Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/5a0ac56d-1109-3957-af86-bfd11290d6f7.roa
File:                     5a0ac56d-1109-3957-af86-bfd11290d6f7.roa (raw, json)
Hash identifier:          LOSAjnY9RtmpH9ujb5e9d2FdjLn6Lqvsus9Mo1hTZf8=
Subject key identifier:   6F:8E:06:2F:68:61:D6:C4:F4:38:6E:A8:27:FE:F3:AB:4B:EF:BF:98
Certificate issuer:       /CN=d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3
Certificate serial:       010D0C9F43285849865DFC6451D83F6EFEC4C780
Authority key identifier: 06:F4:F4:09:CE:5D:8E:8C:95:73:69:14:22:CF:2A:7F:B9:91:A3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/5a0ac56d-1109-3957-af86-bfd11290d6f7.roa
Signing time:             Mon 14 Apr 2025 16:01:31 +0000
ROA not before:           Mon 14 Apr 2025 16:01:31 +0000
ROA not after:            Sun 13 Jul 2025 16:01:31 +0000
asID:                     19830
IP address blocks:        2607:dd80::/32 maxlen: 32
Validation:               Failed, certificate revoked on Thu 17 Apr 2025 13:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:86:5d:fc:64:51:d8:3f:6e:fe:c4:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3
        Validity
            Not Before: Apr 14 16:01:31 2025 GMT
            Not After : Jul 13 16:01:31 2025 GMT
        Subject: CN=c187a6ec-89cb-4b0e-8ae8-005a4b111360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1f:01:9a:d5:82:af:6b:83:7c:68:40:f0:7a:
                    b7:26:26:ab:02:71:e2:40:cd:d5:28:70:78:48:ea:
                    07:a5:46:58:b9:93:40:52:13:f9:d1:00:6f:a7:99:
                    67:76:f4:22:61:a6:7e:09:8f:81:22:31:09:a1:08:
                    c4:7c:be:ab:66:60:62:62:3b:01:fc:fb:63:e9:d5:
                    f4:18:19:f9:2b:d4:d1:17:6f:19:13:8c:e4:c4:27:
                    b5:d5:50:df:8c:1f:08:83:21:33:96:f6:ea:12:c4:
                    2f:9c:64:df:6c:88:00:59:84:b9:d1:11:53:1f:e4:
                    14:22:f6:f1:a4:05:ea:9a:1f:42:1f:8e:ba:03:af:
                    12:21:c8:5d:1c:17:5c:44:28:d4:3d:56:90:84:d9:
                    7e:39:d8:44:77:18:fa:9c:e0:1e:15:60:31:a9:80:
                    29:64:a4:4d:02:55:4f:fd:3e:9a:94:8c:7a:c0:ed:
                    2a:e3:75:ca:1e:82:9c:ff:de:a5:bc:a9:95:99:80:
                    dc:5f:73:ef:62:e6:85:93:cd:b7:4a:04:8b:82:36:
                    d1:87:73:57:6c:a9:29:5c:c8:19:74:f9:50:8e:fb:
                    e3:52:bc:7c:99:3e:bc:f1:8d:63:c7:d9:d7:2d:53:
                    c3:3e:f8:03:6f:f5:3b:c7:c4:c3:a8:89:b0:2f:63:
                    b8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8E:06:2F:68:61:D6:C4:F4:38:6E:A8:27:FE:F3:AB:4B:EF:BF:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/5a0ac56d-1109-3957-af86-bfd11290d6f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.crl

            X509v3 Authority Key Identifier:
                keyid:06:F4:F4:09:CE:5D:8E:8C:95:73:69:14:22:CF:2A:7F:B9:91:A3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dd80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:29:1f:3f:24:ec:c4:33:c9:7a:24:c8:a0:13:39:c4:2e:c7:
         5e:d9:49:23:4f:0a:0c:9f:db:82:6b:34:39:d6:f3:b1:3d:1b:
         83:dc:e1:bc:01:fc:a8:cd:c8:d1:ac:99:37:e7:da:4c:aa:3f:
         65:d6:85:15:2e:11:62:43:5d:c0:b1:81:4f:bf:07:86:b8:31:
         89:b9:ea:a1:b2:bd:e1:78:92:e1:3f:cd:5a:96:68:1a:36:ad:
         82:bf:86:ae:62:0b:fa:3d:43:80:e9:2f:5e:0f:1a:f6:28:f5:
         28:d1:27:31:88:4c:b7:55:0c:71:84:9e:60:0f:59:19:c1:af:
         a5:64:c7:bb:e0:44:ad:76:2d:d1:af:23:9b:22:02:4f:ff:76:
         29:ac:2e:c1:78:99:b4:05:84:28:77:b4:7a:88:bf:15:9d:b6:
         36:91:4e:0b:e0:65:36:71:ca:54:d4:a1:b1:e7:bd:2e:31:83:
         d7:95:1c:91:03:e8:68:68:8a:22:1b:4d:ee:b5:e0:db:ad:a0:
         4f:36:8e:66:28:c3:9a:00:da:2f:86:37:42:97:dc:55:f8:a4:
         18:de:63:94:5c:c9:e3:2c:07:a7:92:b5:a4:e4:68:b2:06:b4:
         a8:bc:81:de:82:c8:8b:e6:31:94:82:49:2b:7c:32:94:0c:ef:
         ac:1d:05:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----