Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/ec8cb61b-ea10-327d-99ff-bdc43ff11ab1.roa
File:                     ec8cb61b-ea10-327d-99ff-bdc43ff11ab1.roa (raw, json)
Hash identifier:          aCtzPOatZdIb6SgK8B7YuS16J+60Y7UDowKlp1KNONk=
Subject key identifier:   DE:B7:C1:7E:AF:F4:54:3C:87:8E:63:FA:99:6D:C6:4D:63:E7:D2:F0
Certificate issuer:       /CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
Certificate serial:       010D0C9F43285845E193C2793EA52DD045DA4C80
Authority key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/ec8cb61b-ea10-327d-99ff-bdc43ff11ab1.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     32554
IP address blocks:        2607:6b40:900::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 31 May 2024 17:57:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:c2:79:3e:a5:2d:d0:45:da:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=0cde9fb3-a967-420b-b771-e5680b5801aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7f:1c:94:37:ad:c2:21:b9:99:e4:20:02:1b:
                    ee:d2:38:30:48:00:d2:6f:e4:d4:30:41:b7:b9:e8:
                    fe:2e:e1:4a:02:5d:83:34:32:e6:77:08:0b:b4:34:
                    74:6a:0c:fa:f4:af:64:77:0d:93:5e:6f:58:ad:c6:
                    ee:6c:55:9d:50:f7:5d:95:9b:b7:90:c3:36:79:8b:
                    d0:5e:68:19:7a:96:51:c2:90:53:59:8b:88:1d:14:
                    66:5e:55:ca:ad:e0:e9:b5:66:c1:b2:c4:38:f8:1c:
                    dd:4d:3b:48:54:6b:0f:d6:d3:c0:c3:c3:24:8c:fc:
                    75:0e:38:bf:07:45:a1:a0:63:b7:4d:15:5b:35:5f:
                    bb:7f:ee:15:b6:2b:93:93:67:54:08:24:01:73:b8:
                    38:9e:c0:ef:c0:1f:00:68:5a:1f:1c:a2:5f:6c:bb:
                    8e:db:3a:45:83:a5:95:8f:b4:b8:ff:4e:54:6e:11:
                    c8:ec:07:da:70:80:dd:13:ff:32:8d:8a:23:46:2c:
                    22:a5:38:7d:46:53:c7:94:44:34:e6:9f:53:e9:cd:
                    b5:b9:22:f6:26:95:7e:98:eb:b6:90:d6:e3:0d:a9:
                    08:ee:33:f5:1f:ba:41:79:8d:ad:a8:04:59:ac:7c:
                    da:84:c1:71:ba:3d:58:0c:b4:4e:78:ef:34:29:8e:
                    87:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B7:C1:7E:AF:F4:54:3C:87:8E:63:FA:99:6D:C6:4D:63:E7:D2:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/ec8cb61b-ea10-327d-99ff-bdc43ff11ab1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl

            X509v3 Authority Key Identifier:
                keyid:26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b40:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:e7:ab:fd:90:5d:06:15:95:33:05:7a:77:3a:47:42:89:1e:
         c6:e7:ac:2c:f8:e7:67:17:31:aa:d4:db:f0:de:29:fb:88:6e:
         f9:2c:4d:c6:7c:ce:58:56:92:6a:ec:98:8d:00:17:f7:81:a9:
         86:9e:3d:35:ff:75:37:ec:0f:06:e8:85:e5:bd:d8:50:c6:fe:
         c3:a9:a4:c1:5b:27:52:94:fc:0a:5c:1e:d1:8c:c8:4d:3e:6a:
         c0:1b:cd:63:04:5a:7b:06:0b:4e:c1:de:71:bf:35:68:7e:b1:
         fa:12:22:6e:5c:25:af:1e:7b:df:20:8f:a0:e9:0f:42:2b:57:
         36:a7:04:16:a8:47:42:b5:19:3b:69:9e:c5:84:3c:ca:a5:66:
         b1:c6:ea:1d:4f:a2:51:62:83:6c:a5:69:8a:47:23:be:d6:0e:
         e7:ee:40:af:36:42:ee:ca:29:5b:fb:36:fa:e6:66:92:d8:bc:
         03:46:cd:ca:a0:ad:fe:a8:1a:61:d7:e4:e5:3c:c0:33:68:73:
         7f:f2:03:0b:0d:ed:82:4c:fd:47:d2:d9:d7:2d:1f:8f:a5:4a:
         40:ee:dc:54:ee:bd:58:00:d0:49:3f:8c:0a:40:e7:30:86:23:
         37:91:06:31:e3:49:ab:20:6f:ba:fc:08:5f:99:01:61:83:8d:
         c4:60:75:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----