Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/21a8c5f2-eab6-3420-ab2a-5274e02d55b0.roa
File:                     21a8c5f2-eab6-3420-ab2a-5274e02d55b0.roa (raw, json)
Hash identifier:          2PHnL0kHvLG/t6gmNlBMPfwrnZR60Icr+JzmBPVX/g0=
Subject key identifier:   EB:72:04:0B:4D:FD:3C:07:CE:18:81:E0:B4:B9:EA:01:1B:28:EA:D9
Certificate issuer:       /CN=abaad708-212e-4627-8dbe-416a8512677d
Certificate serial:       010D0C9F4328583D3238E77384E875DF9156AB90
Authority key identifier: D5:0A:0A:CC:79:7E:27:4F:46:6A:4D:0E:C3:83:5E:68:E3:D8:1F:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/21a8c5f2-eab6-3420-ab2a-5274e02d55b0.roa
Signing time:             Wed 09 Mar 2022 05:00:00 +0000
ROA not before:           Wed 09 Mar 2022 05:00:00 +0000
ROA not after:            Sat 09 Mar 2024 05:00:00 +0000
asID:                     399747
IP address blocks:        2602:fc6a::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:32:38:e7:73:84:e8:75:df:91:56:ab:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abaad708-212e-4627-8dbe-416a8512677d
        Validity
            Not Before: Mar  9 05:00:00 2022 GMT
            Not After : Mar  9 05:00:00 2024 GMT
        Subject: CN=01b53838-df16-4798-82ae-07d83a8ef08b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5b:9d:53:31:81:77:5e:1b:c8:fa:01:54:ee:
                    27:c4:07:80:d6:1c:45:69:cb:28:18:1e:94:3d:61:
                    e1:14:f2:5d:c5:5a:d8:38:bd:22:4f:c4:30:a1:7d:
                    d0:2a:86:f0:ee:44:17:ac:6c:7f:f9:e0:9c:34:4c:
                    31:04:2a:ed:cf:28:2f:fb:8d:c6:31:20:5d:af:8b:
                    cd:55:36:8e:e9:ae:93:4a:84:e8:5d:e2:fa:bf:82:
                    85:8b:36:26:d1:87:4b:80:55:bb:8a:68:87:1c:98:
                    b1:de:03:4d:38:cd:63:24:9c:06:0e:53:04:4f:16:
                    78:84:0c:a0:a3:39:80:05:71:f7:a1:72:12:9a:58:
                    ed:a2:30:d5:84:85:5d:fe:29:ec:06:f5:b1:7c:6b:
                    13:69:36:89:8f:03:9f:19:77:0a:56:fa:27:3d:21:
                    98:b7:f5:9b:e2:b4:0e:3e:31:c3:84:3f:cb:25:0f:
                    51:10:d4:65:c3:fd:5a:21:b2:d4:e7:30:46:dc:51:
                    87:63:6e:83:af:f8:dc:81:42:37:6a:1a:c7:43:fc:
                    29:7d:b4:b8:ae:9e:48:02:24:a1:a9:be:a9:94:33:
                    62:4c:78:57:cb:a7:1e:8a:85:c1:c7:b1:c7:52:14:
                    b0:6f:3e:a1:45:34:b9:4e:0a:53:c6:58:3a:10:ec:
                    4f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:72:04:0B:4D:FD:3C:07:CE:18:81:E0:B4:B9:EA:01:1B:28:EA:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/21a8c5f2-eab6-3420-ab2a-5274e02d55b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/abaad708-212e-4627-8dbe-416a8512677d.crl

            X509v3 Authority Key Identifier:
                keyid:D5:0A:0A:CC:79:7E:27:4F:46:6A:4D:0E:C3:83:5E:68:E3:D8:1F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc6a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:c1:82:de:74:54:f5:d9:c2:b3:c0:9a:d8:c5:f8:c4:43:dc:
         56:ec:3e:d0:4c:33:9d:ca:83:fd:c0:6b:9e:07:e8:34:35:6a:
         7a:09:a8:98:63:14:5a:e7:9b:42:19:58:e7:f6:d8:3f:c7:2c:
         22:55:11:5e:12:85:89:77:a4:81:61:28:25:9f:d9:4b:ed:a5:
         77:ee:4d:79:13:a5:05:e4:41:cc:3d:58:93:3a:fc:f1:2e:17:
         e4:15:a8:ec:6b:58:27:53:0a:d8:02:63:b0:57:98:42:88:fc:
         46:17:3e:e1:1f:f6:1c:50:e0:c6:4f:03:3e:1b:fc:21:3e:b1:
         3b:00:f6:36:df:3b:4e:6e:25:27:4b:5a:4e:17:1c:bf:ea:be:
         a1:42:e4:5b:67:b9:00:cb:f3:5b:4c:22:bf:e4:6f:c0:09:8d:
         09:1d:37:fa:f5:63:f1:39:8d:6c:3d:70:68:76:ae:82:fe:3e:
         e9:e2:ec:2b:e3:21:3d:5f:7f:a5:41:95:bd:bd:1f:f6:e5:da:
         cb:64:51:1e:da:46:95:36:7c:2e:0d:bf:e3:e1:8c:cb:bf:ee:
         aa:1d:15:49:20:cb:64:e7:75:4a:17:1f:b2:f3:b8:be:d5:e1:
         4c:48:56:f1:98:35:4e:76:66:a4:88:13:f9:1f:6c:0d:53:e0:
         59:20:59:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----