Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/98ddc899-1abc-34dd-9b79-f8c69553dd14.roa
File:                     98ddc899-1abc-34dd-9b79-f8c69553dd14.roa (raw, json)
Hash identifier:          tFf32AW9aaY6Eu5gsBasAq+zSMszMSYpcs5PjB5R1zE=
Subject key identifier:   85:7C:F1:08:BA:A8:5C:CC:B9:9F:1F:8A:63:DC:9B:C4:BD:77:BA:4D
Certificate issuer:       /CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
Certificate serial:       010D0C9F43285845E193C417ECDC6CFF76CB1690
Authority key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/98ddc899-1abc-34dd-9b79-f8c69553dd14.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     32554
IP address blocks:        2607:6b40:3400::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 31 May 2024 17:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:c4:17:ec:dc:6c:ff:76:cb:16:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=67e022f5-db94-41da-bb3c-cc04e2aba790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1f:77:cc:1b:93:f5:2c:ac:b0:b2:43:c6:cb:
                    95:5b:32:bb:db:85:25:24:5c:44:f4:9b:99:74:c5:
                    33:0e:32:19:f2:63:0f:fd:98:a8:e2:b6:8b:84:0c:
                    72:3f:ce:76:ab:0a:64:8f:f2:19:2d:2f:dd:69:95:
                    71:88:a1:3e:b6:a2:db:a2:12:56:34:9b:9e:09:90:
                    3c:eb:9a:77:ad:1e:70:0d:20:d2:55:a0:89:17:42:
                    02:ee:37:17:49:a3:86:26:bd:cf:ce:3e:6e:7a:e0:
                    13:e5:51:30:d9:c2:d7:fa:1a:39:fc:cb:2e:bb:b1:
                    2b:66:d2:2d:83:ed:83:13:5f:1b:18:12:64:aa:b1:
                    82:3b:52:51:83:65:5f:bc:54:bf:7a:08:d0:7a:a5:
                    d4:e4:8a:d6:a8:d8:29:20:b2:17:cd:40:4f:e6:87:
                    08:fc:97:2f:1c:d8:68:52:ab:8e:bb:a3:cd:3a:f6:
                    00:ab:c0:72:99:cf:01:36:e5:f1:02:90:93:53:90:
                    37:77:74:95:d4:2a:4d:20:4e:88:3a:09:05:e2:e9:
                    58:b1:e5:84:95:48:57:ab:d1:05:9b:68:a6:ab:8e:
                    06:a8:24:f7:b7:ba:8b:dd:80:9b:58:9d:d1:0f:f0:
                    c4:e1:84:58:99:bc:e6:d2:16:b1:cf:84:ab:2a:5f:
                    af:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7C:F1:08:BA:A8:5C:CC:B9:9F:1F:8A:63:DC:9B:C4:BD:77:BA:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/98ddc899-1abc-34dd-9b79-f8c69553dd14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl

            X509v3 Authority Key Identifier:
                keyid:26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b40:3400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:8a:a7:08:2a:16:28:c9:ed:d7:ae:a3:16:f2:20:20:ad:50:
         95:6c:5e:82:5b:61:47:e8:24:3f:af:8c:5d:89:a1:45:bd:6a:
         cc:8f:19:f2:9a:ea:55:e2:b9:e8:83:a4:d7:dc:7b:ca:38:f7:
         0e:0d:78:78:57:53:ca:4c:c5:6e:02:e7:e9:33:98:27:e6:b7:
         25:19:ce:9a:23:10:3b:42:0c:a7:86:86:7e:f5:83:df:a4:e2:
         4f:26:9a:ea:28:7a:48:0b:0b:20:de:8f:7c:5a:5d:27:82:a5:
         fd:e2:a3:1e:05:dc:ab:5b:18:b8:63:1a:a0:37:15:a6:c1:dc:
         b1:f9:8a:95:a7:f6:67:6c:fc:f0:38:54:b8:0e:e0:42:72:3a:
         63:74:83:33:77:3e:32:4e:0a:8c:16:71:5d:dc:61:c4:08:fa:
         2a:a4:1e:a0:5a:c7:22:c0:7e:65:ce:87:64:c8:cf:7b:77:c3:
         b4:05:41:c8:92:63:ae:e5:c4:6f:2e:35:17:7e:47:a4:fd:7a:
         6b:22:f8:3a:aa:aa:fd:45:cb:d9:5f:98:e2:8c:bd:f1:f0:8e:
         2c:ff:dd:5f:bf:66:73:71:0f:84:2b:4c:b5:fe:ee:c0:5b:12:
         36:88:5d:98:a7:c0:77:e9:98:ef:c2:57:11:1a:d6:1a:8f:19:
         59:06:c8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----