:20:DD:D0:8A:E1:19:11:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/d856e1da-6f5f-3289-85ce-1e26e151d41b.roa
Signing time:             Tue 19 Mar 2024 13:00:34 +0000
ROA not before:           Tue 19 Mar 2024 13:00:34 +0000
ROA not after:            Mon 17 Jun 2024 13:00:34 +0000
asID:                     22773
IP address blocks:        2605:5fc0::/28 maxlen: 28

Validation:               Failed, certificate revoked on Thu 28 Mar 2024 14:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:42:72:bc:d3:1d:a0:ac:c5:c4:7d:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415b363a-8f59-46ca-baf4-e6cb4b8fdf20
        Validity
            Not Before: Mar 19 13:00:34 2024 GMT
            Not After : Jun 17 13:00:34 2024 GMT
        Subject: CN=c66d380c-8450-4168-8eb0-01593b280a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:bc:1b:c4:32:fb:a7:50:a0:04:f3:14:d4:ef:
                    b9:8b:0f:4c:cc:13:9f:6b:dc:81:bf:88:2d:6f:3a:
                    74:01:11:e9:08:2d:29:e5:d8:89:43:f8:f0:5a:5a:
                    4a:47:14:cf:6f:b4:b9:a1:12:62:e1:c9:fd:ed:a4:
                    f8:16:33:8f:b0:86:7c:77:b7:03:12:7d:7e:26:60:
                    6a:e6:5b:9b:a1:67:a0:cb:17:2d:8e:99:57:74:33:
                    38:c3:4f:f8:fc:a7:bc:94:29:a9:d5:2e:2c:ef:3f:
                    63:33:ab:db:39:a7:16:f6:c7:07:a3:73:24:54:dd:
                    a4:7a:8d:90:a6:22:d0:44:2c:a5:6d:89:c4:da:3d:
                    73:f3:43:cc:5f:98:fb:1a:d2:69:d3:fc:14:d4:a6:
                    ad:37:bf:9b:f5:c6:5b:7d:be:0e:04:75:86:86:76:
                    40:48:ed:57:22:f0:c8:41:20:f0:fd:db:c6:90:f6:
                    af:22:af:c4:7d:69:73:bd:ae:15:76:a2:56:ba:8b:
                    d9:f8:f1:33:23:45:49:f4:6a:36:ad:94:40:dd:6a:
                    aa:23:c5:5b:fc:dd:e5:44:59:72:30:ed:4d:4c:41:
                    38:3d:af:67:e6:10:28:aa:28:b8:94:bb:77:10:34:
                    2f:10:6d:e2:24:a6:99:44:50:33:d3:69:c8:40:9e:
                    37:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:89:16:A9:AB:4C:2B:AA:5A:5E:D1:95:15:59:C6:B5:5B:40:A5:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/d856e1da-6f5f-3289-85ce-1e26e151d41b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.crl

            X509v3 Authority Key Identifier:
                keyid:39:D9:D1:A1:3D:AC:AE:DF:23:16:FE:9B:20:DD:D0:8A:E1:19:11:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:5fc0::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:75:48:f3:eb:06:4b:fd:0e:d1:b1:17:46:14:1c:1e:ec:c2:
         ed:e2:52:52:85:3f:6c:7b:ec:3d:1a:46:ae:19:92:98:89:21:
         b4:87:61:e2:f7:9c:57:68:e4:62:59:e1:f5:ca:6c:f7:60:3d:
         32:49:4b:cb:6f:48:8b:64:c3:46:cd:ee:7f:7a:02:ee:b4:29:
         b6:2c:50:d0:fe:7f:48:5d:55:90:cb:37:4b:fc:58:1b:89:30:
         a8:21:d6:6b:38:b6:65:88:13:6b:f2:f0:20:12:e7:73:7b:da:
         ab:88:17:c9:58:cc:a8:a6:78:06:0e:8e:a0:3c:4b:69:85:d8:
         e3:6f:64:8b:f4:97:1d:5f:40:d7:88:9f:b4:f4:6b:6e:2e:30:
         13:dc:52:99:d0:dd:1a:36:e6:c8:bd:99:85:d2:fd:d8:fb:57:
         31:c4:77:0e:e3:da:ae:f9:a0:bd:64:46:34:31:d2:5f:79:23:
         8e:8f:bc:d9:6c:ad:a0:ed:54:e3:55:65:d7:dc:0d:4c:e5:fc:
         57:9c:f4:f7:91:e2:98:c6:e4:19:7f:ce:91:52:01:5c:b0:d7:
         c9:01:26:13:bb:7f:cc:77:d5:36:3f:1a:66:6c:26:50:ac:33:
         25:48:ba:1a:65:d2:a0:f6:79:cb:6f:1f:84:81:21:4e:76:38:
         00:1e:d7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----