Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/05b58a52-365c-3f99-8115-09f2411c4697.roa
File:                     05b58a52-365c-3f99-8115-09f2411c4697.roa (raw, json)
Hash identifier:          e+YwU+6GmveUzrAts0Syiyzh957rQC+WIWfZHzIR67M=
Subject key identifier:   81:9B:BA:21:AA:5D:F5:6E:9C:76:BC:02:8B:82:71:94:0B:81:1F:AB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584543E712334D658FE1823CA400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/05b58a52-365c-3f99-8115-09f2411c4697.roa
Signing time:             Wed 20 Mar 2024 01:30:49 +0000
ROA not before:           Wed 20 Mar 2024 01:30:49 +0000
ROA not after:            Tue 18 Jun 2024 01:30:49 +0000
asID:                     202321
IP address blocks:        2001:470:112::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 11 Apr 2024 19:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:43:e7:12:33:4d:65:8f:e1:82:3c:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 01:30:49 2024 GMT
            Not After : Jun 18 01:30:49 2024 GMT
        Subject: CN=ca7012f9-4225-462b-8107-4d8a4919f027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5c:d9:f9:de:4a:46:3f:9c:f3:69:99:4f:35:
                    39:fa:1c:27:fb:d6:58:dc:51:af:03:ee:cf:6d:be:
                    23:15:18:ef:9d:59:a4:95:13:9e:78:bf:07:94:bc:
                    28:c6:eb:d1:e9:81:ad:45:a1:fc:dd:67:44:cb:e0:
                    22:49:74:ad:ce:7c:84:93:9d:b1:ad:77:14:90:eb:
                    f8:21:6f:46:56:27:5d:24:e2:ee:6e:3f:df:cf:c3:
                    e2:cb:0a:8c:e6:17:b7:6d:e6:02:fb:02:fc:15:e4:
                    02:6f:e7:b4:34:12:da:1a:85:39:7e:40:91:eb:bc:
                    8d:83:3c:ce:3c:a2:72:76:89:a3:a7:f8:3c:cf:f2:
                    9a:59:4a:65:38:eb:40:51:bd:6e:f9:c3:ad:49:f7:
                    56:5a:3c:9b:0a:fd:b4:63:18:b4:95:f0:a0:b1:1f:
                    d6:cf:1a:5e:ba:31:0e:7b:b3:67:56:49:34:b0:3c:
                    93:78:e7:dc:3d:93:c6:25:3f:84:07:d5:7e:bd:35:
                    2e:88:dc:0b:eb:32:ab:e6:1d:3f:8f:0a:13:44:87:
                    cd:2c:77:c6:14:ba:f1:e4:b3:63:37:4b:94:8c:32:
                    ae:6e:4a:c0:99:e0:3b:8c:41:3b:3c:0e:6e:cc:9a:
                    24:36:7e:00:7c:27:ea:1a:d5:be:04:bc:5d:b8:ea:
                    3d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9B:BA:21:AA:5D:F5:6E:9C:76:BC:02:8B:82:71:94:0B:81:1F:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/05b58a52-365c-3f99-8115-09f2411c4697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:112::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:46:68:0e:0e:07:18:50:d1:48:aa:ee:4f:e8:ca:c5:c2:2b:
         55:9d:11:7e:69:c2:0a:ae:ff:9c:be:98:c1:0f:7e:bf:62:7d:
         8b:36:e9:9f:5c:c3:5c:ee:41:5e:92:59:39:42:d4:2a:94:fe:
         5f:61:00:f3:9b:2a:50:aa:f9:8f:c4:a7:ab:cc:55:22:39:5f:
         bc:e5:12:93:be:37:73:31:55:93:d2:cb:39:4a:b1:89:c2:86:
         fa:5e:f7:a2:df:f3:8a:20:3b:80:d6:83:cc:72:73:c6:96:8a:
         69:f8:b0:97:bb:09:88:4d:8d:4b:8d:cc:8f:6f:e2:82:3f:cc:
         dc:31:74:29:af:02:8c:40:3d:d2:07:62:35:f8:75:7c:20:2c:
         9a:67:3d:42:09:d4:10:a0:a8:6b:ed:84:b8:d4:b1:d4:e2:69:
         9b:7e:ff:91:68:e7:75:51:7f:9b:48:ba:ff:9e:66:1e:62:d2:
         3b:66:7c:c9:de:ed:42:f7:e0:ce:b0:74:aa:53:b8:8f:7f:78:
         44:65:71:27:70:d9:d5:fd:df:eb:db:07:8f:97:7f:a0:ac:31:
         d2:5b:29:1e:87:f1:a0:4a:19:25:1f:9f:7e:0a:2b:5c:ea:d6:
         ce:97:d7:8c:2a:cf:64:9e:0b:10:04:aa:57:9c:fe:c1:a8:29:
         c2:7e:85:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----