Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/cf30709a-5fa2-337c-9723-4f694e2de419.roa
File:                     cf30709a-5fa2-337c-9723-4f694e2de419.roa (raw, json)
Hash identifier:          wcJgNpv2J23WBEc3yxKcNF4GwsMQeccS7LZaYgweNio=
Subject key identifier:   59:2C:BB:73:BA:66:0A:5D:10:F7:FE:A2:B6:55:02:AF:8F:95:42:D9
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F4328583D39AF3D117FE691148A3F8D80
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/cf30709a-5fa2-337c-9723-4f694e2de419.roa
Signing time:             Wed 06 Jan 2021 05:00:00 +0000
ROA not before:           Wed 06 Jan 2021 05:00:00 +0000
ROA not after:            Sat 15 Jun 2024 04:00:00 +0000
asID:                     14445
IP address blocks:        2606:18c0:8::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:39:af:3d:11:7f:e6:91:14:8a:3f:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Jan  6 05:00:00 2021 GMT
            Not After : Jun 15 04:00:00 2024 GMT
        Subject: CN=e8506c2c-aba3-404c-978a-e9a150ee50c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b0:e9:c8:ca:d5:e9:e5:0b:f6:1b:07:a3:3f:
                    2a:c6:f5:ca:83:bc:8f:01:c9:df:2f:11:64:c9:97:
                    95:0d:ec:c4:52:d5:8c:c7:8a:d1:47:be:1a:c5:63:
                    e8:64:0a:31:cb:52:44:fe:21:d1:93:68:82:35:91:
                    7e:6c:bd:61:c5:0b:5a:4e:0d:2c:2c:3a:66:89:01:
                    42:9b:89:eb:b7:e7:df:76:43:eb:ee:80:a4:0a:42:
                    bf:8b:0e:4c:4b:9b:28:8b:2b:a0:92:e8:48:68:ac:
                    94:cd:dc:ec:2d:68:39:0f:88:2d:50:58:27:e2:5b:
                    03:c3:8c:19:86:77:22:04:e0:d9:91:90:7b:b1:99:
                    d7:a5:b2:7e:92:33:f5:ff:d4:87:e8:26:a0:d8:6c:
                    b3:87:8c:70:10:a5:ea:90:92:63:7e:8b:24:2d:a1:
                    44:1f:a9:f7:4d:cb:f8:e0:e5:8f:02:dc:e1:54:81:
                    f4:a5:7d:34:1f:70:4a:c8:c4:9c:06:37:06:0e:aa:
                    c3:ae:97:04:53:b4:27:8f:68:7a:97:7e:0f:1c:e6:
                    00:af:2b:6f:44:f4:11:93:5c:b4:2c:8d:57:81:97:
                    0d:b7:3e:02:d6:3f:0e:85:05:2a:40:08:64:35:ef:
                    1f:94:39:55:5d:2a:dc:a4:6f:1e:a0:41:ce:50:72:
                    1b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2C:BB:73:BA:66:0A:5D:10:F7:FE:A2:B6:55:02:AF:8F:95:42:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/cf30709a-5fa2-337c-9723-4f694e2de419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:18c0:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:fe:c7:24:9f:5e:47:90:d5:f5:b4:fa:9b:83:d5:04:1d:3c:
         35:49:8c:0b:dd:92:8c:02:31:45:01:54:4a:7a:5a:bb:7a:88:
         14:27:80:33:aa:51:f6:e9:bd:c1:a8:89:ea:d1:21:85:73:b5:
         03:78:ce:e7:13:39:ef:ee:b1:17:79:37:6e:65:ed:fb:cf:f2:
         b7:2a:85:db:03:50:19:0d:5b:b5:f7:10:e7:b6:90:49:81:4f:
         11:41:33:1a:19:d8:92:30:f1:a5:c5:58:b1:e2:f4:81:0f:36:
         a8:34:d1:6e:70:e1:5b:27:25:b5:5b:b2:41:2d:65:9a:1b:14:
         07:15:09:fc:db:85:46:cf:55:31:cc:69:80:aa:84:82:89:bf:
         97:e3:16:7d:0a:97:2c:71:5d:c4:f9:77:fc:dc:68:78:bb:9a:
         b3:ba:6b:d9:2b:f3:d1:cb:ec:8c:6b:b9:3e:f7:93:d6:4b:53:
         3b:ff:8b:91:c4:c1:96:fa:eb:02:9b:69:27:ca:ec:fc:bc:38:
         e2:fa:0c:7a:72:36:19:36:41:57:f4:84:90:34:4d:84:07:09:
         c8:9d:69:d8:f8:a3:b2:62:ef:13:98:f4:c9:07:38:d6:c4:c4:
         0d:a2:86:60:dc:b3:0c:6c:03:51:3f:7a:02:3c:b7:63:77:8b:
         3b:0b:5d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----