Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/f8d461f5-941a-36c2-979e-6696b4ea1354.roa
File:                     f8d461f5-941a-36c2-979e-6696b4ea1354.roa (raw, json)
Hash identifier:          XBXnHzL8+Pv3gVt21v2ztuyA8FLu22GvhCxEUeipi6k=
Subject key identifier:   C5:E2:B1:E1:69:D0:27:7F:A6:E6:A5:96:BC:EB:8B:1C:E1:09:20:50
Certificate issuer:       /CN=007561fe-4b04-417a-b423-349b8b4b047d
Certificate serial:       010D0C9F43285843E1FCC2F65ACD4F1402FA1500
Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/f8d461f5-941a-36c2-979e-6696b4ea1354.roa
Signing time:             Tue 14 Nov 2023 06:58:22 +0000
ROA not before:           Tue 14 Nov 2023 06:58:22 +0000
ROA not after:            Mon 12 Feb 2024 06:58:22 +0000
asID:                     19651
IP address blocks:        2602:f9ec:a0::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:e1:fc:c2:f6:5a:cd:4f:14:02:fa:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d
        Validity
            Not Before: Nov 14 06:58:22 2023 GMT
            Not After : Feb 12 06:58:22 2024 GMT
        Subject: CN=47fd8af0-4035-443f-bb1d-7cfe9183eb6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7f:68:09:36:57:3e:bf:40:95:53:20:32:d9:
                    78:4e:09:66:5c:5c:7e:35:c4:48:e0:ae:40:4f:04:
                    4f:96:80:a7:7a:64:f0:dc:d6:f4:38:11:69:b8:37:
                    06:3b:a1:f2:b6:62:c1:1d:a9:a2:23:c9:05:ff:eb:
                    60:ac:d1:a2:08:0e:fc:8c:8e:b9:a7:c0:8d:7d:55:
                    bf:ee:ed:5e:33:60:85:99:d3:83:c5:6c:48:88:b2:
                    2e:55:2f:32:39:fa:86:a4:b9:82:a0:4a:5a:90:e2:
                    91:07:43:e2:f0:fc:9b:2c:ec:ce:cd:3e:95:1d:71:
                    cf:41:8f:bd:84:e8:09:6a:00:64:e0:6b:28:a6:d8:
                    02:b2:05:e2:44:09:3c:87:8a:24:5f:2b:e0:ae:da:
                    d9:d4:77:80:5c:38:32:63:bb:34:1e:f0:4a:94:5f:
                    f7:05:6b:0d:dc:45:83:f8:35:bd:2d:c9:e5:c1:29:
                    8c:be:80:f6:62:9d:45:40:47:21:d9:0e:36:3d:d4:
                    bb:a5:20:5a:f6:96:ee:04:bf:60:fc:3d:cf:27:7a:
                    27:36:fa:55:a2:0e:f5:8e:3b:38:53:f2:d6:97:ab:
                    35:cb:53:79:44:4e:1c:02:d6:8c:ad:d2:f6:33:c2:
                    cb:d7:0a:de:4d:5e:32:df:04:bf:c4:f0:d2:4a:1e:
                    b1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E2:B1:E1:69:D0:27:7F:A6:E6:A5:96:BC:EB:8B:1C:E1:09:20:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/f8d461f5-941a-36c2-979e-6696b4ea1354.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ec:a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:06:6f:3c:14:af:70:f9:c1:48:53:68:ab:92:4f:80:76:a1:
         97:31:c8:aa:51:5a:e0:a1:56:7b:ad:09:80:c8:66:fa:8d:ed:
         19:3f:db:74:ab:ab:59:2c:16:56:ec:dd:f7:a1:0f:42:bd:76:
         0d:47:81:b9:c5:0c:ae:06:57:5c:34:2c:69:f0:f9:af:42:fb:
         0e:2d:b0:38:08:b0:79:90:e1:93:cd:52:7f:9c:16:63:a9:6d:
         90:35:93:c2:2c:e9:df:4c:76:7b:40:a4:44:96:61:8b:ac:bd:
         92:19:fe:d0:e6:92:e5:d9:ae:2e:ad:1e:be:7d:7e:4c:2e:cc:
         36:21:f0:bd:80:43:f2:f6:76:ae:b3:75:0d:3a:b2:a1:61:81:
         4a:d5:9f:b2:9c:5d:67:ad:ed:30:4b:61:6b:9c:f4:79:9d:e6:
         f3:79:9f:2f:38:e1:e9:92:e9:c4:4f:42:da:bd:f8:d1:8c:10:
         e4:a1:9b:a5:22:1f:54:e4:d3:f3:b3:1e:b0:3b:4c:8f:27:d4:
         68:b1:f1:37:18:ff:26:e0:7a:bb:41:95:5e:c6:2b:04:75:86:
         a0:11:cb:16:a0:6f:e3:1f:a6:fd:3c:90:68:02:e2:94:06:8f:
         0d:2c:38:31:c4:2f:1c:88:6f:f5:c8:42:e7:df:a5:bd:bc:fb:
         c1:43:97:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----