Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/c6312990-890a-3cf7-98b2-a40fad9a440f.roa
File:                     c6312990-890a-3cf7-98b2-a40fad9a440f.roa (raw, json)
Hash identifier:          UIEmnxs/p3OOyrpyNhZ1xakwEfVkyV01S1rxilvj8FE=
Subject key identifier:   9B:E8:52:39:03:FA:76:4B:3C:90:8D:6C:32:FF:44:C3:79:D4:10:A0
Certificate issuer:       /CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
Certificate serial:       010D0C9F43285845E193C21F4337ACEBCFC4B800
Authority key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/c6312990-890a-3cf7-98b2-a40fad9a440f.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     32554
IP address blocks:        2607:6b40:300::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 31 May 2024 17:57:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:c2:1f:43:37:ac:eb:cf:c4:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=f97f5e90-4ac0-427e-a0a6-3ec138d7a09c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:16:e7:67:1d:c9:6d:51:03:74:02:ed:11:
                    2e:80:5d:67:30:9f:e8:fa:6a:42:e8:11:dd:45:c0:
                    ba:57:a3:80:84:20:96:fb:88:d0:b7:98:3d:8b:21:
                    f6:43:2b:52:f1:f0:56:f1:24:8b:97:d9:e6:5d:99:
                    62:51:ae:56:3f:7b:5a:bd:6a:f0:db:74:01:9e:60:
                    1e:45:6c:dd:af:79:37:7f:48:d3:83:5b:7d:f3:bf:
                    0f:ad:7b:77:99:10:ed:85:ce:8e:5c:61:84:7f:2b:
                    fe:c0:68:3c:28:8d:38:6b:38:5f:0f:b8:d7:da:77:
                    af:3b:34:73:27:ba:d2:75:0f:2d:b9:46:98:2b:47:
                    1e:a7:e6:63:f3:7f:62:b4:c4:0d:1c:35:cb:66:01:
                    49:e6:c6:4e:a7:23:f1:59:a8:a2:c2:6b:37:54:6d:
                    f0:15:98:0c:3d:5b:55:bc:31:91:4c:88:a2:4c:c5:
                    c9:3b:26:dc:a0:c3:19:35:1d:ef:d0:bb:81:f4:39:
                    3f:9d:67:f3:c3:eb:aa:9c:b3:65:99:36:8b:2a:55:
                    11:98:dd:71:02:83:c1:d1:30:fb:b9:66:ba:27:0e:
                    54:0f:08:98:58:41:ae:d4:03:94:0e:d0:b0:c0:c3:
                    32:94:6f:46:8e:3e:27:0a:91:63:60:17:c2:3e:8b:
                    bc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E8:52:39:03:FA:76:4B:3C:90:8D:6C:32:FF:44:C3:79:D4:10:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/c6312990-890a-3cf7-98b2-a40fad9a440f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl

            X509v3 Authority Key Identifier:
                keyid:26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b40:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:74:2f:82:e8:ec:f7:64:fd:8b:1d:4b:0c:9a:1f:b3:6b:a3:
         85:ab:5b:26:a6:3a:ff:2c:32:60:3b:4c:50:e3:c2:72:fa:0b:
         7d:bc:ee:ad:f4:46:93:34:c5:de:c5:29:45:3a:ad:6b:f6:2a:
         a7:71:41:92:6f:d1:0e:18:9c:5f:f8:48:a1:e3:a5:54:2c:e2:
         b2:96:9a:93:2b:f0:b1:8e:c1:73:2c:6e:c8:0b:92:0f:01:9f:
         5a:24:a1:c5:ba:20:9e:5a:f3:2a:9c:ba:ff:72:d6:a4:5e:bc:
         78:f1:6e:1b:87:83:f3:99:1d:d2:90:f0:6f:1e:e1:52:63:6a:
         07:b7:df:52:33:23:d4:45:83:25:33:88:36:64:e8:e2:7a:e0:
         46:a3:b7:f9:38:cf:f7:5b:31:65:b6:c9:f3:ca:2e:82:1c:82:
         bf:c4:62:0e:6c:26:76:2e:bf:17:bd:6a:73:c7:7f:1c:17:5c:
         9f:f0:45:3f:93:91:3d:f0:2d:c4:ef:2e:23:e6:85:80:c1:55:
         4e:22:8d:be:e4:73:48:2a:42:68:64:db:00:34:40:e0:36:10:
         31:38:0e:35:96:c3:a1:99:ca:12:0d:f6:8e:c2:89:e2:f7:df:
         61:54:bc:a3:32:07:66:e2:e5:39:ab:29:5e:fc:33:54:9b:09:
         49:34:a4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----