Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64eb6736-dcc3-3942-91d4-e74ecc0a5465.roa
File:                     64eb6736-dcc3-3942-91d4-e74ecc0a5465.roa (raw, json)
Hash identifier:          V7cV3HXlYfa1XacqjpQu2/6UcvOJgfK9CLmp//CFd+0=
Subject key identifier:   80:9A:1C:17:B1:8B:0E:B4:E7:35:52:65:18:30:26:C2:BD:7A:17:8B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB1CF7A9CACBA066115580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64eb6736-dcc3-3942-91d4-e74ecc0a5465.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396557
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               Failed, certificate revoked on Tue 10 Jun 2025 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:1c:f7:a9:ca:cb:a0:66:11:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=2b818817-1a67-45c8-bb3f-f3a70ee4d7cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:05:dd:39:55:47:40:4b:c0:db:58:56:41:7e:
                    78:14:d1:08:7f:61:25:5a:6b:06:77:d5:7d:90:37:
                    92:26:c5:68:1b:6b:a8:3a:9c:44:91:fd:ee:7c:54:
                    c1:c5:26:bb:09:e1:4e:25:44:5c:0f:2b:7b:33:af:
                    1e:4f:5a:f6:d2:fc:f2:d8:dd:1d:48:1a:7c:8d:59:
                    b9:4a:6a:e3:61:de:27:4d:65:dd:6e:32:5d:23:6e:
                    60:59:88:49:af:96:e8:c0:ab:4e:fe:10:e9:33:62:
                    ca:ee:ce:e7:25:cc:0f:25:2d:93:6f:1c:7e:95:4e:
                    32:9e:fb:80:86:9a:74:d3:1d:fd:a8:df:30:60:fc:
                    7b:30:5d:69:db:46:b5:e2:f1:89:8f:09:55:98:3a:
                    60:b3:99:df:2e:97:05:7d:0b:20:7c:90:eb:82:0a:
                    4e:b9:6d:01:98:df:f6:a7:18:91:89:59:4e:06:4b:
                    cb:3b:e3:32:ab:bb:43:e9:73:6e:9d:95:d4:c9:d7:
                    12:d9:2d:90:51:1e:c1:b5:4f:7f:0d:55:d3:a3:42:
                    e0:aa:65:1f:fd:5c:49:d7:d8:c7:ad:f5:5c:a7:2a:
                    33:fa:2c:2b:e1:dc:9d:cd:50:70:95:cd:5f:5b:cf:
                    66:5c:1b:c3:1b:67:c0:3b:66:07:2b:24:a2:2c:d0:
                    ca:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9A:1C:17:B1:8B:0E:B4:E7:35:52:65:18:30:26:C2:BD:7A:17:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64eb6736-dcc3-3942-91d4-e74ecc0a5465.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:96:db:c4:c4:d4:1c:44:12:3a:17:85:9f:f9:3e:ce:df:b1:
         86:7a:93:d7:dd:2f:87:20:1b:22:0d:2d:3e:54:2a:90:34:e7:
         9e:6a:ae:45:08:0f:4d:47:e4:21:4c:c8:41:07:30:4b:57:eb:
         4b:7b:28:fa:00:90:9d:a1:e1:ca:0a:01:83:9d:1d:24:15:26:
         41:69:ce:b1:e8:04:07:e1:a7:6d:ff:a2:c9:1f:b2:de:e2:f4:
         b7:a3:c5:d5:85:b8:fa:9b:02:8c:cc:d1:30:9d:bb:c7:4c:98:
         c9:b7:9f:6a:b2:0b:75:90:2a:78:99:65:25:0d:57:32:c5:81:
         f9:23:ec:c2:0e:76:89:5d:36:54:f7:2a:83:a5:f6:35:70:be:
         c4:4a:ed:be:e8:d8:ed:20:f1:31:22:ff:a2:df:41:b2:79:d5:
         2e:5c:d9:a2:09:dc:3b:50:47:d3:76:04:d1:18:f9:56:bc:4c:
         4a:cc:25:db:d5:5a:84:37:73:d3:da:fd:86:a2:df:bc:33:87:
         c5:ff:8f:8c:8e:5f:dc:fd:55:22:d3:b7:c8:3c:be:52:f1:3d:
         fa:7e:96:ab:06:54:af:2c:d2:70:af:82:b0:cd:a0:7e:9f:8c:
         b0:a2:6a:ce:07:3e:6c:20:03:4c:65:dd:aa:64:d9:09:05:a3:
         6c:0a:58:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----