Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/680e28e5-3b9d-39e5-9ae7-176b31353c3a.roa
File:                     680e28e5-3b9d-39e5-9ae7-176b31353c3a.roa (raw, json)
Hash identifier:          gW6VDDK/5OF/IcaSQ1JEad28uj+t7BK8gqauWZF+8eI=
Subject key identifier:   52:15:C2:58:79:A4:B1:BC:EA:69:E9:CA:C5:3A:CF:78:F9:02:C6:13
Certificate issuer:       /CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
Certificate serial:       010D0C9F43285845E193C24E6A626BD0BE71C7C0
Authority key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/680e28e5-3b9d-39e5-9ae7-176b31353c3a.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     32554
IP address blocks:        2607:6b40:600::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 31 May 2024 17:57:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:c2:4e:6a:62:6b:d0:be:71:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=2ba4996d-b093-4073-8f38-4821f200b60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9f:af:72:e9:3d:04:51:78:83:f9:a8:fa:bb:
                    16:51:bc:f9:f1:ed:d9:51:ea:ac:e4:64:58:ee:e4:
                    eb:25:82:21:49:6c:e8:18:9b:3b:5d:b2:b1:73:f5:
                    cb:b9:ab:6d:93:06:a5:72:a4:66:2a:d0:3c:2f:9f:
                    6f:b4:80:50:06:97:5c:fb:11:ee:43:b2:04:e1:4e:
                    e3:fe:52:f3:cc:2f:90:17:fd:30:28:10:b1:c2:89:
                    c8:c2:97:3c:fb:4f:b1:ee:ec:2c:6e:86:ee:3e:7b:
                    d3:95:1c:d9:95:a4:38:4e:48:dc:ea:81:ed:80:5e:
                    8e:51:86:f2:c8:39:5c:0b:a4:23:5c:14:bb:3c:18:
                    af:c7:ed:ea:9f:ce:7d:42:7c:df:e4:c6:5f:9c:b1:
                    29:dd:8c:89:6a:0a:b8:19:c0:fd:48:d2:f3:98:75:
                    c1:e4:d9:7c:04:7c:2a:92:85:4d:4a:c4:45:14:b8:
                    a0:e8:72:e3:76:d2:71:28:2a:45:e4:20:23:63:30:
                    e0:d6:65:10:05:22:b5:66:cc:62:0b:14:58:1f:5b:
                    57:3f:4a:b1:3f:c5:ff:8b:3f:64:52:38:ee:bc:b8:
                    b2:b3:bd:5f:01:9e:3f:64:29:e1:88:23:21:19:7d:
                    e4:3c:ae:f7:86:38:5f:11:c1:12:86:5a:1b:de:a6:
                    08:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:15:C2:58:79:A4:B1:BC:EA:69:E9:CA:C5:3A:CF:78:F9:02:C6:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/680e28e5-3b9d-39e5-9ae7-176b31353c3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl

            X509v3 Authority Key Identifier:
                keyid:26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b40:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:cf:c2:f1:c9:87:95:bc:84:93:fc:71:91:6e:d1:6e:b9:70:
         41:d4:bc:97:e4:53:3b:75:8a:f8:0c:d6:7a:90:62:97:e4:f8:
         d8:26:9c:08:18:67:04:90:3f:77:78:cd:ee:c3:5d:8e:02:fb:
         05:f1:be:aa:7a:8e:70:aa:37:92:92:c6:0e:4d:47:4a:ed:34:
         e6:71:ea:6a:04:60:d3:29:94:89:a5:b3:c5:39:4f:ea:bc:cf:
         f0:ef:ae:2a:43:89:17:f3:63:76:5a:a0:d9:bb:3f:2b:a1:e7:
         ce:86:0a:04:23:3a:cc:41:f7:d5:fc:49:26:e2:09:16:e4:f4:
         67:02:71:db:49:c5:00:b3:07:30:b0:d1:2c:14:c5:60:c4:c5:
         a2:94:da:f0:85:0a:08:71:5e:c7:ba:12:d1:16:1c:43:cd:6b:
         4d:d8:e7:55:10:1e:0f:ff:57:5f:1f:33:73:57:d9:eb:b0:e0:
         3e:fa:59:1d:1d:45:27:ab:ec:61:71:53:47:ef:e6:22:c2:17:
         f8:40:22:08:bc:7c:97:bc:d6:ce:ba:c0:7c:1b:64:73:55:32:
         82:bb:77:c9:93:38:74:45:75:74:60:85:32:81:ce:26:71:3f:
         da:14:f8:1c:f6:75:3d:74:8f:64:49:23:88:40:f7:e9:97:c4:
         f4:47:a7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----