Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/9789c972-3a86-3080-a2c9-f807bc9c303d.roa
File:                     9789c972-3a86-3080-a2c9-f807bc9c303d.roa (raw, json)
Hash identifier:          oI0FAmPjpa+vCOsgr4P8Y7Pg38rY1v71hOtsE7SkGKw=
Subject key identifier:   40:27:AE:DB:A2:1C:1A:72:3B:7F:2F:1D:00:85:EB:F2:50:9C:23:99
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F4328583CB8006A2F3BCB712785E62100
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/9789c972-3a86-3080-a2c9-f807bc9c303d.roa
Signing time:             Wed 06 Jan 2021 05:00:00 +0000
ROA not before:           Wed 06 Jan 2021 05:00:00 +0000
ROA not after:            Tue 30 Apr 2024 04:00:00 +0000
asID:                     14445
IP address blocks:        2606:18c0:2a::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:b8:00:6a:2f:3b:cb:71:27:85:e6:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Jan  6 05:00:00 2021 GMT
            Not After : Apr 30 04:00:00 2024 GMT
        Subject: CN=c45d9e39-f4c0-419b-8d89-a1a87076bb27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:de:f7:31:63:05:2b:50:ce:0f:5e:ac:97:b1:
                    c9:4b:67:12:52:fd:81:15:66:95:6c:f1:b5:12:af:
                    41:0f:d6:3e:5f:19:41:d4:ff:87:e0:d4:30:83:34:
                    94:b9:13:00:b1:f1:6f:01:31:f2:c8:6c:83:67:c5:
                    24:e9:22:c3:43:86:47:2e:90:17:cd:24:2d:db:cc:
                    db:d6:aa:7e:f8:cc:f1:65:0c:63:b4:4e:a7:18:66:
                    37:ba:4f:56:b6:95:a1:c4:69:82:d9:b0:b6:e1:a6:
                    c9:81:9d:51:54:42:03:aa:97:7e:e7:48:03:90:34:
                    12:fb:c4:f5:9e:b3:49:01:35:d3:58:ea:ae:77:58:
                    90:61:cd:ca:64:23:99:0e:64:0d:d7:0e:db:5e:da:
                    65:93:bf:a0:89:c2:6c:fa:96:10:48:bf:11:00:4b:
                    55:c6:b7:55:61:6a:27:83:7d:0d:9d:5a:83:ba:2e:
                    3e:0d:2b:36:1f:11:45:dd:18:ee:bd:c2:03:ae:ca:
                    db:b4:68:99:42:bf:8c:12:2a:52:6b:df:d0:f2:bd:
                    97:37:28:ea:43:ac:f0:a6:4a:52:63:b0:71:e1:61:
                    6e:61:31:c7:45:66:76:96:84:9d:1f:68:2f:b7:33:
                    fe:86:d3:dc:78:28:d3:67:31:8a:f3:71:f0:70:a6:
                    cb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:27:AE:DB:A2:1C:1A:72:3B:7F:2F:1D:00:85:EB:F2:50:9C:23:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/9789c972-3a86-3080-a2c9-f807bc9c303d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:18c0:2a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:72:34:b4:24:1d:2f:90:36:ba:eb:a6:a3:76:48:96:aa:d1:
         2a:b9:3b:e6:7d:ee:de:20:e3:e2:72:5a:ae:4d:6c:c1:4a:da:
         2b:15:49:f1:89:9e:17:25:97:3d:8a:ae:7c:c2:06:af:a5:7b:
         5b:7e:27:fa:b7:9c:b7:f5:55:7f:76:67:43:6c:43:af:00:89:
         2a:42:fe:1d:ec:7b:79:34:0c:82:81:c1:8c:ab:00:c4:5c:f0:
         c3:ec:9e:40:22:12:7f:4a:53:ab:ff:64:f8:d8:84:05:30:97:
         43:ab:33:4c:ab:1e:2b:96:c8:63:a0:36:77:48:8c:99:51:ca:
         96:b9:e3:ce:80:bd:63:ad:02:ac:bc:15:4f:22:01:3d:03:db:
         23:91:33:94:b9:90:d4:a3:7f:a8:fe:7e:8e:8a:46:ae:8c:89:
         46:e5:f1:b0:80:69:9a:09:68:a6:47:09:58:bb:91:9a:4d:66:
         bf:6b:cd:57:24:9d:4f:ad:38:87:e4:dd:7b:45:be:30:80:bd:
         f8:e0:55:1e:b5:50:e7:f9:21:72:5a:83:98:94:3a:c5:df:91:
         e9:5f:2c:79:3e:08:47:ed:0e:fd:ff:53:2c:46:e3:e4:1a:8d:
         ed:9a:24:46:d3:c5:11:1f:da:21:7c:84:6d:59:8b:4b:00:1e:
         4f:20:8d:ff
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDy4AGovO8txJ4XmIQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk2OTVjOTEtNTBlZC00MDJjLWI4OTYtNjA1NmJiZGU4
OGRmMB4XDTIxMDEwNjA1MDAwMFoXDTI0MDQzMDA0MDAwMFowLzEtMCsGA1UEAxMk
YzQ1ZDllMzktZjRjMC00MTliLThkODktYTFhODcwNzZiYjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN73MWMFK1DOD16sl7HJS2cSUv2BFWaVbPG1
Eq9BD9Y+XxlB1P+H4NQwgzSUuRMAsfFvATHyyGyDZ8Uk6SLDQ4ZHLpAXzSQt28zb
1qp++MzxZQxjtE6nGGY3uk9WtpWhxGmC2bC24abJgZ1RVEIDqpd+50gDkDQS+8T1
nrNJATXTWOqud1iQYc3KZCOZDmQN1w7bXtplk7+gicJs+pYQSL8RAEtVxrdVYWon
g30NnVqDui4+DSs2HxFF3RjuvcIDrsrbtGiZQr+MEipSa9/Q8r2XNyjqQ6zwpkpS
Y7Bx4WFuYTHHRWZ2loSdH2gvtzP+htPceCjTZzGK83HwcKbLfQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEAnrtuiHBpyO38vHQCF6/JQnCOZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5
NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2YmJkZTg4ZGYvOTc4OWM5NzItM2E4Ni0z
MDgwLWEyYzktZjgwN2JjOWMzMDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2OTVjOTEtNTBlZC00MDJjLWI4
OTYtNjA1NmJiZGU4OGRmLzM5Njk1YzkxLTUwZWQtNDAyYy1iODk2LTYwNTZiYmRl
ODhkZi5jcmwwHwYDVR0jBBgwFoAU+vU6ER4AXbycYWexl2vVDekdgbQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2
YmJkZTg4ZGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgYYwAAq
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIhyNLQkHS+QNrrrpqN2SJaq0Sq5O+Z97t4g4+JyWq5NbMFK2isV
SfGJnhcllz2KrnzCBq+le1t+J/q3nLf1VX92Z0NsQ68AiSpC/h3se3k0DIKBwYyr
AMRc8MPsnkAiEn9KU6v/ZPjYhAUwl0OrM0yrHiuWyGOgNndIjJlRypa5486AvWOt
Aqy8FU8iAT0D2yORM5S5kNSjf6j+fo6KRq6MiUbl8bCAaZoJaKZHCVi7kZpNZr9r
zVcknU+tOIfk3XtFvjCAvfjgVR61UOf5IXJag5iUOsXfkelfLHk+CEftDv3/UyxG
4+Qaje2aJEbTxREf2iF8hG1Zi0sAHk8gjf8=
-----END CERTIFICATE-----