Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6905e1ae-3e90-3dae-ac60-6193c62c457f.roa
File:                     6905e1ae-3e90-3dae-ac60-6193c62c457f.roa (raw, json)
Hash identifier:          m2HRxuGK28SyA2QF9UaGsO/1h5LBwDpaLm8MqTg3JNI=
Subject key identifier:   D7:60:6A:F5:77:4D:83:8F:C1:43:4D:F7:68:BF:5C:A1:1E:01:49:A2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584297ED5B00502BAE1FBAF4E920
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6905e1ae-3e90-3dae-ac60-6193c62c457f.roa
Signing time:             Mon 17 Jul 2023 12:00:00 +0000
ROA not before:           Mon 17 Jul 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     133527
IP address blocks:        2001:470:163::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:97:ed:5b:00:50:2b:ae:1f:ba:f4:e9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 17 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=fe62040c-79fc-434f-b848-c29d3381f715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4d:bf:ad:ab:31:ee:a2:0a:39:5f:f0:a8:bf:
                    e6:ec:bd:bb:e5:32:27:ed:26:40:3e:ac:72:ee:0c:
                    c4:4e:e5:09:27:c6:a4:30:a3:ee:1c:f8:40:88:63:
                    26:82:e5:a6:de:b5:bb:d2:86:53:5c:90:9d:02:e5:
                    4a:27:a8:f2:61:98:b4:ca:c5:dd:a9:fd:fc:c4:14:
                    f1:9a:ab:41:68:03:b5:bd:64:a1:15:2a:db:52:2f:
                    4c:2b:c5:8c:5d:fc:af:8d:76:85:67:90:03:7f:20:
                    b3:d9:07:63:dd:78:24:a0:90:06:a1:45:07:72:c1:
                    49:08:d7:2c:c7:64:a0:ae:40:37:2c:9e:dc:c2:bd:
                    92:8f:98:25:b6:98:b8:54:70:40:25:35:3b:a7:a2:
                    07:9d:e2:40:0a:a4:2c:d5:39:e1:e7:51:c8:71:93:
                    8c:0e:96:df:de:dd:be:60:e6:9b:fc:3d:25:9b:0b:
                    25:ed:0a:83:0f:90:e0:be:63:6b:1d:46:f7:58:a6:
                    cf:29:df:56:77:5f:11:51:66:ae:2b:0b:c4:fc:35:
                    61:87:e5:b8:2c:df:7a:68:95:a7:cd:93:95:a8:63:
                    43:19:57:35:35:05:b8:99:ea:79:6a:b3:66:c1:25:
                    0b:fb:a1:95:06:c1:a6:c0:36:04:ba:df:c9:cf:42:
                    1a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:60:6A:F5:77:4D:83:8F:C1:43:4D:F7:68:BF:5C:A1:1E:01:49:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6905e1ae-3e90-3dae-ac60-6193c62c457f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:163::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:4e:6a:d3:5b:79:70:fb:ac:c2:46:f5:65:cd:84:89:b9:50:
         8b:12:df:c1:3a:a4:8c:3c:50:06:cf:d5:55:fb:17:6f:09:55:
         03:3f:29:1f:35:9a:02:64:22:f7:60:0a:cc:f9:88:94:d0:9b:
         38:a9:e9:e9:95:47:fc:73:27:07:88:a8:1b:e6:85:55:b4:4b:
         e8:14:0f:a1:eb:b6:fa:86:2d:06:dd:eb:8f:f9:24:ba:6d:9c:
         2d:c8:52:20:84:7b:40:60:67:72:f0:a0:8a:68:d4:cf:cb:b7:
         06:5f:b1:7b:c2:e0:57:e5:2b:37:5a:c7:41:ed:de:35:ce:95:
         7b:67:d4:a3:fc:6e:cc:bb:53:29:20:54:99:20:5c:6e:6a:86:
         5c:09:9b:3d:a6:ce:58:62:01:72:83:db:2a:2b:ee:9b:ac:3b:
         54:80:b9:41:93:55:2f:76:b3:99:65:a8:fb:aa:60:01:88:ff:
         89:0b:ed:1c:43:0d:fc:fe:d9:59:87:a1:b8:eb:5d:70:3c:b0:
         7a:61:19:ce:a3:f0:41:30:69:9f:0b:68:6c:e0:93:88:14:61:
         0b:c4:5c:f4:c8:49:9a:05:40:db:c9:ce:47:f0:2d:cf:bd:d0:
         00:d8:ff:54:33:9f:c8:00:16:54:5d:7e:82:ca:d3:51:55:75:
         d1:8e:d2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----