Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/d397a6f6-eda4-3394-a4b9-eeee6a43e457.roa
File:                     d397a6f6-eda4-3394-a4b9-eeee6a43e457.roa (raw, json)
Hash identifier:          tWYi7CuDNxJKxu4IfDHLRCslNpFJWeaZuF3rAjjklwY=
Subject key identifier:   3C:CA:2A:16:F2:4E:10:B3:03:37:F2:3C:AB:10:71:57:C0:09:6B:7E
Certificate issuer:       /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Certificate serial:       010D0C9F4328583D70B1C4DC276748ED9C469100
Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/d397a6f6-eda4-3394-a4b9-eeee6a43e457.roa
Signing time:             Mon 08 Nov 2021 05:00:00 +0000
ROA not before:           Mon 08 Nov 2021 05:00:00 +0000
ROA not after:            Fri 05 Jul 2024 04:00:00 +0000
asID:                     210734
IP address blocks:        2602:fc09:aa::/48 maxlen: 48
                          2602:fc09:bb::/48 maxlen: 48
                          2602:fc09:cc::/48 maxlen: 48
                          2602:fc09:dd::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:70:b1:c4:dc:27:67:48:ed:9c:46:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
        Validity
            Not Before: Nov  8 05:00:00 2021 GMT
            Not After : Jul  5 04:00:00 2024 GMT
        Subject: CN=44d4d68e-e8bc-4d21-a7ac-5f857f3fea88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:58:ff:4e:bc:2d:04:24:fb:33:e3:12:72:7b:
                    2c:9c:c0:3d:bd:2e:7f:45:fd:96:c0:9d:78:69:cd:
                    36:b5:f8:5c:d4:9f:79:86:75:a7:d0:e6:9f:55:5f:
                    58:93:70:d8:68:fa:db:29:6e:36:3d:4f:43:5a:41:
                    52:06:80:7f:f7:73:e6:bc:32:c3:59:cc:0d:df:a8:
                    9a:87:ee:75:22:55:21:2d:a1:cd:6e:91:7a:36:3d:
                    27:1c:d0:ad:14:c9:e2:d7:13:1f:29:82:e3:a2:94:
                    98:b7:01:6a:d4:22:dc:24:7a:d3:b3:ef:3e:e7:d5:
                    10:2a:47:77:ff:29:c8:24:a2:36:52:ad:2e:d3:3c:
                    58:70:40:35:48:46:e8:99:10:8e:a6:2e:44:87:3a:
                    da:ac:f2:65:17:62:32:ec:75:eb:b6:11:c1:db:24:
                    f0:60:45:c9:d6:5a:45:90:43:59:4e:69:d3:b3:29:
                    b3:02:d9:c6:c4:50:11:d9:62:5e:10:77:2f:81:cf:
                    06:61:20:c0:bd:c8:ce:37:d7:45:e8:f7:e6:02:a6:
                    2c:d1:da:8a:1a:d2:d2:a0:e2:c7:f9:44:f8:71:c5:
                    c2:a6:4d:94:50:b5:ff:65:46:0e:81:d5:32:6a:72:
                    36:c0:c8:4a:ad:3b:58:11:b4:27:1f:00:17:40:08:
                    4c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CA:2A:16:F2:4E:10:B3:03:37:F2:3C:AB:10:71:57:C0:09:6B:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/d397a6f6-eda4-3394-a4b9-eeee6a43e457.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl

