Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/16784cc8-b525-3f75-b2c2-a0dc7b803e98.roa
File:                     16784cc8-b525-3f75-b2c2-a0dc7b803e98.roa (raw, json)
Hash identifier:          Hyk1d2pGKljXRQbJLsluS65m6FMVY/XQgmfavxutni0=
Subject key identifier:   BF:8A:52:46:6A:B0:32:07:14:C0:BB:68:D5:F8:47:BB:6F:26:59:BA
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A784BE5682B4994BAEAB3E80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/16784cc8-b525-3f75-b2c2-a0dc7b803e98.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        2604:2e88:b800::/38 maxlen: 38
Validation:               Failed, certificate revoked on Tue 20 May 2025 11:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:be:56:82:b4:99:4b:ae:ab:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=6d2a51cd-535c-49dc-ada3-b2fad6864ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d3:75:95:ed:76:89:20:9e:0c:90:4a:51:c6:
                    56:21:c8:0f:bd:15:95:56:8b:ea:54:41:c2:76:94:
                    75:07:d2:0b:0a:71:0c:10:7f:27:3d:66:d5:55:fc:
                    8d:75:1f:17:a7:58:13:0f:d7:ae:00:53:70:43:de:
                    dd:ee:4b:34:cb:00:d5:1d:ae:87:57:fd:62:61:18:
                    02:33:f9:c9:70:d3:42:c5:af:2b:1b:9e:f1:08:19:
                    ea:0c:ca:06:47:1c:5a:72:53:fe:40:a7:3f:2e:5a:
                    c0:44:cc:14:24:0f:23:03:af:3a:b6:ad:c0:00:e6:
                    cb:75:18:cb:79:09:4f:48:a0:ef:0f:67:63:56:54:
                    0a:49:d4:f2:67:19:8c:8c:e2:a2:10:68:4c:30:d9:
                    a4:2e:b6:03:1f:fc:36:6d:c7:7f:df:06:88:cd:0d:
                    12:cf:0b:64:98:bb:4b:78:24:68:94:c4:67:6f:1f:
                    8a:95:0d:2e:43:16:a5:af:a4:69:9f:17:a3:4e:94:
                    01:53:36:a8:be:7f:52:3d:1f:d6:b2:73:dd:65:68:
                    dc:07:13:98:bd:37:68:3f:98:da:15:27:d4:30:46:
                    af:be:c3:2e:d5:05:37:e0:c1:4d:fa:d0:a6:a9:c9:
                    56:66:b3:c8:99:72:f9:9c:45:0e:24:53:fa:9c:09:
                    73:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8A:52:46:6A:B0:32:07:14:C0:BB:68:D5:F8:47:BB:6F:26:59:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/16784cc8-b525-3f75-b2c2-a0dc7b803e98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:b800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:eb:50:c6:5a:a1:fb:83:40:32:08:6e:2f:95:5b:79:1b:68:
         e7:38:f0:0d:42:91:8e:f8:8f:a0:e8:bf:58:4d:d8:01:bd:e8:
         39:68:d3:92:94:e2:30:68:85:35:48:8c:24:8e:eb:b0:af:f1:
         97:96:a7:0c:f3:6e:df:fa:54:f3:aa:b2:63:0c:a8:a1:de:c0:
         88:2b:e4:45:cf:31:44:eb:45:11:e0:52:75:b4:68:9e:5f:30:
         11:07:b7:f4:12:8c:be:e6:a0:c1:b8:10:21:fe:2d:92:11:e6:
         a7:b1:fd:d8:76:59:c8:9f:a7:58:7a:5c:49:a6:55:69:b9:45:
         05:b5:4e:fb:23:a5:a0:96:48:99:a7:89:0e:a3:11:58:ac:e7:
         57:1c:db:73:99:c6:53:35:ca:00:94:dd:94:ea:1d:b4:2c:45:
         6d:9b:63:70:9e:f2:63:73:72:51:d8:f6:4d:43:e2:4d:13:85:
         6b:07:79:88:db:2e:01:ed:29:f4:f1:35:f0:e6:ac:e5:fb:f9:
         7e:7a:51:17:03:d8:72:11:95:f4:72:4c:9f:09:e7:3a:50:06:
         71:7d:b4:92:81:f2:73:43:1d:f4:84:06:5f:81:dc:6f:a7:cb:
         7a:2a:7f:7a:8d:66:b6:28:14:c1:b1:dd:a3:7d:55:d8:85:ba:
         6d:48:6d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----