Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/a25a746a-7ea1-3b27-8c9f-04569218e445.roa
File:                     a25a746a-7ea1-3b27-8c9f-04569218e445.roa (raw, json)
Hash identifier:          RspSsrxoo9B4+ndIB7ipJfA6hovPOPJB0EnCtBDF3Z4=
Subject key identifier:   3B:54:F3:D3:83:73:5F:8C:71:0A:DF:8A:F5:DE:21:9C:12:66:4C:C7
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F4328583D39999F7FD65CF5A37F0FEAA0
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/a25a746a-7ea1-3b27-8c9f-04569218e445.roa
Signing time:             Wed 06 Jan 2021 05:00:00 +0000
ROA not before:           Wed 06 Jan 2021 05:00:00 +0000
ROA not after:            Sat 15 Jun 2024 04:00:00 +0000
asID:                     14445
IP address blocks:        2606:18c0:2::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:39:99:9f:7f:d6:5c:f5:a3:7f:0f:ea:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Jan  6 05:00:00 2021 GMT
            Not After : Jun 15 04:00:00 2024 GMT
        Subject: CN=fcde6b27-16e4-428a-8bc7-d351cd3f26d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:09:39:1a:93:90:54:72:e1:29:cd:8b:a2:8d:
                    b8:2f:ac:8d:9b:db:ad:e3:74:58:2d:b6:93:18:3a:
                    51:db:cd:0d:25:4f:fb:91:6e:c6:02:d5:c9:ca:d9:
                    38:b4:ac:97:d7:3a:9a:ee:6f:79:2f:aa:d4:8f:e4:
                    de:0e:44:ff:f1:d6:95:52:cf:fa:b9:54:78:7e:d9:
                    2a:34:fb:34:54:8e:f7:e8:ef:cc:5b:37:19:14:9f:
                    12:86:bc:40:c8:16:5a:c7:10:8b:af:b7:e7:ba:14:
                    e0:9c:dc:06:96:37:b8:de:11:f5:0d:b4:60:7b:23:
                    fd:fc:79:0d:8c:9b:54:35:16:ea:6d:36:ba:7f:55:
                    da:ad:cc:d9:e8:22:37:62:99:e0:f0:33:c9:8a:5c:
                    6a:83:8a:51:02:cd:dd:06:ef:02:46:dd:e1:36:6e:
                    ff:e1:b2:be:7e:08:87:3a:cb:25:9a:7b:87:21:70:
                    0b:aa:20:56:5c:23:51:87:66:10:58:27:4a:a7:7c:
                    ae:4b:4a:ed:7a:4e:ae:b1:85:52:6d:c3:e8:84:1e:
                    08:7c:e5:8e:1a:f2:9f:6a:74:d2:f9:6c:35:b3:64:
                    ce:dd:51:3f:e6:d6:c3:19:8b:ee:e3:61:8a:bc:e6:
                    d5:ca:ab:7e:d1:68:36:07:47:9b:5f:a9:d9:72:63:
                    73:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:54:F3:D3:83:73:5F:8C:71:0A:DF:8A:F5:DE:21:9C:12:66:4C:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/a25a746a-7ea1-3b27-8c9f-04569218e445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:18c0:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:2a:d4:f1:9b:89:1e:95:48:e5:59:c9:07:bd:1d:19:77:00:
         56:e2:44:25:76:c9:bb:a1:c0:7d:06:48:f2:c9:a8:e6:c9:84:
         79:a5:9c:fa:29:83:60:8b:fb:4e:d4:db:ca:29:5c:10:8c:2a:
         17:67:f0:f6:58:24:c6:fa:43:e5:20:c2:c9:2a:b6:32:80:2f:
         f8:ff:0c:11:33:c1:e5:44:8e:f6:a2:3f:17:c9:9f:d8:4b:d2:
         ce:5a:da:db:4b:c7:34:a6:c4:a5:38:d9:69:9b:32:e4:bd:82:
         ed:23:1f:3f:2c:04:7c:e4:aa:d8:f1:4e:96:02:cd:12:92:e5:
         d2:8c:ad:0d:3d:4e:9a:de:e0:22:33:a2:69:50:60:51:91:b6:
         fa:5d:4b:36:1f:15:6f:0a:98:c8:7d:8b:55:ef:70:45:9c:e2:
         03:e2:3a:d5:90:43:88:d9:ce:eb:ea:c0:e3:e4:93:49:95:07:
         81:a5:77:8f:cf:95:7c:4d:59:62:9d:fb:30:26:0e:61:6a:a1:
         02:4b:7d:a1:62:31:2e:64:ed:26:ff:a2:ea:af:7c:cf:20:40:
         14:c3:37:81:bd:68:05:cf:71:32:b9:3a:a6:76:c4:d3:cd:ce:
         c9:ed:fb:f0:77:3e:dd:67:10:ce:f0:eb:31:a6:2f:07:b9:35:
         a5:10:5f:4e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD05mZ9/1lz1o38P6qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk2OTVjOTEtNTBlZC00MDJjLWI4OTYtNjA1NmJiZGU4
OGRmMB4XDTIxMDEwNjA1MDAwMFoXDTI0MDYxNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZmNkZTZiMjctMTZlNC00MjhhLThiYzctZDM1MWNkM2YyNmQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQk5GpOQVHLhKc2Loo24L6yNm9ut43RYLbaT
GDpR280NJU/7kW7GAtXJytk4tKyX1zqa7m95L6rUj+TeDkT/8daVUs/6uVR4ftkq
NPs0VI736O/MWzcZFJ8ShrxAyBZaxxCLr7fnuhTgnNwGlje43hH1DbRgeyP9/HkN
jJtUNRbqbTa6f1XarczZ6CI3Ypng8DPJilxqg4pRAs3dBu8CRt3hNm7/4bK+fgiH
OsslmnuHIXALqiBWXCNRh2YQWCdKp3yuS0rtek6usYVSbcPohB4IfOWOGvKfanTS
+Ww1s2TO3VE/5tbDGYvu42GKvObVyqt+0Wg2B0ebX6nZcmNzEwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDtU89ODc1+McQrfivXeIZwSZkzHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5
NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2YmJkZTg4ZGYvYTI1YTc0NmEtN2VhMS0z
YjI3LThjOWYtMDQ1NjkyMThlNDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2OTVjOTEtNTBlZC00MDJjLWI4
OTYtNjA1NmJiZGU4OGRmLzM5Njk1YzkxLTUwZWQtNDAyYy1iODk2LTYwNTZiYmRl
ODhkZi5jcmwwHwYDVR0jBBgwFoAU+vU6ER4AXbycYWexl2vVDekdgbQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2
YmJkZTg4ZGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgYYwAAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIMq1PGbiR6VSOVZyQe9HRl3AFbiRCV2ybuhwH0GSPLJqObJhHml
nPopg2CL+07U28opXBCMKhdn8PZYJMb6Q+UgwskqtjKAL/j/DBEzweVEjvaiPxfJ
n9hL0s5a2ttLxzSmxKU42WmbMuS9gu0jHz8sBHzkqtjxTpYCzRKS5dKMrQ09Tpre
4CIzomlQYFGRtvpdSzYfFW8KmMh9i1XvcEWc4gPiOtWQQ4jZzuvqwOPkk0mVB4Gl
d4/PlXxNWWKd+zAmDmFqoQJLfaFiMS5k7Sb/ouqvfM8gQBTDN4G9aAXPcTK5OqZ2
xNPNzsnt+/B3Pt1nEM7w6zGmLwe5NaUQX04=
-----END CERTIFICATE-----