Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/a75e1281-1109-3fd6-876c-85e161c4ad1d.roa
File:                     a75e1281-1109-3fd6-876c-85e161c4ad1d.roa (raw, json)
Hash identifier:          dB4QQsStfKY3EBEBwhr5vf/0lUlu+KGyTfy3DlEl360=
Subject key identifier:   EE:80:B0:9A:29:26:F9:64:7C:2E:5A:21:15:B1:F0:F0:76:60:50:72
Certificate issuer:       /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial:       010D0C9F43285845883DE0267A8E64EEAB99DDA0
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/a75e1281-1109-3fd6-876c-85e161c4ad1d.roa
Signing time:             Sat 13 Apr 2024 13:00:34 +0000
ROA not before:           Sat 13 Apr 2024 13:00:34 +0000
ROA not after:            Fri 12 Jul 2024 13:00:34 +0000
asID:                     198949
IP address blocks:        2604:b480:12::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 17:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:88:3d:e0:26:7a:8e:64:ee:ab:99:dd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
        Validity
            Not Before: Apr 13 13:00:34 2024 GMT
            Not After : Jul 12 13:00:34 2024 GMT
        Subject: CN=b588bb22-d021-4ae6-abc5-72fa013eb465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:55:9b:d6:e2:d6:b6:1c:67:3b:5f:a1:73:c1:
                    f9:58:3f:b1:c7:b1:f2:2d:3e:92:58:00:39:97:97:
                    73:2a:d1:d3:a6:19:12:1d:6a:65:e1:e2:c5:7f:f6:
                    3d:53:1d:4c:f4:af:50:d1:d7:78:c9:53:82:0d:c1:
                    bf:e4:69:71:3a:32:44:1c:63:e8:23:a7:7b:e8:13:
                    11:ef:29:fe:b2:35:80:e7:76:6b:51:77:70:86:b4:
                    c3:86:08:a1:69:59:e0:b7:bc:0c:29:bc:17:57:52:
                    1a:77:02:96:4d:83:f1:a8:26:ec:3c:05:58:32:ef:
                    57:3f:fc:64:78:66:a7:35:b9:28:16:7e:20:b9:5e:
                    f9:e7:00:f3:9d:50:ea:7e:9c:8d:99:60:c2:da:7e:
                    98:e0:3f:e0:a0:02:68:19:35:d6:43:76:3b:0c:61:
                    ea:30:d1:9f:64:57:67:20:8f:41:99:d5:f4:5d:42:
                    54:80:eb:fb:2e:22:3c:d1:48:56:6c:69:4f:5f:2b:
                    c7:b4:5e:2a:08:73:bb:d9:0c:c3:70:da:99:8c:67:
                    3b:e6:ac:15:d5:b9:71:d9:64:54:52:0a:0f:ef:da:
                    2d:34:8a:d9:98:b8:fe:36:be:65:41:d1:ff:ba:9c:
                    68:ce:97:ee:24:2a:bf:5a:d2:90:e0:b8:cd:f4:71:
                    00:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:80:B0:9A:29:26:F9:64:7C:2E:5A:21:15:B1:F0:F0:76:60:50:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/a75e1281-1109-3fd6-876c-85e161c4ad1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:b480:12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:99:df:a0:3e:48:0e:87:31:86:a4:c2:a4:e2:da:ae:13:b9:
         42:a8:1a:90:d8:c0:08:99:8f:6c:3a:14:6d:c6:80:cd:82:16:
         44:c9:03:24:12:1b:5f:40:a2:8c:b9:b4:cb:d7:96:8b:e5:9f:
         fd:0b:ff:e7:90:fa:68:16:71:7f:5d:95:5f:d6:5d:6d:22:e7:
         5d:c4:84:c4:1f:7b:a6:27:93:b6:ff:a8:95:a9:e6:58:53:b2:
         15:de:40:bc:46:f0:19:0e:d7:1d:12:57:d9:9e:18:d9:be:6c:
         8a:c5:d9:e3:23:43:55:ff:d0:40:58:22:6c:e6:6e:e8:9e:68:
         12:bc:52:a5:5b:b6:0f:0f:fc:bb:dd:49:26:2a:a9:61:5e:7c:
         1d:a3:cc:f2:6c:60:6c:d1:02:9b:4e:f3:95:67:98:61:4c:02:
         fb:9b:06:c7:8f:a0:57:78:66:96:09:8e:c1:65:4e:f5:0a:ce:
         76:d8:be:51:bc:e6:68:79:b4:b5:f1:cb:db:71:2e:1d:5e:66:
         0c:d3:4e:a2:75:c6:e9:1d:51:bc:1f:93:77:f8:f3:bb:53:4a:
         08:46:c5:ff:36:69:30:4a:b6:75:89:af:f1:2a:b1:67:87:1f:
         7a:bd:ae:be:bf:78:35:3e:f3:22:0f:6e:a8:d2:41:69:6b:10:
         94:e9:8f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----