Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4ac01ca7-0da3-3c54-be11-67e6910ddede.roa
File:                     4ac01ca7-0da3-3c54-be11-67e6910ddede.roa (raw, json)
Hash identifier:          /b0UUq9ZQs8YX2WwqLYE/tPNr4WFbYA8bTTqsUEUc00=
Subject key identifier:   B4:7A:DC:28:0A:DB:1B:07:8D:41:60:7C:7D:61:89:18:53:A1:59:99
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584338741C0F9FD820608B829800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4ac01ca7-0da3-3c54-be11-67e6910ddede.roa
Signing time:             Thu 14 Sep 2023 13:31:25 +0000
ROA not before:           Thu 14 Sep 2023 13:31:25 +0000
ROA not after:            Wed 13 Dec 2023 14:31:25 +0000
asID:                     19306
IP address blocks:        2001:470:e2::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:38:74:1c:0f:9f:d8:20:60:8b:82:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 14 13:31:25 2023 GMT
            Not After : Dec 13 14:31:25 2023 GMT
        Subject: CN=5db57066-1625-42ca-ab34-81624eb5c5c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5b:0a:79:f6:81:50:c8:70:fc:a1:02:94:1b:
                    d4:7f:cf:1d:9d:78:a3:1a:a4:f6:01:3e:26:9a:1b:
                    07:28:7e:46:b6:1b:13:d3:ed:ad:1c:7a:f2:40:de:
                    62:8d:d0:97:34:4f:c5:42:37:fe:ec:9d:e1:1a:32:
                    9a:0e:1e:08:b6:85:d6:cd:bb:74:5b:71:96:d9:c4:
                    6e:9b:ac:87:f4:5d:c7:61:ca:e1:16:d5:a5:8e:b8:
                    bf:91:3b:28:cd:fc:53:35:62:1a:d0:4c:d5:2c:42:
                    c9:3d:38:eb:59:f0:1c:ce:ab:c5:1e:6e:ae:12:99:
                    84:f2:eb:ac:84:24:f2:d8:4b:a2:4a:38:ed:69:f0:
                    ed:1a:fd:ba:ca:11:26:a5:e9:d0:8d:58:a7:33:46:
                    97:3e:b5:cf:b5:bd:3e:60:d8:28:76:32:7e:53:e8:
                    59:69:1e:2a:f6:48:b1:ff:a1:3c:5b:14:49:0e:92:
                    5f:3f:92:89:88:e5:79:fd:1b:da:6c:ea:7b:6e:5b:
                    dd:6e:cd:4e:fb:00:48:69:d0:ae:6c:0a:f2:b6:3a:
                    ea:4f:0c:28:7f:a0:5a:bd:fb:45:16:f8:8d:5e:57:
                    22:c9:3f:b5:25:29:5f:b1:87:0d:5f:5a:73:ea:27:
                    64:a6:ba:05:ca:be:1d:0c:65:1d:9b:f6:71:0e:83:
                    ee:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7A:DC:28:0A:DB:1B:07:8D:41:60:7C:7D:61:89:18:53:A1:59:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4ac01ca7-0da3-3c54-be11-67e6910ddede.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:e2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ce:35:c5:63:8a:a3:15:04:d9:79:ff:d3:8d:96:e5:64:46:
         35:b3:4b:47:49:c2:0a:0d:7d:0c:5c:4b:81:23:6f:46:0b:d4:
         88:28:be:57:75:c3:52:a0:af:f9:e4:2e:2a:95:10:ad:f4:4d:
         f9:5a:44:b5:f6:84:d3:89:d3:a2:b3:94:4c:cb:2f:7e:ca:44:
         7f:a8:03:cb:fd:a5:92:1c:e5:28:83:96:f4:34:eb:9e:e2:25:
         d8:ac:b8:75:e8:09:e3:94:fe:79:b0:95:d0:bc:19:c1:2a:8d:
         ff:6a:2c:93:b0:48:9c:13:a0:ef:eb:d6:e0:bd:49:f2:5f:05:
         3d:02:72:b1:d6:e6:ad:29:dc:d1:79:8c:16:5f:4f:27:3a:12:
         bc:b9:1e:7c:cd:c3:49:be:f0:5c:a7:84:be:97:14:a2:92:6a:
         2c:31:74:f4:bc:cb:a5:3f:2f:04:08:54:de:51:8d:52:34:63:
         8e:28:2b:da:4b:a5:20:4c:cd:58:89:4f:46:fa:30:d4:c6:d2:
         15:d4:cc:92:e6:08:b0:b5:f4:19:4d:d0:ff:bf:21:b3:62:31:
         0b:f8:0e:73:20:02:6b:ed:b5:dc:8e:3a:25:47:0d:4f:19:88:
         b5:10:9a:7b:7a:09:c0:f5:52:36:3f:b2:4a:c0:21:c2:81:c8:
         e2:f3:47:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----