Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/26825656-99ed-32e9-b9b5-794b506d6907.roa
File:                     26825656-99ed-32e9-b9b5-794b506d6907.roa (raw, json)
Hash identifier:          VvnE/PZbTD6d8XLR23Q1Ic9n3ixGynChsciZyZubWSg=
Subject key identifier:   76:3E:74:B1:AB:29:34:64:06:21:0A:2A:33:0C:5E:B1:BD:26:E8:63
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FE0525D49ECC74B8ECF80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/26825656-99ed-32e9-b9b5-794b506d6907.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     55003
IP address blocks:        2001:470:1c1::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 28 May 2025 20:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:e0:52:5d:49:ec:c7:4b:8e:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=ef933d4b-40a4-4cb1-b22c-609c5acfe35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:39:82:64:90:e6:ff:98:94:9d:da:e7:83:10:
                    cd:8d:27:5a:78:13:11:13:36:29:64:fa:7f:9f:41:
                    11:9f:58:1f:96:38:97:7c:49:60:16:f9:72:ed:11:
                    9b:83:da:91:4f:33:a0:f9:c2:7a:d1:cf:f4:50:ed:
                    38:0f:0a:a0:c1:e0:63:b5:2f:db:f2:63:35:e7:a0:
                    d8:90:18:f5:4a:50:8b:3e:5b:da:42:53:15:60:d7:
                    db:c0:e3:9b:b3:75:d4:2e:91:22:ba:c3:f7:77:32:
                    ec:89:5d:63:80:04:cf:83:16:21:16:b4:fb:8d:c9:
                    b0:90:2c:22:5d:09:58:a9:6a:c1:7e:99:f2:b1:9a:
                    d5:87:a1:8e:fe:7f:fa:7d:c7:18:18:a9:87:35:9a:
                    a0:71:a9:4b:c7:b0:85:01:a2:78:8c:ab:f1:0e:2c:
                    99:4c:63:65:d1:0a:00:44:0e:b8:5d:e9:f3:60:3a:
                    22:86:f5:62:f1:80:42:db:b9:66:21:ec:5c:f4:20:
                    df:dc:4c:48:5d:99:14:33:04:21:a6:0f:bf:7b:80:
                    14:3d:13:bd:5b:72:ff:c7:9a:d7:9d:b7:8e:3d:c3:
                    60:90:12:6d:b9:7f:28:86:f3:7b:0d:f3:1c:69:3f:
                    74:71:3e:68:02:e8:7d:91:98:35:68:38:4c:ec:df:
                    f6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3E:74:B1:AB:29:34:64:06:21:0A:2A:33:0C:5E:B1:BD:26:E8:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/26825656-99ed-32e9-b9b5-794b506d6907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:7d:39:00:19:74:b8:0b:7b:0f:e6:fa:e8:f0:83:da:4f:2d:
         1d:22:55:a4:9b:38:92:8d:4d:af:08:29:43:a7:d5:77:1c:da:
         61:17:2c:8b:77:b6:63:51:06:cf:e9:12:ff:61:a8:99:34:26:
         9f:a3:0f:e8:14:57:7d:15:45:df:5c:0b:2d:ca:5b:87:c6:49:
         20:fa:79:a6:36:f2:1e:db:02:28:0d:4e:83:d1:7c:9d:a5:91:
         29:dc:e1:75:e3:25:89:d0:e2:10:1c:d3:43:9f:a9:12:dc:0f:
         70:ad:a1:77:e3:cd:00:80:9d:61:91:9d:49:92:7f:9f:0b:f4:
         af:66:ee:7c:e7:f1:c7:a6:a6:b3:61:c5:be:cd:69:ea:bb:90:
         75:2a:14:08:16:b3:34:11:7f:a9:fb:21:a1:af:bd:a2:5a:aa:
         5d:be:99:eb:f7:e3:72:43:ff:26:6b:22:7c:b8:34:d7:62:0c:
         27:d9:11:07:47:78:e5:9f:86:5c:fe:90:35:16:69:c1:e4:dc:
         44:cb:4f:01:6a:d1:e5:cc:40:10:56:64:e2:bc:3c:6b:b2:f6:
         b1:6b:68:81:9b:2e:77:e4:23:7b:e3:ee:6b:35:cc:1c:ec:04:
         61:2b:ff:b8:af:10:97:09:a9:ea:f9:40:37:7e:c2:f8:4f:b5:
         ee:9c:50:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----