Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2c6b2dff-2b52-35b5-ab2a-e4cb2e6630d6.roa
File:                     2c6b2dff-2b52-35b5-ab2a-e4cb2e6630d6.roa (raw, json)
Hash identifier:          8HFWgwGY6FU1cXpHjstTGQJoQXRuIWHEpL1dp+rMuq4=
Subject key identifier:   AD:B3:16:88:0C:40:08:09:39:03:67:4E:B2:1A:04:E8:CA:CC:4F:30
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584586E78A0038DE6C6C6600DA80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2c6b2dff-2b52-35b5-ab2a-e4cb2e6630d6.roa
Signing time:             Sat 13 Apr 2024 01:30:55 +0000
ROA not before:           Sat 13 Apr 2024 01:30:55 +0000
ROA not after:            Fri 12 Jul 2024 01:30:55 +0000
asID:                     51276
IP address blocks:        2001:470:1eb::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 03 May 2024 19:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:e7:8a:00:38:de:6c:6c:66:00:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 13 01:30:55 2024 GMT
            Not After : Jul 12 01:30:55 2024 GMT
        Subject: CN=cdfb0ef6-2d7f-45d0-aa5a-878dbe672918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cd:33:a0:c7:e1:e1:13:a1:df:c3:fe:44:4c:
                    ac:6c:02:7c:4c:9c:7b:e6:52:c6:62:c5:b5:06:85:
                    f5:5a:10:71:63:12:8d:61:32:a2:0a:21:2f:d6:1c:
                    1f:59:fd:e5:ab:68:a8:42:70:93:63:13:f6:fe:5d:
                    b0:df:24:3b:30:60:9e:93:43:b2:c1:64:ac:ad:b0:
                    a0:3f:20:31:b5:f0:9f:18:76:4b:8a:45:f4:46:2f:
                    72:56:ec:60:44:05:aa:9c:bf:16:fc:df:3e:1c:fe:
                    cc:34:e8:8d:6b:8e:fe:83:58:b9:6b:ed:3f:86:2f:
                    73:40:3c:a2:53:92:b9:12:94:97:79:b0:5d:46:7d:
                    a0:65:77:35:62:8d:2f:59:f3:fa:79:1e:93:99:98:
                    32:22:b7:4d:e9:0c:e0:59:77:70:2e:d8:1f:6d:e2:
                    36:86:22:ea:8d:18:8c:63:7f:74:ce:7e:9b:88:f4:
                    78:d5:a6:2a:16:72:72:c7:d5:08:07:6f:9a:b7:28:
                    20:47:ac:91:c7:89:94:8a:23:a3:b5:17:70:57:fb:
                    5b:0a:50:c2:59:12:ff:6a:80:d2:23:96:61:fb:0f:
                    41:3b:06:27:e1:08:de:3c:00:03:83:e7:3c:50:24:
                    b9:29:17:31:f8:4d:8b:a6:04:da:27:e9:ba:01:ad:
                    79:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B3:16:88:0C:40:08:09:39:03:67:4E:B2:1A:04:E8:CA:CC:4F:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2c6b2dff-2b52-35b5-ab2a-e4cb2e6630d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:1e:1b:73:2e:ed:41:af:c0:5a:98:bc:1f:83:a3:20:dc:7c:
         7e:8c:8e:a9:c5:4b:3b:b0:fa:65:e4:71:d8:46:8a:78:4a:00:
         41:d7:5c:4f:b6:05:c3:38:18:62:22:3e:d7:c1:83:12:29:f4:
         ee:b4:6a:e1:9f:28:18:d4:50:e7:b9:18:07:77:42:cc:12:ca:
         9d:92:4f:d5:6c:92:19:9b:90:ea:b6:3f:0a:47:52:f0:d6:d9:
         0b:c4:ed:0f:14:f8:7c:f2:9b:e5:3a:07:a5:0f:29:4f:7f:8e:
         e8:d7:ee:93:a8:0b:c2:6d:bf:ef:79:02:78:0b:b1:48:04:fe:
         1c:be:a3:6d:6e:52:74:b4:e2:9a:8e:21:65:33:a0:34:0a:24:
         bb:cb:8f:86:1e:cc:d7:9d:e8:c6:d9:8d:70:6d:9b:88:b6:d3:
         51:a9:a6:a7:fe:0a:1f:aa:29:93:a1:57:16:3f:08:97:01:59:
         7a:ae:83:2e:e8:b3:08:8b:9d:e9:4e:82:63:55:0b:3c:8a:76:
         2f:78:ca:df:f2:0d:6a:ee:11:c4:3f:95:74:5f:cf:41:eb:61:
         4e:01:03:e6:6c:94:50:26:da:68:c8:6a:77:ec:09:a0:01:4b:
         9b:bf:e5:20:34:ec:44:2a:8f:d3:71:21:9b:2d:a7:90:e0:9a:
         6a:4a:33:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----