Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9fd36f9-97b3-4d67-9844-6c32258695b0/91788df3-5a2d-32ac-b1cc-01d0bf194568.roa
File:                     91788df3-5a2d-32ac-b1cc-01d0bf194568.roa (raw, json)
Hash identifier:          r7Ee2ZCWTqStNAlrI/7kbFNQq93hJWszUdVtu85bjSs=
Subject key identifier:   31:50:15:24:1E:A4:24:43:CD:8C:F3:AC:1B:30:38:74:73:BB:B5:11
Certificate issuer:       /CN=b9fd36f9-97b3-4d67-9844-6c32258695b0
Certificate serial:       010D0C9F432858453CB4BB364B7FC6C0F3375B00
Authority key identifier: 1C:A9:C1:ED:56:77:4A:07:89:F9:07:A2:3C:74:E5:FB:4F:F8:0E:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9fd36f9-97b3-4d67-9844-6c32258695b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9fd36f9-97b3-4d67-9844-6c32258695b0/91788df3-5a2d-32ac-b1cc-01d0bf194568.roa
Signing time:             Sun 17 Mar 2024 11:38:44 +0000
ROA not before:           Sun 17 Mar 2024 11:38:44 +0000
ROA not after:            Sat 15 Jun 2024 11:38:44 +0000
asID:                     7029
IP address blocks:        2605:6f40::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 12 Apr 2024 07:07:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3c:b4:bb:36:4b:7f:c6:c0:f3:37:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9fd36f9-97b3-4d67-9844-6c32258695b0
        Validity
            Not Before: Mar 17 11:38:44 2024 GMT
            Not After : Jun 15 11:38:44 2024 GMT
        Subject: CN=1a4bcdbd-deb0-4fcb-9f63-a1ddc580cb24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ad:68:08:ea:e6:ae:a8:02:a0:13:ae:54:ce:
                    f4:0b:af:5f:aa:66:c8:f3:1f:44:21:67:0c:0d:99:
                    a0:ff:8e:3f:3a:ac:9c:65:70:76:b4:d4:91:ff:ef:
                    32:90:be:94:cb:67:12:48:72:88:dc:32:ad:b5:17:
                    72:7b:93:32:73:32:0a:59:0c:45:bc:93:cf:a9:29:
                    f6:22:76:b8:66:17:aa:be:1c:dd:ff:6d:cc:6a:2a:
                    d8:b7:5d:67:ec:29:84:ce:0a:34:94:84:7e:ed:57:
                    53:d8:f5:33:b2:41:c1:5a:7d:44:b6:ac:91:b7:42:
                    0d:ec:63:ef:25:25:fc:99:00:7a:a1:fd:99:b8:9c:
                    a4:01:48:1d:ba:b2:48:03:bd:2d:08:00:0f:8a:22:
                    aa:5e:15:3e:af:17:87:d8:34:ef:84:0b:18:6c:86:
                    66:75:ab:5c:25:0d:79:20:01:77:1d:ff:5f:68:36:
                    d0:4b:d4:e2:a9:7b:2e:3c:cf:a7:5f:bb:f2:39:53:
                    f4:bf:47:34:90:c4:3d:69:c8:3e:5e:e5:ac:9e:b5:
                    37:f4:fd:3a:bc:eb:4b:03:c9:9f:5b:93:b7:b1:97:
                    5b:c4:10:ec:86:86:e9:d1:d0:48:99:f1:8e:a0:56:
                    47:b1:03:16:36:79:8e:52:cc:8f:79:cd:5c:a2:2a:
                    59:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:50:15:24:1E:A4:24:43:CD:8C:F3:AC:1B:30:38:74:73:BB:B5:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9fd36f9-97b3-4d67-9844-6c32258695b0/91788df3-5a2d-32ac-b1cc-01d0bf194568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9fd36f9-97b3-4d67-9844-6c32258695b0/b9fd36f9-97b3-4d67-9844-6c32258695b0.crl

