Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a2899145-e070-4f3a-abaf-6c5c3c808da4/f518d4ab-fdcb-3dee-8bde-430f684e1633.roa
File:                     f518d4ab-fdcb-3dee-8bde-430f684e1633.roa (raw, json)
Hash identifier:          NQ6gAWTWhUBRzwiAy8nMgIPcYAXw9dN3ex0rhzDw+vY=
Subject key identifier:   54:4C:86:47:25:CC:EE:15:05:4D:B3:77:AF:00:0C:5D:56:A4:7E:46
Certificate issuer:       /CN=a2899145-e070-4f3a-abaf-6c5c3c808da4
Certificate serial:       010D0C9F432858469C9FA6204E5AFFC6B59B2640
Authority key identifier: E1:44:99:EA:9B:9D:F9:75:57:5C:82:D6:30:DF:80:53:47:B2:90:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a2899145-e070-4f3a-abaf-6c5c3c808da4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a2899145-e070-4f3a-abaf-6c5c3c808da4/f518d4ab-fdcb-3dee-8bde-430f684e1633.roa
Signing time:             Sun 21 Jul 2024 13:00:36 +0000
ROA not before:           Sun 21 Jul 2024 13:00:36 +0000
ROA not after:            Sat 19 Oct 2024 13:00:36 +0000
asID:                     32519
IP address blocks:        2605:52c0::/32 maxlen: 48

Validation:               Failed, certificate revoked on Sun 01 Sep 2024 21:39:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:9c:9f:a6:20:4e:5a:ff:c6:b5:9b:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2899145-e070-4f3a-abaf-6c5c3c808da4
        Validity
            Not Before: Jul 21 13:00:36 2024 GMT
            Not After : Oct 19 13:00:36 2024 GMT
        Subject: CN=4f8092da-5639-476f-8098-358d9e98e7bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3d:7a:a1:8c:ab:7d:98:1a:b0:64:63:db:32:
                    9e:37:2f:32:0d:64:ed:c8:20:36:da:3b:7c:6e:3f:
                    44:25:15:cd:57:61:8f:b4:8b:5f:8c:a5:d3:aa:c8:
                    2d:ff:11:8f:4a:52:32:21:e5:52:d3:9c:77:73:b3:
                    2a:70:26:48:3d:21:f2:79:16:2b:4d:71:74:9d:01:
                    d5:3d:05:64:07:f5:a9:35:2a:ce:15:9f:c2:b5:80:
                    58:6b:81:d0:bf:d4:33:91:84:11:74:15:2b:b0:45:
                    62:3f:c3:49:16:38:a2:d3:b2:16:dd:bf:48:6d:59:
                    39:a1:63:2b:87:04:0e:0d:ce:58:55:85:68:32:52:
                    52:dd:88:ea:2d:bc:5d:3c:9d:4d:06:87:3d:4d:f1:
                    44:63:2a:2d:75:62:51:47:9a:26:0f:0f:d3:c1:c8:
                    f3:55:c4:b6:39:dc:e7:36:76:53:34:15:f7:68:ce:
                    bb:58:b0:b6:61:eb:71:59:59:70:da:75:fd:4d:1c:
                    6f:53:47:10:84:a2:81:0b:d7:a1:f8:63:29:92:09:
                    72:13:21:58:3a:c8:bd:d5:d3:dc:79:93:ca:27:81:
                    8d:a6:9c:46:5e:54:f2:a0:5e:a4:f0:db:b6:0b:92:
                    e3:3c:ad:e8:32:fd:d9:6a:49:7a:7a:86:d8:0c:0a:
                    68:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4C:86:47:25:CC:EE:15:05:4D:B3:77:AF:00:0C:5D:56:A4:7E:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a2899145-e070-4f3a-abaf-6c5c3c808da4/f518d4ab-fdcb-3dee-8bde-430f684e1633.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a2899145-e070-4f3a-abaf-6c5c3c808da4/a2899145-e070-4f3a-abaf-6c5c3c808da4.crl

