Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/cd641197-4278-3f61-b727-de1b481312dd.roa
File:                     cd641197-4278-3f61-b727-de1b481312dd.roa (raw, json)
Hash identifier:          wm0kVxzKjl+4ts3Pj8ILRwC0n2mOEynbkmLviQgTZAE=
Subject key identifier:   3F:19:C4:4C:7A:0E:C2:5E:E7:A8:A2:31:FA:4D:43:EC:33:E3:DA:D6
Certificate issuer:       /CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
Certificate serial:       010D0C9F43285845E193C308DFF38AB1107A4C80
Authority key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/cd641197-4278-3f61-b727-de1b481312dd.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     32554
IP address blocks:        2607:6b40:1200::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 31 May 2024 17:58:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:c3:08:df:f3:8a:b1:10:7a:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=f1c30854-17aa-49f7-87c7-9229abf80f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:04:a3:4d:96:ec:e2:39:a1:24:9c:0d:35:28:
                    a5:17:31:0f:5b:26:e9:dc:9e:cd:cb:65:a2:14:2a:
                    c4:51:1a:39:3d:02:67:3f:76:ca:93:70:8f:52:6c:
                    91:5c:4b:b3:a0:03:a1:59:c7:56:d5:1c:1e:60:b8:
                    15:e9:04:c5:7f:5c:bb:1f:15:5d:cd:1c:b5:3a:40:
                    90:54:00:91:03:9d:bd:70:48:a2:b4:6d:9d:1b:ca:
                    fe:8b:b6:7c:b9:0d:36:ea:b8:af:ca:72:80:5b:36:
                    86:f3:b1:18:86:f1:6a:88:15:af:ef:51:e7:bf:ad:
                    82:c0:c7:b3:9c:aa:81:60:67:18:2d:86:6e:08:5d:
                    55:c6:09:33:a4:99:48:53:ec:6f:a8:8a:31:ca:25:
                    53:36:85:0e:43:5d:71:c9:96:df:2f:e7:c7:12:65:
                    37:1a:82:d6:a8:61:4e:31:b4:8a:9d:d2:ce:c5:3e:
                    84:34:cf:6e:02:67:68:4d:af:93:b4:9a:44:7f:e0:
                    89:ac:75:1c:1c:c3:77:ac:63:0b:84:4e:0f:49:d8:
                    36:0b:4a:75:6d:52:fb:2e:1a:3b:96:96:38:64:36:
                    fd:5a:e1:ae:62:dd:1b:a9:c3:e4:17:a9:83:c6:74:
                    0b:fe:96:26:1d:fe:27:e9:eb:dc:ea:ab:ed:61:ef:
                    d6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:19:C4:4C:7A:0E:C2:5E:E7:A8:A2:31:FA:4D:43:EC:33:E3:DA:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/cd641197-4278-3f61-b727-de1b481312dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl

            X509v3 Authority Key Identifier:
                keyid:26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b40:1200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:52:b8:97:40:97:7a:7c:16:48:48:c0:f3:31:b2:99:49:d9:
         62:ca:cd:6a:d7:4d:73:13:e9:01:74:d5:65:28:f9:d3:04:2f:
         a3:ca:cb:ee:31:f2:66:39:d5:34:74:02:ad:58:84:44:96:0b:
         86:04:18:8f:e4:0e:a3:ac:9b:37:f4:e9:9f:9c:90:1e:45:d4:
         b5:22:be:48:8d:01:b1:d4:f5:b6:d3:dc:ef:bc:ce:73:72:f1:
         9e:ae:ae:4a:05:de:8c:25:8e:f9:38:ed:7e:b3:b6:2e:6e:8c:
         5c:91:6f:81:67:11:30:6c:16:34:76:68:f6:42:30:b6:45:ea:
         67:7c:77:63:05:0e:6d:3c:a9:87:c7:74:d8:2e:bf:08:8e:05:
         1c:53:85:e9:e3:3a:9f:5c:96:2c:14:b6:e6:a1:62:29:da:ff:
         a4:46:d6:23:ff:99:15:5a:e2:7a:8d:4f:1d:14:95:ea:88:e6:
         d6:8d:53:c1:2b:3e:66:f1:5a:d7:05:1e:1d:94:a4:ca:95:f5:
         c8:98:cb:28:35:4e:e5:6c:a2:25:96:ff:ee:79:01:ed:21:91:
         d8:5f:83:17:11:16:9f:50:dd:5f:3b:f3:38:7f:09:0c:7f:2b:
         92:9b:52:3e:29:24:37:2c:f3:b3:16:ec:a6:b8:e3:2f:91:9b:
         18:cd:fa:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----