Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cb6afb46-107d-3dad-b63d-ca25cc56c2f7.roa
File:                     cb6afb46-107d-3dad-b63d-ca25cc56c2f7.roa (raw, json)
Hash identifier:          QSo/48kDR+U4r4E99v4nan2JTUGURPXF52UGOKjNkaE=
Subject key identifier:   AE:D2:30:2C:D7:53:86:7E:5E:FD:B2:4C:5C:8C:97:0D:ED:3B:96:8C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858472B673D82F7B6CDEEB41353E0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cb6afb46-107d-3dad-b63d-ca25cc56c2f7.roa
Signing time:             Tue 10 Sep 2024 16:27:44 +0000
ROA not before:           Tue 10 Sep 2024 16:27:44 +0000
ROA not after:            Mon 09 Dec 2024 17:27:44 +0000
asID:                     397214
IP address blocks:        2610:a1:30fc::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 16:25:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:67:3d:82:f7:b6:cd:ee:b4:13:53:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 10 16:27:44 2024 GMT
            Not After : Dec  9 17:27:44 2024 GMT
        Subject: CN=18b4cc9b-23ed-4059-a73a-cb34c6d7c35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:13:27:4d:cb:f7:8f:3a:0d:7d:20:7b:20:2a:
                    63:0d:b5:63:d5:53:aa:0e:7c:2d:cb:5d:11:8a:35:
                    5c:50:f6:78:db:29:b8:0f:ca:6f:46:54:17:b9:db:
                    62:68:15:45:d4:83:c5:54:96:26:6c:86:1e:8b:ed:
                    b9:46:7d:8c:d7:c6:64:c1:25:3d:19:62:d6:34:92:
                    da:2c:da:8f:30:f3:b8:c1:35:68:63:aa:a9:97:84:
                    e1:99:91:98:ad:dd:4e:e2:d5:de:d7:b8:3a:8d:ae:
                    9e:e9:1e:4c:e5:6d:f2:17:d6:f2:14:90:21:a8:94:
                    51:5e:02:3c:9b:3c:08:01:ce:8f:ce:78:fb:b0:4b:
                    0f:b0:14:81:f3:37:c4:90:89:7d:32:f5:f0:d5:b7:
                    de:4b:f0:62:22:90:de:e0:da:e8:10:d1:30:38:9a:
                    08:e9:a2:7f:c2:79:ab:d1:75:50:98:4d:61:a9:22:
                    91:0e:50:7f:e4:43:5e:81:86:6c:fa:73:f3:33:cb:
                    06:f0:64:d7:8b:d2:2e:4b:5a:54:d5:07:bd:21:d6:
                    c5:35:ba:43:30:93:e2:52:80:1a:b3:76:b0:77:e3:
                    20:a8:58:3a:be:da:c5:7c:92:9d:c2:59:89:ac:ed:
                    d8:3c:f1:dd:1f:72:93:a8:0a:fa:35:89:b9:d6:f0:
                    7d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D2:30:2C:D7:53:86:7E:5E:FD:B2:4C:5C:8C:97:0D:ED:3B:96:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cb6afb46-107d-3dad-b63d-ca25cc56c2f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:30fc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:71:df:04:8f:82:ca:41:7d:9e:07:28:ba:a2:7b:0d:2d:ea:
         85:5b:cf:10:b1:5d:91:68:a8:3a:7b:ca:9d:b8:56:e7:09:1c:
         05:26:e5:08:50:1d:87:4c:47:ee:90:6c:af:64:7e:75:14:8a:
         61:50:c5:07:01:66:71:45:13:eb:53:fa:c9:e9:5a:aa:ba:c0:
         d1:ea:43:12:63:ca:16:50:cd:de:22:3b:46:8c:d3:f2:11:f2:
         2e:80:dc:45:13:51:30:2c:13:d6:c8:c0:67:93:c8:1e:62:dd:
         33:62:5d:47:b5:11:bf:a5:be:12:38:40:aa:3d:5d:e1:8b:e6:
         b1:69:07:e3:90:e3:79:e0:8b:09:d7:c9:51:3c:cf:c1:cc:12:
         bf:d2:3b:e4:fa:76:e6:6a:d8:09:73:a3:a0:29:78:0b:bd:c6:
         f5:2d:63:b2:19:3a:b4:bb:3f:f2:23:50:1f:a9:a4:e7:f3:f6:
         2f:d0:d7:49:e3:1d:ab:a5:2c:50:92:2d:41:4b:c9:ea:2d:eb:
         15:e2:f4:3b:a0:f3:80:d1:8a:a5:d2:3d:05:4d:c5:8e:ed:b0:
         1c:78:ba:f0:4e:b5:9c:1a:89:5a:07:e0:74:15:4c:37:8f:f0:
         4a:d7:cd:49:34:ce:00:f0:f2:b7:40:4d:97:63:e7:1a:2d:6d:
         1b:23:e0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----