Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/621e31ae-db86-3042-bc0a-3f0835526113.roa
File:                     621e31ae-db86-3042-bc0a-3f0835526113.roa (raw, json)
Hash identifier:          BUZ60Y7NvpwOYFE/rPRKlAWtGgi3PHuT2IabHtPcLDg=
Subject key identifier:   D8:A7:76:10:F8:5D:4A:64:6D:98:B1:95:32:4C:D7:A4:91:0D:41:B8
Certificate issuer:       /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial:       010D0C9F4328583F7DE721FB5276F3C19B798540
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/621e31ae-db86-3042-bc0a-3f0835526113.roa
Signing time:             Mon 25 Jul 2022 14:21:46 +0000
ROA not before:           Mon 25 Jul 2022 14:21:46 +0000
ROA not after:            Sun 27 Oct 2024 04:00:00 +0000
asID:                     8987
IP address blocks:        2601:9200::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 18 Oct 2022 14:52:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7d:e7:21:fb:52:76:f3:c1:9b:79:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
        Validity
            Not Before: Jul 25 14:21:46 2022 GMT
            Not After : Oct 27 04:00:00 2024 GMT
        Subject: CN=bc503b9c-0ad6-4f0c-a0af-cbbb7ed3765c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e7:bf:9a:11:ce:5f:de:bd:3a:ec:7f:46:fa:
                    30:ac:a1:aa:d8:01:dc:f1:25:94:b7:c6:59:60:13:
                    65:4b:39:9e:c1:93:43:c0:d0:66:93:63:6e:24:75:
                    93:d7:15:c1:ff:42:a4:5f:af:73:32:bd:5a:50:98:
                    45:24:2f:62:fb:c9:b2:eb:f2:e8:f9:08:4c:a5:53:
                    3f:1a:73:08:05:85:7d:d4:70:d9:a4:02:38:19:8b:
                    16:be:16:97:5e:1a:ba:7c:66:14:2f:0e:65:59:8d:
                    5c:8e:e5:af:fd:d7:a0:0b:fa:4b:2c:b7:e7:d9:72:
                    fa:7b:d7:8f:86:20:77:96:aa:6b:3c:58:b4:56:ee:
                    36:15:e1:c8:d2:50:61:7f:4d:2d:10:1d:7a:21:b9:
                    d9:95:cf:a6:17:2a:be:86:56:bc:28:21:eb:bb:d7:
                    92:8a:76:6e:aa:ab:02:01:e0:74:93:1e:2e:37:43:
                    29:dd:47:16:f3:d8:95:1f:10:3b:c2:a1:c8:64:c0:
                    24:2b:ed:a5:1a:c4:49:f2:a1:aa:1f:8f:42:f4:5c:
                    3f:cc:da:eb:6c:4d:03:72:95:a6:95:53:9f:2a:04:
                    62:ad:06:55:db:42:64:33:a6:b4:95:97:38:90:14:
                    17:40:19:de:ce:5c:62:3e:99:c8:6c:a2:72:d9:3d:
                    24:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A7:76:10:F8:5D:4A:64:6D:98:B1:95:32:4C:D7:A4:91:0D:41:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/621e31ae-db86-3042-bc0a-3f0835526113.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:9200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:b8:cb:53:c2:d0:0b:e6:34:81:14:8f:24:74:22:2b:7d:54:
         a9:7d:86:f9:9e:3e:19:d8:a3:32:8f:b9:53:7f:53:27:6f:9f:
         7f:fc:e9:41:0b:07:e7:ee:6b:1e:13:e9:74:26:92:a7:2d:ec:
         56:81:f6:b6:ff:76:78:ab:4e:aa:2f:bd:e3:a8:80:43:2e:cd:
         f9:83:6a:59:27:ad:37:0e:95:84:d6:c9:78:1f:67:87:79:05:
         30:b5:14:60:a7:72:e4:93:a7:a7:18:2b:77:21:a4:24:b8:14:
         32:f9:45:fd:0f:84:9b:54:28:ca:3d:5f:dd:3d:b9:bc:9c:0a:
         8d:f1:6b:f4:ce:ac:30:4c:b9:cd:fb:ed:85:a3:3f:a8:ee:dc:
         1f:be:e7:1b:85:29:24:28:7c:66:75:fc:93:98:67:e7:7f:31:
         66:fe:d1:76:c6:5a:3d:64:5e:0f:bf:47:a8:d5:ac:b5:af:7f:
         55:a5:e9:94:57:0e:4f:0e:39:c4:c0:ed:26:f0:0e:66:57:b1:
         1b:bf:2d:e1:d7:6e:65:c0:30:ef:b3:cf:d1:6d:04:da:03:64:
         19:f5:85:a6:e0:67:94:27:5a:21:68:d0:2a:05:f3:50:be:fa:
         e7:f4:b0:72:91:09:80:c0:a2:4b:22:bb:46:ca:72:5d:4e:73:
         0d:dc:92:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----