Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f36bfa91-0ff1-42a1-bfaa-af3380e2914e/e7731a2c-a6b0-38ef-81bf-8ddd9f3edda8.roa
File:                     e7731a2c-a6b0-38ef-81bf-8ddd9f3edda8.roa (raw, json)
Hash identifier:          66CsH/Gr16REPrq0zL8P3DsgX5/QwChyOpBLw/pHvBU=
Subject key identifier:   B5:B4:20:6D:E3:A0:AE:92:FB:D3:94:36:52:E5:05:74:5C:C2:84:F1
Certificate issuer:       /CN=f36bfa91-0ff1-42a1-bfaa-af3380e2914e
Certificate serial:       010D0C9F43285842BE19F58C000381F9F0CB6680
Authority key identifier: 7B:CB:92:F4:EA:92:B5:58:D2:63:DB:09:E5:BB:6E:05:00:3E:24:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f36bfa91-0ff1-42a1-bfaa-af3380e2914e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f36bfa91-0ff1-42a1-bfaa-af3380e2914e/e7731a2c-a6b0-38ef-81bf-8ddd9f3edda8.roa
Signing time:             Tue 01 Aug 2023 17:41:09 +0000
ROA not before:           Tue 01 Aug 2023 17:41:09 +0000
ROA not after:            Mon 30 Oct 2023 17:41:09 +0000
asID:                     8075
IP address blocks:        2620:bb:6000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:be:19:f5:8c:00:03:81:f9:f0:cb:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f36bfa91-0ff1-42a1-bfaa-af3380e2914e
        Validity
            Not Before: Aug  1 17:41:09 2023 GMT
            Not After : Oct 30 17:41:09 2023 GMT
        Subject: CN=316a7fe0-46e2-401c-a9b2-ff8495da1724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:69:77:08:ed:80:f4:1e:6d:a1:d6:2d:2b:8a:
                    d6:16:46:bd:b3:f2:09:ee:6e:7f:3b:45:c2:97:fd:
                    97:29:ce:50:f9:42:db:b4:a4:f7:3d:3d:8d:7d:db:
                    84:fd:48:15:ac:d5:ef:06:ea:a3:fc:71:33:7f:9c:
                    79:93:0f:df:24:5a:70:f4:d5:3e:0d:68:d8:33:06:
                    38:37:64:77:cb:12:4f:51:e1:2a:39:1d:c6:42:9f:
                    a0:ae:cf:75:d5:0e:be:da:b8:eb:92:6a:9b:f1:1d:
                    59:11:88:83:91:3d:6c:d7:f7:2d:ce:f5:ab:ff:72:
                    5c:f9:b5:09:fa:1c:e2:6f:0e:ef:95:62:c8:4c:2b:
                    2d:a5:1b:f3:b9:61:dc:9b:d7:67:44:70:aa:7f:55:
                    ca:a4:63:1c:ef:50:a7:16:22:b2:6a:51:1d:c9:44:
                    15:44:0e:5f:90:89:6d:d3:51:94:69:9f:77:ef:d6:
                    02:bc:5d:d8:09:c7:9d:34:8f:cc:e5:e2:66:d4:d5:
                    8c:a8:64:c1:89:6a:25:e0:7f:49:0d:77:b8:e5:f4:
                    f7:21:2b:a7:d8:e3:8e:73:14:dc:1c:0b:2b:24:c8:
                    dd:5f:f4:53:92:c0:bf:ae:fe:17:db:4a:0b:fa:0d:
                    f4:d3:02:2f:ac:97:12:67:27:da:56:8f:00:2f:29:
                    7d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B4:20:6D:E3:A0:AE:92:FB:D3:94:36:52:E5:05:74:5C:C2:84:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f36bfa91-0ff1-42a1-bfaa-af3380e2914e/e7731a2c-a6b0-38ef-81bf-8ddd9f3edda8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f36bfa91-0ff1-42a1-bfaa-af3380e2914e/f36bfa91-0ff1-42a1-bfaa-af3380e2914e.crl

            X509v3 Authority Key Identifier:
                keyid:7B:CB:92:F4:EA:92:B5:58:D2:63:DB:09:E5:BB:6E:05:00:3E:24:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f36bfa91-0ff1-42a1-bfaa-af3380e2914e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:bb:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:dc:eb:ef:8d:b6:0b:47:a5:74:bc:ce:69:83:a1:34:b5:51:
         b1:77:35:d4:65:a6:fc:78:35:d4:51:41:ca:8c:94:c8:f2:0f:
         ed:17:e8:d4:f3:bd:65:f5:3d:38:b6:ec:6b:f0:74:37:c4:de:
         bf:50:b2:51:ec:c8:8b:e0:a2:bd:7a:43:f6:35:8f:70:59:aa:
         57:ef:ab:93:df:d2:2b:64:7b:59:9e:87:14:e8:70:ed:94:0a:
         01:97:12:96:f8:27:ae:22:1a:96:bd:c8:0c:d2:1f:ec:99:76:
         dd:eb:6d:fa:bc:21:80:99:59:85:e4:6f:b4:88:0e:70:fc:0e:
         17:42:2d:51:e7:ea:aa:7c:75:64:a2:c5:f3:2c:93:2c:a7:12:
         f3:76:50:93:99:6e:0c:76:35:7f:d2:96:f6:73:cc:46:21:b4:
         07:71:d0:36:b1:62:3a:46:07:10:e3:76:c2:75:0f:b9:5d:a5:
         d9:f0:ba:b3:ee:e0:cd:84:6a:82:72:14:14:c1:22:d3:bb:b5:
         31:3d:1d:64:13:6b:9c:7b:f9:0a:27:6c:6c:66:d6:e7:e4:8d:
         13:95:7a:a7:39:33:29:55:40:a0:ca:21:61:b3:87:b7:0d:8e:
         9b:06:42:6d:9c:c1:89:8b:b8:f5:62:5a:c4:d2:c4:d8:3a:63:
         05:72:4b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----