Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/71f49633-bc1d-355b-8a19-12ce3ec94e7d.roa
File:                     71f49633-bc1d-355b-8a19-12ce3ec94e7d.roa (raw, json)
Hash identifier:          1HYCvGZpJ86tqjO+sj6LR1nnZC2nAqcX2ikRWGseadQ=
Subject key identifier:   58:13:BC:C1:31:72:DE:EB:28:6D:F4:3E:04:7C:16:43:62:66:8E:07
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584586E78E085F3CD4217216D380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/71f49633-bc1d-355b-8a19-12ce3ec94e7d.roa
Signing time:             Sat 13 Apr 2024 01:30:57 +0000
ROA not before:           Sat 13 Apr 2024 01:30:57 +0000
ROA not after:            Fri 12 Jul 2024 01:30:57 +0000
asID:                     60602
IP address blocks:        2001:470:2da::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 03 May 2024 19:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:e7:8e:08:5f:3c:d4:21:72:16:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 13 01:30:57 2024 GMT
            Not After : Jul 12 01:30:57 2024 GMT
        Subject: CN=5d846a06-9758-44a9-b996-3ed478ca41fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:3d:34:68:4d:01:cc:8b:f6:26:3d:ef:52:
                    58:5f:19:c5:cb:8d:6a:39:5f:d2:59:0a:9c:75:fa:
                    da:68:f9:96:7e:de:53:b2:47:b8:a5:03:5f:cd:4b:
                    e5:0f:98:ee:95:f8:41:f7:c0:34:dd:22:68:f3:d0:
                    af:b8:e1:fd:80:35:d3:b2:ff:20:d3:8d:03:8c:d7:
                    c6:1f:79:34:a8:06:b0:90:3b:c1:dc:ff:87:2d:3a:
                    52:36:1f:2c:51:04:fe:a9:d7:7c:3d:74:32:fe:e2:
                    16:a7:73:ea:b5:88:44:39:61:29:de:66:04:83:37:
                    b8:aa:6b:aa:da:1b:9a:83:13:17:cb:4c:c3:4e:6e:
                    68:dd:20:fa:90:89:42:9b:11:09:79:cf:1a:c0:e2:
                    e0:b7:96:12:5e:f0:5b:87:62:ed:eb:d5:ca:fc:d9:
                    74:fb:e6:52:86:10:a9:3f:ad:e6:2a:31:4e:d5:2e:
                    c2:fb:18:cb:fb:23:26:10:d6:7e:f0:0e:25:03:ea:
                    56:90:ba:70:a4:47:2e:1d:ec:2a:1e:93:9c:b4:05:
                    7b:2a:aa:21:72:05:2b:83:0c:0c:58:ca:74:fe:f3:
                    ce:4b:c3:a6:fd:12:2f:03:c8:7e:60:e5:37:d5:dd:
                    1d:a4:71:db:10:95:ac:16:c2:2e:b4:c7:db:0f:da:
                    38:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:13:BC:C1:31:72:DE:EB:28:6D:F4:3E:04:7C:16:43:62:66:8E:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/71f49633-bc1d-355b-8a19-12ce3ec94e7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2da::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:ce:47:5d:d8:c5:a6:71:07:0d:43:cf:6f:2e:9a:b1:00:f5:
         e0:48:57:7a:a2:7c:df:4e:0a:9a:85:8f:91:cd:9d:57:18:bb:
         a8:83:c9:ad:ec:1b:ba:10:b5:33:02:27:c9:a6:94:40:46:0d:
         40:b1:ed:29:79:4a:08:e5:b1:1c:d8:f9:ee:49:0a:5d:0b:d4:
         9d:0d:92:95:6a:6f:5d:0a:f1:d4:3e:5c:36:d3:64:84:b4:86:
         fb:42:68:a5:bb:bc:5d:78:73:eb:27:11:9d:98:dc:47:dd:8e:
         60:74:10:e5:2c:4c:27:95:e0:8f:ef:66:8e:c8:91:ee:b7:18:
         a0:f7:07:a5:33:c8:69:c0:aa:24:73:89:2c:a0:90:de:af:35:
         c9:ba:53:57:d0:56:e1:14:7f:6f:e3:af:90:5b:89:02:f0:1c:
         65:f7:32:6e:cf:20:ad:d6:df:8d:a4:ab:3f:7f:61:99:6a:4a:
         f7:dd:b0:06:95:cd:1f:77:2b:ac:63:e9:b8:9d:5a:e1:44:58:
         d4:c5:fe:91:e1:db:e3:47:f1:62:23:84:66:8c:c2:d8:12:a6:
         0f:69:01:d1:8f:3c:f9:93:1f:d1:df:ef:f7:c1:0c:1c:f9:98:
         b1:ac:86:ca:a0:38:5f:b7:86:52:b5:4e:3c:d3:34:81:be:c3:
         ae:56:e2:c4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWG544IXzzUIXIW04AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDQxMzAxMzA1N1oXDTI0MDcxMjAxMzA1N1owLzEtMCsGA1UEAxMk
NWQ4NDZhMDYtOTc1OC00NGE5LWI5OTYtM2VkNDc4Y2E0MWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB49NGhNAcyL9iY971JYXxnFy41qOV/SWQqc
dfraaPmWft5Tske4pQNfzUvlD5julfhB98A03SJo89CvuOH9gDXTsv8g040DjNfG
H3k0qAawkDvB3P+HLTpSNh8sUQT+qdd8PXQy/uIWp3PqtYhEOWEp3mYEgze4qmuq
2huagxMXy0zDTm5o3SD6kIlCmxEJec8awOLgt5YSXvBbh2Lt69XK/Nl0++ZShhCp
P63mKjFO1S7C+xjL+yMmENZ+8A4lA+pWkLpwpEcuHewqHpOctAV7KqohcgUrgwwM
WMp0/vPOS8Om/RIvA8h+YOU31d0dpHHbEJWsFsIutMfbD9o4lwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFgTvMExct7rKG30PgR8FkNiZo4HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzFmNDk2MzMtYmMxZC0z
NTViLThhMTktMTJjZTNlYzk0ZTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALa
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACzOR13YxaZxBw1Dz28umrEA9eBIV3qifN9OCpqFj5HNnVcYu6iD
ya3sG7oQtTMCJ8mmlEBGDUCx7Sl5SgjlsRzY+e5JCl0L1J0NkpVqb10K8dQ+XDbT
ZIS0hvtCaKW7vF14c+snEZ2Y3EfdjmB0EOUsTCeV4I/vZo7Ike63GKD3B6UzyGnA
qiRziSygkN6vNcm6U1fQVuEUf2/jr5BbiQLwHGX3Mm7PIK3W342kqz9/YZlqSvfd
sAaVzR93K6xj6bidWuFEWNTF/pHh2+NH8WIjhGaMwtgSpg9pAdGPPPmTH9Hf7/fB
DBz5mLGshsqgOF+3hlK1TjzTNIG+w65W4sQ=
-----END CERTIFICATE-----