Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/1b851091-7d2a-3e3f-925a-20260173c014.roa
File:                     1b851091-7d2a-3e3f-925a-20260173c014.roa (raw, json)
Hash identifier:          V7WsuDw046bty4s6S3JJtK24WVFem0A9z/AshT/UvKw=
Subject key identifier:   FF:7E:56:ED:F0:2A:3C:33:1B:FB:C7:8F:E8:E2:04:B5:DB:F2:13:DC
Certificate issuer:       /CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
Certificate serial:       010D0C9F43285845E193C42721FD83773F136080
Authority key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/1b851091-7d2a-3e3f-925a-20260173c014.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     32554
IP address blocks:        2607:6b40:4000::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 31 May 2024 17:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:c4:27:21:fd:83:77:3f:13:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=9252bdb1-4d56-4ec5-bd55-c07942d4f7ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:e4:e3:7b:4a:0f:a2:1f:79:f0:3c:f0:42:
                    f6:50:f7:3e:4a:7e:07:f8:f8:e2:c2:82:5c:d6:87:
                    5e:61:17:79:06:0a:62:8f:10:c4:54:8d:10:b4:ca:
                    09:6b:00:e9:48:86:a2:df:89:3e:8a:48:79:d0:3f:
                    5a:db:c9:52:e7:d3:a9:81:51:f3:77:5c:9a:9c:82:
                    10:5f:9b:b7:d1:dc:16:9b:76:b1:13:56:b3:6f:5b:
                    f8:56:45:94:75:7a:60:24:3f:a0:f3:89:fc:be:78:
                    c9:80:6e:f5:bf:73:54:39:b7:63:c7:80:d8:cf:b0:
                    17:43:92:86:d3:d1:5f:d6:f6:c3:de:b8:33:ff:6f:
                    c7:12:dc:c4:be:ef:e2:51:fc:6b:6e:5a:31:bd:1d:
                    35:6b:cc:bc:1c:21:61:17:09:a1:8a:74:39:0f:15:
                    f6:cd:30:d8:1b:0b:8e:c8:2e:f5:21:e3:df:e4:3f:
                    b3:8c:63:16:4d:96:f1:86:74:d4:ff:55:91:5d:46:
                    9a:fd:5d:ac:1c:d4:69:7a:9e:af:b8:b8:6e:0c:6a:
                    63:84:5d:a5:88:a5:bb:bb:8f:6f:92:be:99:12:01:
                    78:e4:f9:ef:1a:5b:98:00:e7:e5:bd:96:be:76:bd:
                    f3:cf:2b:24:b2:da:64:34:55:06:36:b7:b3:25:5d:
                    a0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7E:56:ED:F0:2A:3C:33:1B:FB:C7:8F:E8:E2:04:B5:DB:F2:13:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/1b851091-7d2a-3e3f-925a-20260173c014.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl

            X509v3 Authority Key Identifier:
                keyid:26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b40:4000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:b4:52:b0:e9:28:2d:80:d5:e9:89:81:0c:81:62:03:6e:3d:
         e8:da:4c:b3:7f:5b:58:0c:f2:fc:09:1f:cc:f9:9e:d0:13:27:
         d9:8b:cb:16:5b:04:b8:c2:88:59:23:96:ce:03:10:3b:71:72:
         4f:b5:30:2a:ca:5e:fa:0a:ae:2f:14:08:37:30:5b:7e:39:19:
         e1:12:31:4b:b2:f4:0c:04:c5:5e:bc:b0:b9:8f:da:40:34:df:
         3e:b9:d3:39:84:c7:bf:14:3c:d9:b4:67:8f:d1:12:f0:e8:54:
         15:d7:07:8d:67:82:d1:53:a7:49:31:9b:a1:d9:04:e2:e6:cc:
         d6:11:10:77:b0:bc:9d:9b:38:9a:91:a8:25:d5:f0:c0:0b:ae:
         ba:2e:62:f5:42:5a:2f:0a:7c:7d:08:4a:86:74:ed:e1:44:08:
         3f:c2:db:87:7d:d1:15:ce:e1:16:8b:10:2c:48:83:71:37:d5:
         00:0c:3f:81:b7:2c:31:66:ad:c8:b3:10:d7:6b:0a:fb:d9:6b:
         ad:e6:bb:8a:00:84:5c:0a:bc:72:23:87:a6:16:21:3d:ec:e9:
         60:7b:9e:bb:d9:2f:4d:fc:6a:81:66:61:7c:55:55:83:d2:6c:
         70:fd:31:98:c3:e8:75:43:62:ed:d6:40:ed:7c:4f:fe:03:5b:
         6e:d5:1e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----