Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/d5bd7fa3-c259-36d3-aaea-082a40dc5da5.roa
File:                     d5bd7fa3-c259-36d3-aaea-082a40dc5da5.roa (raw, json)
Hash identifier:          RAP7IYe510gd99KEZuIOndy4CLnvQ8Qxsy0PhjSUQK4=
Subject key identifier:   F1:E8:13:D6:BF:BC:90:11:99:F9:A0:A0:CB:74:AF:6F:A8:2B:AC:47
Certificate issuer:       /CN=98161ef7-249b-450b-ba6a-5819e613ed63
Certificate serial:       010D0C9F43285841D1E9115B042E3297699B4D80
Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/d5bd7fa3-c259-36d3-aaea-082a40dc5da5.roa
Signing time:             Tue 21 Mar 2023 11:57:11 +0000
ROA not before:           Tue 21 Mar 2023 11:57:11 +0000
ROA not after:            Thu 19 Jun 2025 04:00:00 +0000
asID:                     21738
IP address blocks:        2602:2b7:40::/48 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:d1:e9:11:5b:04:2e:32:97:69:9b:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63
        Validity
            Not Before: Mar 21 11:57:11 2023 GMT
            Not After : Jun 19 04:00:00 2025 GMT
        Subject: CN=c519617b-7203-42f7-97e3-cf771d0ef230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:73:47:9a:a8:d0:ce:c5:f8:fd:9c:6e:0b:70:
                    c1:52:fc:4f:4a:8e:06:18:41:b4:53:e2:01:28:72:
                    6a:61:8d:7a:e9:34:81:49:71:26:22:57:c3:f8:b1:
                    87:bc:bd:6a:84:ad:57:9a:50:a2:50:62:b6:af:f5:
                    29:cf:81:87:9e:6c:ce:b2:7a:23:40:87:78:e3:48:
                    7c:68:0a:6f:f1:63:83:b7:77:fb:04:57:7e:04:c5:
                    69:8d:06:d4:93:54:9a:48:10:02:10:31:96:4a:1f:
                    46:75:c9:a5:a4:48:1f:cf:9d:98:7d:b5:88:74:5d:
                    d6:5f:24:57:fc:0f:d4:68:95:07:79:32:4a:3e:da:
                    af:a1:27:eb:d3:fb:03:1f:86:33:56:e0:14:31:19:
                    e8:1d:e4:51:36:82:de:f6:3d:25:ea:51:d0:4b:6f:
                    f1:c9:16:86:79:34:df:e5:f0:37:ab:51:64:54:ce:
                    1b:5b:69:16:37:d1:c5:6b:1b:7e:48:70:0d:82:cf:
                    8b:0a:ce:59:17:a4:2d:09:e6:d2:dd:56:46:1f:51:
                    6c:33:6c:6d:99:49:cb:dd:c6:eb:fd:9b:77:4b:df:
                    d6:bc:c9:ea:02:a4:89:9c:9a:41:25:00:70:c2:78:
                    f3:3e:91:41:a2:96:63:b1:65:94:0f:c3:44:dd:f5:
                    ff:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E8:13:D6:BF:BC:90:11:99:F9:A0:A0:CB:74:AF:6F:A8:2B:AC:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/d5bd7fa3-c259-36d3-aaea-082a40dc5da5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl

            X509v3 Authority Key Identifier:
                keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b7:40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:e0:aa:fd:85:97:ec:3e:6a:1a:e1:ce:82:62:b7:69:8d:80:
         6a:d2:6f:9e:c4:77:b8:2a:c9:71:f1:71:45:37:ed:13:b3:79:
         3d:e4:02:2e:48:35:b6:b7:fd:c5:7d:10:1b:6d:44:2e:0d:e1:
         70:9a:1e:8a:3a:71:85:5d:1c:1d:88:b7:c5:22:5e:7b:01:bb:
         b6:be:9b:8a:05:20:9d:86:2e:28:f5:fa:3a:0b:ab:31:a9:ee:
         1f:e7:8e:07:24:bc:f7:76:48:19:05:64:f2:a6:4f:be:cf:e8:
         f9:eb:13:7e:00:72:d7:06:ec:4f:7e:f3:d4:43:7f:42:5b:9f:
         9e:52:02:c4:08:ad:6b:13:96:48:67:f7:10:b1:2b:27:64:bb:
         0c:2d:31:49:ed:2c:8c:ce:2a:76:23:64:2d:c4:33:bf:1e:e0:
         09:85:06:82:bc:0e:bf:e9:a4:d0:6f:0b:4b:fd:3b:85:b9:41:
         16:0e:72:3a:a8:69:47:a1:11:62:b9:58:32:92:e4:bd:45:4a:
         e5:09:34:5b:7e:25:63:6d:56:d6:ec:54:f6:97:10:57:5a:e6:
         4f:64:44:b3:22:a7:42:f7:42:c3:10:4d:73:75:54:71:9a:26:
         af:d1:c9:2d:39:6b:d6:63:43:34:eb:21:32:f1:56:6a:54:37:
         38:df:1b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----