Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/a03035a1-4c82-3f8b-9194-439903b08f09.roa
File:                     a03035a1-4c82-3f8b-9194-439903b08f09.roa (raw, json)
Hash identifier:          CCygvxr3lKIkiZUO/kMg/QhXbr0ZjBtoyqOaDwG0qTU=
Subject key identifier:   71:5F:DD:D4:89:A5:E4:F2:A8:C5:A2:B9:E0:E6:70:6E:62:29:27:66
Certificate issuer:       /CN=e13a5b98-c410-4224-be84-d8a01047fa5b
Certificate serial:       010D0C9F4328583FDD864BE65425D3A2B7E6DC80
Authority key identifier: 07:34:FC:70:C9:43:E2:BF:27:D4:A5:DF:F4:64:39:7D:28:7E:65:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/a03035a1-4c82-3f8b-9194-439903b08f09.roa
Signing time:             Wed 09 Nov 2022 15:09:22 +0000
ROA not before:           Wed 09 Nov 2022 15:09:22 +0000
ROA not after:            Tue 11 Feb 2025 05:00:00 +0000
asID:                     16519
IP address blocks:        2620:123:5000::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 10 Nov 2022 23:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:dd:86:4b:e6:54:25:d3:a2:b7:e6:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e13a5b98-c410-4224-be84-d8a01047fa5b
        Validity
            Not Before: Nov  9 15:09:22 2022 GMT
            Not After : Feb 11 05:00:00 2025 GMT
        Subject: CN=af4c5e0c-3100-4959-af28-8b771707ae48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:95:fe:30:1c:21:fc:3a:75:e3:36:1b:00:5d:
                    76:b8:0a:1d:80:90:bb:66:75:22:56:ef:09:a5:30:
                    52:2d:65:30:36:ef:6c:a0:40:a1:ac:b4:0b:2c:6d:
                    b5:03:0b:81:b7:95:a9:ca:ba:d5:42:a9:27:49:76:
                    26:7f:70:8c:7c:31:d9:66:18:cc:a3:62:64:e4:46:
                    59:c1:06:d3:ec:b8:cf:81:ca:ad:84:54:c5:4a:a5:
                    bb:ac:dd:0e:4c:0a:cf:71:ed:cc:98:9c:e1:e3:33:
                    e8:1e:7e:58:b2:c6:da:d4:8c:c0:93:47:fb:c0:c9:
                    9f:10:5d:ef:58:cb:61:5f:47:63:dd:05:55:e3:ae:
                    77:5d:e3:f4:0c:b4:4c:89:17:66:81:d1:bd:5f:4a:
                    61:48:5f:6f:cc:80:d8:64:fb:a5:c8:99:bd:ee:f2:
                    83:2f:16:ae:64:05:22:9e:4d:87:49:28:9a:37:34:
                    cd:d2:a0:dc:bf:00:44:77:88:1f:39:44:7a:f9:e7:
                    bd:2b:b9:62:bb:79:8f:ff:75:d8:b5:36:aa:c0:4c:
                    61:ac:68:7e:00:ea:9a:17:7f:22:5a:02:a6:74:67:
                    80:09:aa:4a:6b:39:7b:aa:ae:7f:36:e6:8a:29:43:
                    fd:01:64:44:3e:97:ba:af:cd:4e:9b:6d:c9:06:13:
                    3f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5F:DD:D4:89:A5:E4:F2:A8:C5:A2:B9:E0:E6:70:6E:62:29:27:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/a03035a1-4c82-3f8b-9194-439903b08f09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/e13a5b98-c410-4224-be84-d8a01047fa5b.crl

            X509v3 Authority Key Identifier:
                keyid:07:34:FC:70:C9:43:E2:BF:27:D4:A5:DF:F4:64:39:7D:28:7E:65:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:5000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:26:36:76:8f:d7:46:fb:b6:93:4d:81:3c:1a:6d:36:27:dd:
         99:77:b6:91:6a:5f:c8:10:07:87:ac:cc:20:3b:95:12:3a:1b:
         52:da:aa:6c:e6:a5:ce:91:76:f9:ee:bf:71:4b:30:c1:cc:84:
         81:b2:9b:e0:f1:3f:34:fd:fc:99:24:5e:2d:90:7a:c6:cb:cb:
         6c:2d:81:1e:f6:74:10:de:b8:aa:d4:36:3d:84:89:29:4a:b3:
         ec:56:84:98:32:de:97:24:c7:70:90:d0:b3:9e:42:48:94:c5:
         66:3d:87:f4:a5:20:08:d1:65:94:e1:63:68:64:26:87:55:2c:
         f3:e3:3b:de:74:24:48:72:9a:c7:58:db:db:87:54:fa:72:a4:
         4a:6c:ec:67:96:95:82:c9:a9:56:fd:1c:6a:88:00:bb:c7:4a:
         8a:0c:ce:af:82:09:5f:3d:69:ad:98:b0:ad:9b:a4:da:f3:3e:
         33:da:15:19:85:84:26:ac:5d:a9:75:29:af:10:5b:9d:4b:7b:
         0f:e6:65:a1:49:88:95:d7:99:8c:5b:98:65:ce:fc:40:13:9b:
         06:ed:af:a9:5f:b3:98:64:aa:fd:19:43:ac:a5:5f:8f:6a:ae:
         14:2f:20:5b:62:d6:8f:e6:b0:25:16:72:cc:11:b1:bb:7c:62:
         f7:30:e6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----