            X509v3 Authority Key Identifier:
                keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc09:aa::/48
                  2602:fc09:bb::/48
                  2602:fc09:cc::/48
                  2602:fc09:dd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:5d:e1:f9:ca:7c:58:d5:d7:75:45:0d:20:01:89:4f:5c:35:
         7d:c2:ee:fe:0f:0b:cd:c7:c1:db:f5:9d:fe:8f:1c:33:2d:0b:
         96:c9:ab:fe:2e:0c:18:67:26:7e:5d:f3:83:55:30:c9:b9:49:
         11:31:5d:43:b8:b9:95:3d:b1:d6:d3:4d:5a:a9:e2:d8:32:99:
         cf:ec:96:5f:d0:e3:4e:d5:e7:f2:1a:da:13:41:aa:58:2c:7b:
         a2:20:23:27:a4:70:3f:00:cd:38:53:11:5a:89:2a:0c:80:7f:
         2a:75:bb:95:7c:c7:69:8e:bf:ce:89:76:ef:e3:08:cf:72:d8:
         03:2c:91:2d:66:e1:b6:89:54:3a:b9:f8:ea:4e:76:ea:99:6a:
         2e:c5:53:ba:47:ab:94:ff:9d:58:bc:8a:50:6b:5a:d4:98:67:
         bb:99:78:a1:34:2e:b3:48:68:72:84:cc:cd:b0:e7:fa:16:de:
         96:b8:fb:f8:02:72:06:1e:82:96:69:38:22:e6:78:8b:e8:f7:
         21:c7:a4:a8:1f:9b:fd:26:5b:a2:1c:01:f1:58:ed:42:a3:91:
         1d:83:7e:5e:39:55:e4:99:5d:0d:5d:34:cc:3e:27:d1:52:ed:
         59:95:5f:1c:97:97:97:99:7a:a3:1a:83:1f:6e:1e:a4:12:91:
         8a:2d:74:b3
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWD1wscTcJ2dI7ZxGkQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3
ZWVlMB4XDTIxMTEwODA1MDAwMFoXDTI0MDcwNTA0MDAwMFowLzEtMCsGA1UEAxMk
NDRkNGQ2OGUtZThiYy00ZDIxLWE3YWMtNWY4NTdmM2ZlYTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlj/TrwtBCT7M+MScnssnMA9vS5/Rf2WwJ14
ac02tfhc1J95hnWn0OafVV9Yk3DYaPrbKW42PU9DWkFSBoB/93PmvDLDWcwN36ia
h+51IlUhLaHNbpF6Nj0nHNCtFMni1xMfKYLjopSYtwFq1CLcJHrTs+8+59UQKkd3
/ynIJKI2Uq0u0zxYcEA1SEbomRCOpi5EhzrarPJlF2Iy7HXrthHB2yTwYEXJ1lpF
kENZTmnTsymzAtnGxFAR2WJeEHcvgc8GYSDAvcjON9dF6PfmAqYs0dqKGtLSoOLH
+UT4ccXCpk2UULX/ZUYOgdUyanI2wMhKrTtYEbQnHwAXQAhMowIDAQABo4IDczCC
A28wHQYDVR0OBBYEFDzKKhbyThCzAzfyPKsQcVfACWt+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3
Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvZDM5N2E2ZjYtZWRhNC0z
Mzk0LWE0YjktZWVlZTZhNDNlNDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy
ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw
N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk
N2MyMDdlZWUuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAJgL8CQCq
AwcAJgL8CQC7AwcAJgL8CQDMAwcAJgL8CQDdMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABNd4fnKfFjV13VF
DSABiU9cNX3C7v4PC83Hwdv1nf6PHDMtC5bJq/4uDBhnJn5d84NVMMm5SRExXUO4
uZU9sdbTTVqp4tgymc/sll/Q407V5/Ia2hNBqlgse6IgIyekcD8AzThTEVqJKgyA
fyp1u5V8x2mOv86Jdu/jCM9y2AMskS1m4baJVDq5+OpOduqZai7FU7pHq5T/nVi8
ilBrWtSYZ7uZeKE0LrNIaHKEzM2w5/oW3pa4+/gCcgYegpZpOCLmeIvo9yHHpKgf
m/0mW6IcAfFY7UKjkR2Dfl45VeSZXQ1dNMw+J9FS7VmVXxyXl5eZeqMagx9uHqQS
kYotdLM=
-----END CERTIFICATE-----