Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c890eb85-46cd-35c8-82f3-9b9eebd6e4f0.roa
File:                     c890eb85-46cd-35c8-82f3-9b9eebd6e4f0.roa (raw, json)
Hash identifier:          lNMNoSGzYS0c8GD2Akn/nWMRVqrqV3ZIcpe0ORe5JX4=
Subject key identifier:   0D:42:40:68:36:1E:52:1D:6A:1D:24:C7:91:04:88:6E:05:15:B7:AD
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A50D7E974332840DF2EB400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c890eb85-46cd-35c8-82f3-9b9eebd6e4f0.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     33941
IP address blocks:        2001:470:38::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:50:d7:e9:74:33:28:40:df:2e:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=67122026-e76c-4c80-9a66-b709e929e57d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6c:ae:51:de:11:40:75:92:ea:f6:bf:f1:21:
                    f0:91:bd:65:bb:9b:5f:1e:a9:bd:34:3e:e4:8a:84:
                    0a:80:bd:b3:e8:02:2f:ab:e1:88:5a:80:72:80:0b:
                    6a:c2:d1:43:e3:75:2a:25:0d:c1:81:16:25:c7:13:
                    3c:0a:d1:00:81:a8:5b:5b:de:cc:3f:6a:2b:12:e0:
                    50:70:f1:f6:97:73:2d:a4:09:9b:33:04:60:52:96:
                    fd:29:b3:00:71:83:c4:54:9f:d3:a2:b7:fc:03:78:
                    42:61:bd:53:09:97:2c:5d:9d:3d:bb:bf:26:5f:16:
                    ed:07:13:ad:ae:d3:0b:0a:d3:08:b5:36:8a:c2:ab:
                    ad:13:ed:98:d3:df:48:41:01:c2:c1:f1:b9:d6:c2:
                    88:c7:45:8d:5c:e6:53:02:a6:a8:ba:03:64:5c:27:
                    b6:bf:d7:fd:4a:cf:ec:c1:aa:aa:a2:5d:f7:29:e0:
                    6d:0e:29:23:f1:15:55:ca:dd:6b:21:f8:7d:fa:74:
                    c8:6e:74:be:98:95:22:83:48:1f:c1:9a:d4:79:5e:
                    c0:b5:62:36:45:de:53:d1:34:83:43:ed:0f:b4:f0:
                    07:c4:5b:b4:54:36:b0:6d:03:7f:5f:63:0e:9f:31:
                    7f:cf:cd:3f:a0:4a:ba:9e:79:c9:66:5f:de:3a:8f:
                    e0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:42:40:68:36:1E:52:1D:6A:1D:24:C7:91:04:88:6E:05:15:B7:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c890eb85-46cd-35c8-82f3-9b9eebd6e4f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:38::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:6e:8e:86:8d:fa:4d:54:d0:69:99:c3:ee:34:08:ab:a4:be:
         2e:b2:06:64:c2:aa:76:74:eb:66:fc:90:af:20:36:0c:12:a1:
         fb:60:32:ec:c7:a7:b2:03:de:b3:e9:a5:45:35:3a:cb:dd:5f:
         68:ba:98:88:3d:21:dc:b6:01:1d:23:35:15:51:fa:78:00:8e:
         de:2b:5d:01:e0:31:40:0e:84:ff:b7:cd:2e:cf:db:ed:b6:74:
         90:5f:67:7f:8a:ef:25:a6:63:4c:39:0a:11:e1:79:be:52:ec:
         81:2e:b8:e8:04:b3:1b:3c:06:05:ef:63:88:f7:7b:5d:7c:2d:
         af:b9:e0:d2:e2:1d:c7:99:65:88:33:07:10:bf:65:59:91:ac:
         93:e9:0a:f2:f6:10:d8:67:1c:46:98:07:2a:04:63:cf:04:da:
         de:f1:39:69:5f:98:29:e3:17:3f:3b:0e:d2:52:50:3d:c2:18:
         7a:35:a9:75:8e:98:1f:f7:c7:13:4d:26:c6:19:ac:d4:d9:54:
         fb:6c:9e:a8:03:31:63:a1:cf:61:72:fb:38:38:c8:19:6a:cc:
         17:58:51:a0:e8:a3:80:35:d6:24:d1:3b:38:48:bd:ac:11:42:
         15:5e:0a:c0:c8:75:f0:b8:2c:67:94:39:44:f4:b8:8f:6f:9b:
         66:cd:e1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----