Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/f1441bde-2c0f-3686-8444-48580dccce10.roa
File:                     f1441bde-2c0f-3686-8444-48580dccce10.roa (raw, json)
Hash identifier:          yf3s6rYl6SZm7a4L2mRtDp6TeV/JsjYtfg9xnrLWg58=
Subject key identifier:   BF:0E:D4:4C:C8:07:9F:9A:BC:D3:82:E7:FA:76:AB:53:88:03:39:EA
Certificate issuer:       /CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
Certificate serial:       010D0C9F43285845E193C3366976DB5432573400
Authority key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/f1441bde-2c0f-3686-8444-48580dccce10.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     32554
IP address blocks:        2607:6b40:1900::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 31 May 2024 17:58:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:c3:36:69:76:db:54:32:57:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=79da64b1-546c-49c0-bd71-cfd8ca0316c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:45:db:bf:89:73:1a:3a:72:34:ad:87:db:cf:
                    71:7a:00:a6:20:e7:2a:00:bc:95:06:f3:64:f5:b4:
                    bd:9d:ac:5b:de:47:62:c0:d2:81:46:57:8a:00:60:
                    a5:0a:07:00:84:4e:fc:f3:57:19:f5:cc:d1:16:a5:
                    3a:35:b8:bb:96:b9:8e:9f:08:8e:65:7c:0e:8d:43:
                    b4:b4:57:50:d3:46:c1:41:2c:d4:e0:9a:c4:68:63:
                    70:5b:57:c6:6c:3e:07:33:e6:3b:49:33:52:ff:d8:
                    11:61:2c:60:c0:39:f1:ea:f0:79:05:9b:3b:73:4c:
                    2e:cf:b0:ac:64:2f:57:34:b9:36:32:41:57:a8:15:
                    c9:b0:66:d6:70:2f:f3:c1:09:02:26:7d:86:ab:18:
                    29:3b:e4:69:0b:59:35:f4:0f:02:fb:8d:bf:21:14:
                    a5:a5:ae:ef:42:c5:8f:02:23:cb:e3:3a:69:8c:47:
                    53:cf:b3:29:68:ad:1b:29:ea:ca:af:5e:27:49:e4:
                    7f:02:f6:a8:14:eb:55:2c:f4:92:ec:c5:2a:d9:ae:
                    6e:78:63:2f:b9:e5:4b:a3:4d:c7:80:01:85:35:da:
                    60:bf:e9:01:7d:81:21:f8:83:3c:5c:63:1c:8e:71:
                    7a:c0:84:58:01:9a:57:5f:23:95:08:cf:99:7f:38:
                    ac:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0E:D4:4C:C8:07:9F:9A:BC:D3:82:E7:FA:76:AB:53:88:03:39:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/f1441bde-2c0f-3686-8444-48580dccce10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl

            X509v3 Authority Key Identifier:
                keyid:26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b40:1900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:7f:e2:98:02:87:32:64:a7:03:20:bc:e7:8d:95:e1:bd:4f:
         e8:99:58:e5:f6:0c:20:c7:50:86:dc:3f:6b:75:76:2e:49:ae:
         7a:3d:71:c8:70:ff:e4:ae:c2:b4:0d:63:17:9f:29:a1:56:3c:
         af:a6:a1:e4:d0:5d:ec:c0:63:dd:1a:91:cd:e9:34:e1:c1:26:
         5e:59:28:2d:f0:db:a7:c5:95:29:b7:4f:e7:1f:12:ac:6b:bb:
         6c:6c:6f:55:29:8a:c6:0d:3a:2b:b7:86:05:92:56:16:ce:4b:
         b8:a4:4e:d1:02:69:08:e1:48:95:5c:e7:b5:f2:b6:b0:28:54:
         c6:b8:b6:97:51:cb:ce:db:0c:9b:3f:fc:7f:8f:4c:30:29:30:
         e8:91:4c:9e:41:0f:c1:da:7c:05:66:ee:09:c8:05:fb:de:3d:
         0b:76:3b:dc:5a:3f:48:7a:bc:6a:02:62:cd:2a:3a:15:f6:e3:
         2b:d7:37:b6:fe:02:12:d9:5a:24:c2:e6:b4:66:e1:35:b7:bc:
         c0:d1:41:0f:db:48:e1:cd:b4:13:53:e8:d1:76:a9:f3:10:93:
         1a:12:92:9b:53:ff:6f:cd:36:d5:46:69:43:12:ee:2c:46:da:
         7f:90:dd:1f:70:2e:9e:38:83:66:12:d9:12:a6:6a:d4:96:f8:
         85:68:66:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----