Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/cc650487-a012-3aa2-9bf7-352212cb2a41.roa
File:                     cc650487-a012-3aa2-9bf7-352212cb2a41.roa (raw, json)
Hash identifier:          7v9GKgbsYzu1M2Fz64GCpNnwRD45mGdsiGOivupDBcQ=
Subject key identifier:   D7:3A:AB:C2:16:69:A5:2F:88:13:8F:5D:8C:34:34:0D:93:E7:0F:35
Certificate issuer:       /CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
Certificate serial:       010D0C9F4328583FB0D2E9C47848509E21B46200
Authority key identifier: 0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/cc650487-a012-3aa2-9bf7-352212cb2a41.roa
Signing time:             Tue 25 Oct 2022 12:07:42 +0000
ROA not before:           Tue 25 Oct 2022 12:07:42 +0000
ROA not after:            Mon 27 Jan 2025 05:00:00 +0000
asID:                     17048
IP address blocks:        2607:f5a0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b0:d2:e9:c4:78:48:50:9e:21:b4:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
        Validity
            Not Before: Oct 25 12:07:42 2022 GMT
            Not After : Jan 27 05:00:00 2025 GMT
        Subject: CN=f514e737-d044-43a3-bf7e-22a1cefc1bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d4:92:8c:33:33:ad:51:51:1d:e6:ab:17:a6:
                    15:01:d0:2d:7b:3e:87:3a:f0:e0:40:c4:71:75:f8:
                    23:85:75:6f:16:8d:5e:ad:ec:b6:61:52:c3:79:ab:
                    95:89:3b:a9:ff:7c:1b:0d:ae:19:b7:3b:22:01:79:
                    dc:7a:1d:10:40:29:87:65:db:31:65:b8:73:a2:74:
                    19:23:60:d4:17:13:ff:a9:47:03:ad:5e:f0:0d:2e:
                    5e:31:7d:ef:84:65:ab:90:33:3b:80:ff:23:43:c9:
                    c7:0a:88:c7:ac:bc:7d:f6:33:2c:1e:a0:31:48:6d:
                    5b:17:ac:3a:bd:f7:00:42:96:68:df:0d:f7:94:47:
                    f7:75:9d:2f:06:17:f4:af:cf:bd:a0:79:c6:94:36:
                    58:88:42:72:39:a7:9c:cd:6c:f3:0b:6e:01:66:e9:
                    94:96:d1:58:aa:87:6c:8f:e6:4b:51:6d:3b:28:9a:
                    29:90:59:1f:f9:b8:19:15:aa:64:6b:b5:1e:f8:fb:
                    69:00:da:47:86:02:f5:84:6f:a1:0a:f2:1f:c5:05:
                    fe:cc:f3:d3:d0:fd:c5:d6:3a:c8:9b:9e:84:b3:ad:
                    32:e0:48:7c:9a:fe:f4:2e:5c:26:a0:4d:1f:0d:9b:
                    0e:bb:3d:7f:5c:6e:4e:dc:d6:31:9c:23:52:44:70:
                    82:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3A:AB:C2:16:69:A5:2F:88:13:8F:5D:8C:34:34:0D:93:E7:0F:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/cc650487-a012-3aa2-9bf7-352212cb2a41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/2d6a17c2-b155-4b32-933b-3f7043e2cecc.crl

            X509v3 Authority Key Identifier:
                keyid:0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5a0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:a9:d5:7d:38:4c:56:23:ff:b8:1f:b2:54:42:f5:cb:5c:8d:
         81:da:02:08:18:78:6c:3e:6d:0d:61:72:22:93:eb:89:e1:65:
         40:26:48:95:02:9f:c8:3e:6d:05:95:84:71:67:f8:84:7a:49:
         e3:5c:2d:73:44:93:d5:dc:91:88:3d:06:47:c3:57:36:59:cc:
         e4:b2:5a:e0:92:65:cb:67:3e:98:f2:e2:dc:9e:9f:a2:15:00:
         07:7e:d4:73:6c:9c:e2:be:d1:de:8c:f2:f0:1d:e7:b8:0f:02:
         8a:8e:f3:67:af:53:16:96:e2:fd:04:b3:33:c1:b7:6e:86:5b:
         ca:07:e8:ab:17:06:fd:80:dc:b2:b6:fb:6b:db:ee:06:22:84:
         c4:c5:f7:96:ad:bd:41:c0:70:cf:f8:68:14:3b:7c:65:37:fc:
         65:95:cd:e4:2b:4e:73:50:75:c8:db:be:2d:e6:2d:10:73:60:
         be:9f:b2:ca:bf:20:9f:20:9c:46:ac:b5:98:fc:1c:f8:10:85:
         75:67:c5:d9:c7:a8:99:92:f3:ce:c2:b4:59:4e:dc:e6:64:0d:
         f2:a5:f3:02:05:ce:da:76:de:2d:b3:4c:be:e6:cb:e7:1a:0f:
         13:1a:08:2e:fe:44:2d:0b:f9:f2:16:5e:24:8c:b7:2b:a4:ab:
         06:7c:9c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----