            X509v3 Authority Key Identifier:
                keyid:E1:44:99:EA:9B:9D:F9:75:57:5C:82:D6:30:DF:80:53:47:B2:90:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a2899145-e070-4f3a-abaf-6c5c3c808da4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:52c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:6c:a7:20:ea:8a:1c:9f:70:cb:5b:7d:b6:e1:34:2d:1d:cb:
         1b:cc:0e:6c:9f:5c:62:eb:b0:3d:19:31:ba:31:8b:0d:c5:02:
         39:0d:4e:10:2d:61:2f:8c:eb:70:3b:04:ff:99:84:f6:a6:c6:
         51:86:00:e7:ff:4d:15:fa:4c:42:e3:b8:a7:7a:81:cd:72:b7:
         73:8a:83:bf:bb:f7:9e:eb:1d:11:56:84:dd:ad:ef:e3:fd:3a:
         ce:61:d3:c9:8f:ad:c5:1a:38:08:12:ca:db:8a:e5:94:3a:60:
         26:d8:c7:ae:1f:6d:b0:27:4c:81:82:ca:f0:f1:c6:d8:25:4c:
         f0:24:55:a0:5d:f6:ff:2e:f7:a4:06:6f:d7:0b:a1:18:e4:60:
         a3:74:fe:7a:9b:ca:ac:23:0f:ac:19:59:b3:eb:6d:9c:c2:c8:
         38:76:58:70:3f:5b:66:d8:0b:bc:81:78:35:ab:b1:5b:1f:ae:
         f7:5c:56:bd:2d:cf:79:f3:10:57:68:ac:16:3c:5c:be:f6:1a:
         8b:80:a9:9a:c4:48:6c:03:f4:77:5b:b7:81:2f:87:ea:7c:1d:
         17:d9:10:36:d1:de:89:4c:1c:f2:92:15:c7:1a:17:70:29:48:
         9e:51:0f:28:80:07:37:f5:4e:1c:27:11:d3:5e:e9:1a:af:27:
         b4:bb:2f:e8
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEacn6YgTlr/xrWbJkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTI4OTkxNDUtZTA3MC00ZjNhLWFiYWYtNmM1YzNjODA4
ZGE0MB4XDTI0MDcyMTEzMDAzNloXDTI0MTAxOTEzMDAzNlowLzEtMCsGA1UEAxMk
NGY4MDkyZGEtNTYzOS00NzZmLTgwOTgtMzU4ZDllOThlN2JkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j16oYyrfZgasGRj2zKeNy8yDWTtyCA22jt8
bj9EJRXNV2GPtItfjKXTqsgt/xGPSlIyIeVS05x3c7MqcCZIPSHyeRYrTXF0nQHV
PQVkB/WpNSrOFZ/CtYBYa4HQv9QzkYQRdBUrsEViP8NJFjii07IW3b9IbVk5oWMr
hwQODc5YVYVoMlJS3YjqLbxdPJ1NBoc9TfFEYyotdWJRR5omDw/TwcjzVcS2Odzn
NnZTNBX3aM67WLC2YetxWVlw2nX9TRxvU0cQhKKBC9eh+GMpkglyEyFYOsi91dPc
eZPKJ4GNppxGXlTyoF6k8Nu2C5LjPK3oMv3Zakl6eobYDApo0wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFRMhkclzO4VBU2zd68ADF1WpH5GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMjg5
OTE0NS1lMDcwLTRmM2EtYWJhZi02YzVjM2M4MDhkYTQvZjUxOGQ0YWItZmRjYi0z
ZGVlLThiZGUtNDMwZjY4NGUxNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTI4OTkxNDUtZTA3MC00ZjNhLWFi
YWYtNmM1YzNjODA4ZGE0L2EyODk5MTQ1LWUwNzAtNGYzYS1hYmFmLTZjNWMzYzgw
OGRhNC5jcmwwHwYDVR0jBBgwFoAU4USZ6pud+XVXXILWMN+AU0eykK4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hMjg5OTE0NS1lMDcwLTRmM2EtYWJhZi02YzVj
M2M4MDhkYTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVSwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQDGbKcg6oocn3DLW3224TQtHcsbzA5sn1xi67A9GTG6MYsNxQI5DU4Q
LWEvjOtwOwT/mYT2psZRhgDn/00V+kxC47ineoHNcrdzioO/u/ee6x0RVoTdre/j
/TrOYdPJj63FGjgIEsrbiuWUOmAm2MeuH22wJ0yBgsrw8cbYJUzwJFWgXfb/Lvek
Bm/XC6EY5GCjdP56m8qsIw+sGVmz622cwsg4dlhwP1tm2Au8gXg1q7FbH673XFa9
Lc958xBXaKwWPFy+9hqLgKmaxEhsA/R3W7eBL4fqfB0X2RA20d6JTBzykhXHGhdw
KUieUQ8ogAc39U4cJxHTXukarye0uy/o
-----END CERTIFICATE-----