Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/d826cebf-e3ca-36b0-80d5-9297a813e58b.roa
File:                     d826cebf-e3ca-36b0-80d5-9297a813e58b.roa (raw, json)
Hash identifier:          mQRossL8kT1PczR15w/3f1RXyxhGZhJ9kSzTc8/tN50=
Subject key identifier:   31:70:37:05:AD:7F:1D:E0:7E:61:90:7F:AD:5B:88:73:EC:8F:40:35
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328583F8ECD146BF405D05A65B9AB40
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/d826cebf-e3ca-36b0-80d5-9297a813e58b.roa
Signing time:             Mon 28 Sep 2020 11:11:17 +0000
ROA not before:           Mon 28 Sep 2020 11:11:17 +0000
ROA not after:            Wed 15 Jan 2025 05:00:00 +0000
asID:                     204857
IP address blocks:        2605:f440:9700::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8e:cd:14:6b:f4:05:d0:5a:65:b9:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Sep 28 11:11:17 2020 GMT
            Not After : Jan 15 05:00:00 2025 GMT
        Subject: CN=f65ce195-1846-433b-80b6-6dd9275eae09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fa:b7:a1:15:2a:f6:64:51:a9:40:d9:57:f0:
                    4c:05:92:fe:ae:b9:15:0f:10:78:46:9e:65:94:5c:
                    67:e8:cf:4a:7f:eb:e1:16:b3:bd:5d:d7:1e:f6:9b:
                    44:24:f0:01:fa:c7:7e:24:b1:8c:5e:a1:c0:ea:ae:
                    3e:f1:7d:a2:68:18:bb:39:c2:6f:4d:d1:34:cc:86:
                    37:b7:67:d0:11:39:05:75:c9:8f:14:fc:aa:9d:ec:
                    57:18:60:a1:be:85:08:b6:86:27:4a:f3:1e:91:55:
                    9c:d3:db:ac:a7:52:2f:c5:c8:83:35:41:d7:16:7e:
                    f5:90:80:4e:d8:40:5d:1d:eb:28:90:67:cd:c8:b6:
                    ff:03:80:be:8b:f7:ed:85:61:93:6b:00:fc:7a:d3:
                    8c:58:35:a3:8e:58:49:b6:e8:f9:42:38:62:d1:2d:
                    d5:03:c7:b5:89:b2:16:d8:89:0e:51:af:ee:33:39:
                    b9:a1:a3:da:1d:26:a5:ed:15:f9:77:2b:d0:94:88:
                    06:7c:93:03:31:00:1d:c0:f1:ec:04:a5:d8:40:09:
                    36:d6:02:8f:7b:c4:4d:4f:6c:a6:f7:76:92:bc:7b:
                    ab:49:88:16:7a:41:a7:35:2c:56:b5:c0:2a:56:73:
                    e3:68:a1:e8:db:ff:7a:a5:24:96:67:24:b7:35:34:
                    64:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:70:37:05:AD:7F:1D:E0:7E:61:90:7F:AD:5B:88:73:EC:8F:40:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/d826cebf-e3ca-36b0-80d5-9297a813e58b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:9700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:78:17:05:d5:19:ef:72:55:0d:db:93:27:fa:96:b3:29:ab:
         b2:19:d8:ce:e5:87:66:91:9a:00:8e:f4:0f:74:5e:08:d6:b0:
         c9:4a:be:ca:a8:98:94:fa:97:6b:7e:73:fd:15:74:9d:16:c4:
         ff:e1:6e:af:04:7e:0f:91:80:51:fb:f7:5d:82:c7:b7:87:a0:
         6d:67:13:41:5e:51:bf:64:a6:45:83:ce:3c:7b:d9:01:db:46:
         28:81:2a:06:f3:d2:2d:0a:2c:c3:e5:26:4e:b3:40:64:96:28:
         14:2b:ae:47:59:7c:03:c0:d2:5a:18:5f:be:4c:13:43:dd:92:
         87:b0:7d:18:f9:f4:98:f7:a5:69:d8:39:f0:e7:43:e1:5e:07:
         7c:a2:ed:0c:82:5f:e9:12:a5:a6:7b:88:91:63:5b:a4:71:1a:
         a0:a2:80:9f:6b:69:e9:97:dc:18:5f:55:f1:1f:ad:d0:47:22:
         82:2c:60:4f:6d:52:4b:ed:f4:b9:10:b9:64:f3:6c:ca:41:88:
         4e:ed:0d:8f:22:d9:95:9a:02:dd:6e:b5:e4:ad:d8:3b:7f:b0:
         7f:1c:c0:c6:fc:f3:9a:c1:a3:87:f7:29:21:b2:29:d3:e4:51:
         4b:16:5e:aa:27:52:ca:42:32:d3:ae:39:ae:a7:f5:12:90:f0:
         ea:9e:a7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----