Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/657f2677-9ae2-3231-869e-134f2fca1ad6.roa
File:                     657f2677-9ae2-3231-869e-134f2fca1ad6.roa (raw, json)
Hash identifier:          l5xcrhi8U50A/TqoHxkvuMBotny6TTIfQy49tHPF84E=
Subject key identifier:   2A:49:A2:4A:F9:79:D7:E3:7F:C8:08:23:AD:9F:5F:A6:FE:7B:45:F2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285843387429BAE290797E38CC8500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/657f2677-9ae2-3231-869e-134f2fca1ad6.roa
Signing time:             Thu 14 Sep 2023 13:31:31 +0000
ROA not before:           Thu 14 Sep 2023 13:31:31 +0000
ROA not after:            Wed 13 Dec 2023 14:31:31 +0000
asID:                     22663
IP address blocks:        2001:470:2c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:38:74:29:ba:e2:90:79:7e:38:cc:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 14 13:31:31 2023 GMT
            Not After : Dec 13 14:31:31 2023 GMT
        Subject: CN=e442baed-73c2-4683-95d9-085342bb46eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6a:b8:e8:a2:2b:d3:ab:d5:d1:1b:7f:92:e1:
                    ae:76:80:10:0f:57:a0:f9:bb:5a:49:f9:c9:38:2e:
                    14:29:a2:8a:86:a4:b3:f0:a2:c6:bf:93:0a:e5:0e:
                    ee:78:c9:b8:53:b7:3a:4c:60:98:f5:a8:21:b1:44:
                    30:b8:ea:ac:ba:01:a2:6c:a3:12:a9:cf:e6:ed:68:
                    1f:5a:f1:8a:72:7b:4d:24:e3:66:9e:e3:aa:0e:3c:
                    94:ac:9d:9d:0f:0c:e3:8a:ea:b8:73:87:c8:16:e9:
                    67:68:55:7c:81:a1:26:12:a1:c6:8f:c2:ab:ee:99:
                    dd:e7:71:e2:6e:d2:41:f4:78:99:31:e2:be:f9:bc:
                    a9:0c:11:41:ab:41:ab:5d:ec:16:ec:cb:27:67:40:
                    a9:1a:af:f2:93:fb:82:ce:0f:a9:cd:10:38:d0:c5:
                    7f:cc:eb:29:a2:72:c0:c8:d8:2a:ea:f1:c0:41:d3:
                    e1:0d:e3:ec:7e:50:50:12:e5:22:0b:98:28:d1:a7:
                    de:a2:e9:79:d4:13:10:c4:4c:02:20:c6:8a:27:db:
                    a5:a0:d4:b5:83:51:24:b4:15:a3:86:b2:60:e8:32:
                    e2:02:6c:2e:48:a1:b0:a3:c3:c9:af:9c:86:d4:aa:
                    5d:e4:81:c9:9f:b5:ea:2d:de:91:52:e8:78:b1:fe:
                    fc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:49:A2:4A:F9:79:D7:E3:7F:C8:08:23:AD:9F:5F:A6:FE:7B:45:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/657f2677-9ae2-3231-869e-134f2fca1ad6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:5d:72:41:c8:46:86:33:53:78:f9:78:fc:50:94:0c:32:06:
         d8:8f:eb:93:2c:7a:ae:94:8a:f0:b2:9d:6f:47:3c:39:1b:5d:
         a6:e1:7a:9e:ea:8d:ef:eb:5f:07:c6:b6:62:f5:8f:98:dd:db:
         78:e7:1b:8b:5c:43:24:70:6f:59:00:1b:66:10:b2:a7:b2:d3:
         fb:12:52:b1:cb:7f:ce:86:e0:b5:7c:7b:d1:79:f6:04:66:73:
         44:02:23:fe:e8:52:94:c6:63:21:cc:84:bb:88:77:92:d8:16:
         0e:9a:4a:6b:d5:22:b9:b7:a1:6e:d3:5f:ae:51:29:7c:74:1f:
         c3:14:40:db:9f:c6:6c:e0:c8:c8:01:83:88:f8:7b:45:3e:6b:
         6b:ae:08:4f:52:a8:ef:07:dc:8e:d7:92:62:02:0e:8d:63:7d:
         59:f3:55:27:4d:81:b5:70:da:cf:15:ec:72:f9:1c:1e:04:c9:
         de:d8:af:6a:19:b4:1c:72:ad:65:58:65:02:bb:c2:64:4f:57:
         59:48:36:3a:08:97:aa:db:56:71:ea:95:6b:f1:45:b3:7a:8d:
         28:27:65:0b:f1:38:6f:26:62:23:52:1f:ed:9e:80:ae:e8:05:
         90:61:ae:18:2f:3b:0b:f2:cb:1f:70:5c:3c:04:11:a8:51:c7:
         66:f6:e6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----