            X509v3 Authority Key Identifier:
                keyid:1C:A9:C1:ED:56:77:4A:07:89:F9:07:A2:3C:74:E5:FB:4F:F8:0E:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9fd36f9-97b3-4d67-9844-6c32258695b0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:1f:a0:bd:ee:35:a3:8f:82:e2:53:23:24:89:ce:13:6f:26:
         1e:bc:3b:06:c8:49:fd:a5:18:c8:40:cb:a6:71:50:6a:bb:c0:
         f5:07:fd:56:8a:8f:6c:4a:87:7a:69:90:3f:5b:ee:a9:ff:86:
         39:8c:70:d8:d3:3e:ff:c1:8b:38:17:ef:35:25:24:5f:90:88:
         15:ef:8a:78:ab:c2:3c:4f:47:99:e3:25:2a:b8:7b:af:c4:1b:
         e6:03:af:77:92:e9:08:7c:80:ec:a8:73:99:e5:7e:d1:cf:7c:
         17:b1:78:64:a8:c7:23:36:98:39:c4:93:38:e7:37:d1:db:4b:
         4c:83:4d:0d:b3:f7:00:48:6e:7e:fa:0c:ee:62:f6:78:c6:05:
         db:fc:9b:d3:7e:f0:ae:ac:7b:d9:c9:ab:69:bb:12:a5:69:9f:
         47:ea:bb:4d:10:c5:07:33:75:db:27:41:9f:3b:bd:82:cc:ba:
         4f:82:45:11:42:c6:dd:42:35:06:60:7c:c6:40:18:bd:37:73:
         93:e6:b2:3e:28:b9:2f:a5:7b:59:12:d0:7d:77:d8:aa:b1:07:
         05:7a:39:5b:83:eb:56:58:ba:7e:09:25:a5:28:4e:5e:a2:5e:
         04:6b:82:70:e8:47:e1:16:5c:5c:e4:88:54:af:90:fd:e2:4f:
         9c:98:c3:c1
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEU8tLs2S3/GwPM3WwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjlmZDM2ZjktOTdiMy00ZDY3LTk4NDQtNmMzMjI1ODY5
NWIwMB4XDTI0MDMxNzExMzg0NFoXDTI0MDYxNTExMzg0NFowLzEtMCsGA1UEAxMk
MWE0YmNkYmQtZGViMC00ZmNiLTlmNjMtYTFkZGM1ODBjYjI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka1oCOrmrqgCoBOuVM70C69fqmbI8x9EIWcM
DZmg/44/OqycZXB2tNSR/+8ykL6Uy2cSSHKI3DKttRdye5MyczIKWQxFvJPPqSn2
Ina4Zheqvhzd/23MairYt11n7CmEzgo0lIR+7VdT2PUzskHBWn1EtqyRt0IN7GPv
JSX8mQB6of2ZuJykAUgdurJIA70tCAAPiiKqXhU+rxeH2DTvhAsYbIZmdatcJQ15
IAF3Hf9faDbQS9TiqXsuPM+nX7vyOVP0v0c0kMQ9acg+XuWsnrU39P06vOtLA8mf
W5O3sZdbxBDshobp0dBImfGOoFZHsQMWNnmOUsyPec1coipZLwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDFQFSQepCRDzYzzrBswOHRzu7URMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iOWZk
MzZmOS05N2IzLTRkNjctOTg0NC02YzMyMjU4Njk1YjAvOTE3ODhkZjMtNWEyZC0z
MmFjLWIxY2MtMDFkMGJmMTk0NTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjlmZDM2ZjktOTdiMy00ZDY3LTk4
NDQtNmMzMjI1ODY5NWIwL2I5ZmQzNmY5LTk3YjMtNGQ2Ny05ODQ0LTZjMzIyNTg2
OTViMC5jcmwwHwYDVR0jBBgwFoAUHKnB7VZ3SgeJ+QeiPHTl+0/4DpgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iOWZkMzZmOS05N2IzLTRkNjctOTg0NC02YzMy
MjU4Njk1YjAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVvQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBZH6C97jWjj4LiUyMkic4TbyYevDsGyEn9pRjIQMumcVBqu8D1B/1W
io9sSod6aZA/W+6p/4Y5jHDY0z7/wYs4F+81JSRfkIgV74p4q8I8T0eZ4yUquHuv
xBvmA693kukIfIDsqHOZ5X7Rz3wXsXhkqMcjNpg5xJM45zfR20tMg00Ns/cASG5+
+gzuYvZ4xgXb/JvTfvCurHvZyatpuxKlaZ9H6rtNEMUHM3XbJ0GfO72CzLpPgkUR
QsbdQjUGYHzGQBi9N3OT5rI+KLkvpXtZEtB9d9iqsQcFejlbg+tWWLp+CSWlKE5e
ol4Ea4Jw6EfhFlxc5IhUr5D94k+cmMPB
-----END CERTIFICATE-----