Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/86a43f4e-ef80-3521-bef5-383d5a707440.roa
File:                     86a43f4e-ef80-3521-bef5-383d5a707440.roa (raw, json)
Hash identifier:          ehJsPc8jeSQF8yOlCuSMpHS91YAZ3TJaJOjihP3p4Ik=
Subject key identifier:   49:5E:D8:D5:60:2A:81:F0:E0:08:EE:72:6D:77:32:B0:61:BC:14:D1
Certificate issuer:       /CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64
Certificate serial:       010D0C9F43285842CA1EAACD1649C9B8E47B9280
Authority key identifier: 2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/86a43f4e-ef80-3521-bef5-383d5a707440.roa
Signing time:             Sun 06 Aug 2023 01:00:17 +0000
ROA not before:           Sun 06 Aug 2023 01:00:17 +0000
ROA not after:            Sat 04 Nov 2023 01:00:17 +0000
asID:                     63290
IP address blocks:        2605:c880::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ca:1e:aa:cd:16:49:c9:b8:e4:7b:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64
        Validity
            Not Before: Aug  6 01:00:17 2023 GMT
            Not After : Nov  4 01:00:17 2023 GMT
        Subject: CN=d651ac67-515e-4c9e-942f-2e2d673ca7d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:13:f2:57:13:39:cf:7b:f1:45:de:e1:32:e6:
                    91:e9:f0:5c:71:be:2e:eb:fe:9e:01:1e:01:9a:80:
                    fb:e2:ce:21:1d:ed:19:84:70:e6:e2:e9:23:b2:70:
                    e0:31:30:09:f7:9c:43:db:e6:20:97:39:27:ca:cb:
                    b8:2e:01:e7:60:c5:6f:03:38:35:e4:34:38:06:33:
                    e5:c0:72:19:b5:3b:77:63:b8:07:d1:4e:95:57:88:
                    b1:ae:f5:36:96:e4:d6:e1:f2:93:d0:7b:6e:1a:a8:
                    04:3c:ef:91:cd:e1:e2:9c:b7:9d:69:da:19:dd:68:
                    35:56:3e:ec:3b:a5:1f:0a:34:e3:1b:a1:dc:33:71:
                    39:94:77:e1:6a:1d:0d:34:f0:23:d3:84:8c:29:56:
                    fb:3b:06:c1:9c:c5:55:b0:7b:18:5b:af:4f:27:08:
                    60:e0:63:49:4f:fc:ca:fa:7c:bc:aa:43:ca:5d:1b:
                    92:66:46:d9:ad:4d:11:1c:17:18:e7:4e:3b:cc:86:
                    34:cd:a5:8f:a1:cd:92:90:1d:46:3a:09:71:9b:e1:
                    82:7e:93:79:53:8e:8f:39:10:10:ec:47:39:83:2e:
                    78:0d:eb:5e:31:01:99:a9:16:0e:a4:88:ee:ef:93:
                    ac:75:2d:77:37:2e:7d:0f:78:a2:95:ee:62:fb:5b:
                    34:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5E:D8:D5:60:2A:81:F0:E0:08:EE:72:6D:77:32:B0:61:BC:14:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/86a43f4e-ef80-3521-bef5-383d5a707440.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.crl

            X509v3 Authority Key Identifier:
                keyid:2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:db:07:c4:07:ff:f9:c9:0e:df:99:bc:f5:b2:0f:f7:7d:96:
         cc:6d:8b:97:f7:ed:da:4a:16:7e:e6:c5:6b:2c:10:f4:d7:41:
         4a:14:09:73:b8:dc:54:53:f7:f4:a4:53:62:fd:82:5e:50:1c:
         ce:5f:5e:c2:f8:87:29:bd:ad:6c:1b:69:2a:73:28:7c:c1:17:
         41:18:29:53:bd:9c:5e:1d:73:88:6b:f6:03:4a:39:a1:5b:70:
         2b:ae:9a:cc:41:37:96:34:4c:24:dc:96:a3:92:a5:15:51:d1:
         15:26:94:7e:a9:99:c8:98:7a:4b:ef:02:a6:3a:a8:69:50:16:
         e4:db:8c:95:39:95:26:81:a5:97:db:28:53:84:2e:da:b0:46:
         a3:5b:aa:1e:e9:98:8e:50:73:ec:cb:0a:97:0f:d9:cb:13:b5:
         65:29:f0:6e:8d:52:41:5e:58:0d:7d:a0:ac:9d:40:9e:c8:89:
         09:75:c2:1a:38:0f:88:2c:99:ea:c6:01:39:31:85:92:e8:0e:
         67:fb:7f:58:54:e7:8c:b8:19:0d:5f:2e:2d:da:23:39:45:69:
         f9:23:a8:77:f2:ec:69:81:c2:86:1c:e7:14:f6:57:d3:15:5a:
         ea:f1:a5:77:ef:08:06:84:4f:5a:dd:df:d3:0a:d3:8d:41:b7:
         78:08:46:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----