Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a302ed89-60b4-3809-bb36-fd155d11fb9f.roa
File:                     a302ed89-60b4-3809-bb36-fd155d11fb9f.roa (raw, json)
Hash identifier:          c8WzwL6PjQjlHoPpB49S5qYnT2qJVhIMQySjVLh/u50=
Subject key identifier:   D9:99:68:9D:7C:6B:92:89:D5:14:44:3B:38:62:17:FC:C2:94:21:F2
Certificate issuer:       /CN=b32217e1-2473-49a5-919e-08e1896c5019
Certificate serial:       010D0C9F43285846FB8B04BCCC7CA56E8CB92AE0
Authority key identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a302ed89-60b4-3809-bb36-fd155d11fb9f.roa
Signing time:             Sat 24 Aug 2024 13:00:41 +0000
ROA not before:           Sat 24 Aug 2024 13:00:41 +0000
ROA not after:            Fri 22 Nov 2024 14:00:41 +0000
asID:                     22191
IP address blocks:        2604:1dc0::/32 maxlen: 48

Validation:               Failed, certificate revoked on Thu 12 Sep 2024 18:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:fb:8b:04:bc:cc:7c:a5:6e:8c:b9:2a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32217e1-2473-49a5-919e-08e1896c5019
        Validity
            Not Before: Aug 24 13:00:41 2024 GMT
            Not After : Nov 22 14:00:41 2024 GMT
        Subject: CN=b3b15efa-8608-41ad-b6bb-adff520a6b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:92:ef:d5:40:c5:fd:ed:9d:d3:f4:ba:2a:1d:
                    3b:50:f7:ab:9a:6c:75:03:02:2b:55:70:e2:78:c3:
                    78:5f:94:a8:58:a5:45:71:91:2e:7e:9b:be:1f:72:
                    94:2c:17:c8:12:d8:40:6d:21:c4:b6:ab:3f:5a:82:
                    e5:0c:dd:5d:4e:e4:f5:6c:99:0d:eb:1e:c1:df:12:
                    00:c6:1a:b7:7a:75:22:c0:d6:72:c8:a1:29:f4:28:
                    70:cf:48:ce:27:df:4d:4b:98:df:0b:c0:07:de:d2:
                    15:d1:69:40:6b:90:5c:33:8e:4b:36:5a:0c:35:6d:
                    b0:80:04:d9:95:9e:23:02:27:64:2f:37:57:d5:8d:
                    a8:44:5e:ac:b0:bd:d3:37:5f:31:46:95:02:ab:67:
                    f9:19:43:8c:30:b4:52:13:23:33:dd:c4:5d:0b:aa:
                    3d:9b:84:ce:22:9b:9a:79:46:21:f4:82:a3:d1:66:
                    e3:a3:e9:aa:7b:56:27:84:a6:1a:7b:8d:c8:49:ca:
                    3b:fd:d7:59:57:a9:cd:a8:cf:f5:cb:46:39:97:cb:
                    24:26:d7:ba:ea:50:43:e7:de:6b:73:05:95:5e:57:
                    1c:a2:65:85:60:2f:56:74:59:66:47:06:9c:d0:ca:
                    3e:98:87:1a:75:56:32:1e:d1:cb:d4:c3:7f:d8:30:
                    fa:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:99:68:9D:7C:6B:92:89:D5:14:44:3B:38:62:17:FC:C2:94:21:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a302ed89-60b4-3809-bb36-fd155d11fb9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl

            X509v3 Authority Key Identifier:
                keyid:48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:53:47:ae:87:27:35:a7:8d:78:08:58:07:5c:9f:f6:32:53:
         3c:5e:4b:20:3c:78:88:87:c3:6d:1e:d6:91:28:08:45:ce:5b:
         d6:17:9a:26:f8:bd:33:b2:f7:1c:44:34:cc:19:45:8d:79:ad:
         ee:c7:01:3b:6a:10:de:27:1a:30:8f:e9:bf:95:41:33:df:1c:
         dd:a5:eb:a3:45:0a:49:b7:7d:c1:a3:f2:e4:08:a0:cb:d2:e8:
         7f:39:20:e3:04:ae:96:fb:b5:48:f7:23:28:0b:88:33:20:c8:
         e6:ee:a4:ff:89:15:1b:dc:7a:47:da:0a:0a:6e:7c:6d:03:a2:
         76:e1:ce:a4:e9:e1:00:e5:e0:a6:66:56:db:1c:5e:ef:7d:2a:
         96:bf:8f:f2:19:29:df:9d:57:ce:90:1e:41:34:3c:9a:ad:33:
         bc:58:af:a1:76:bf:46:40:36:2d:ad:7c:4f:ba:ea:e7:45:ee:
         dc:f8:8e:e0:62:b7:06:d9:7b:51:54:bc:63:5c:a2:f5:3f:54:
         47:d8:48:4e:2a:40:b1:a9:9f:f2:29:37:ec:20:c2:d9:05:66:
         1d:b4:40:d2:fb:a7:c3:0a:49:b7:33:e3:28:9c:64:04:d1:7f:
         91:91:66:23:f9:ed:9f:2f:82:66:8b:9e:53:6c:1c:e7:12:12:
         3a:2d:fa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----