Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3a5b1810-9336-34bc-b525-5780d0fe145e.roa
File:                     3a5b1810-9336-34bc-b525-5780d0fe145e.roa (raw, json)
Hash identifier:          fq+RRUlZJj2uiHiJ6PjLX/Bs2+35zc2o2KYSxOV3NhU=
Subject key identifier:   92:0D:64:2A:4A:E2:C2:E5:39:03:9A:3E:76:66:33:CA:13:10:92:C1
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285842FB2650C05DD809560E472700
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3a5b1810-9336-34bc-b525-5780d0fe145e.roa
Signing time:             Wed 23 Aug 2023 14:30:22 +0000
ROA not before:           Wed 23 Aug 2023 14:30:22 +0000
ROA not after:            Tue 21 Nov 2023 15:30:22 +0000
asID:                     20940
IP address blocks:        2001:418:1430:100::/56 maxlen: 56

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:fb:26:50:c0:5d:d8:09:56:0e:47:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 23 14:30:22 2023 GMT
            Not After : Nov 21 15:30:22 2023 GMT
        Subject: CN=0d4bad38-7f5a-41c0-bd0a-1f75b0c41313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4f:66:32:29:e7:89:b7:f9:48:18:90:7b:80:
                    21:c0:b7:c6:d8:cb:da:a0:72:95:85:6c:8d:59:d3:
                    9d:9e:4b:dc:4a:ce:9c:a5:2a:12:8a:29:04:0f:af:
                    c8:27:81:75:fc:c4:a2:cb:86:47:93:b9:64:cd:9b:
                    ae:7a:14:ac:a6:8a:87:a1:d7:c9:d8:72:eb:89:2b:
                    0a:90:4e:9b:aa:69:a2:d0:f0:7d:05:ee:78:89:9c:
                    65:1b:77:e3:83:d2:29:79:cf:b4:87:4a:ca:45:d4:
                    f5:41:d8:c9:0b:9f:3a:e1:5b:a1:a0:98:81:85:ca:
                    86:8b:9a:fd:be:a5:76:81:38:8f:bc:fd:85:8c:4a:
                    7f:ae:8f:45:19:e1:29:cf:e9:c3:c7:e2:7f:6a:d0:
                    9c:df:d8:9c:d5:e2:9d:04:fc:a0:aa:ac:36:cc:42:
                    63:7c:79:9c:15:31:ea:f5:cc:4f:57:05:f6:4c:bc:
                    28:43:ac:8d:e5:55:77:c8:ad:4d:cc:ff:21:69:1f:
                    30:cd:67:72:2a:38:63:7b:66:49:60:ae:b0:d1:3f:
                    5c:dc:2b:f1:5f:dc:de:e2:55:0f:b5:67:e0:6b:33:
                    da:62:9f:ae:f9:ee:71:e0:dc:f7:cb:c4:01:ee:cb:
                    ee:58:a0:63:c2:46:7f:0c:b4:90:24:ea:6e:df:65:
                    3e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0D:64:2A:4A:E2:C2:E5:39:03:9A:3E:76:66:33:CA:13:10:92:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3a5b1810-9336-34bc-b525-5780d0fe145e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1430:100::/56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:23:15:45:d7:11:c7:c9:06:71:78:6a:68:f2:7d:fc:9a:b7:
         ce:9b:20:76:ae:74:33:b9:77:7b:cb:c0:4b:33:27:bf:62:1d:
         7a:ea:6d:44:83:ca:da:d0:7e:a4:7c:b1:b4:d2:29:ab:68:a7:
         da:32:d6:de:04:1a:16:fc:6d:1f:cc:40:e8:46:24:5a:57:ba:
         26:ef:b2:9c:d7:26:d2:b1:f4:ab:f6:f5:cc:27:42:72:30:88:
         7b:a3:5f:5a:61:e0:23:46:06:fd:f8:96:d2:fc:0c:d1:d4:55:
         18:6c:9d:f7:8d:a1:1d:6c:da:a1:ab:d4:85:a9:02:5f:4e:ed:
         22:f4:68:b8:a7:15:e1:f5:e9:88:73:66:73:77:8a:cc:0f:10:
         0a:36:bc:c4:35:6e:f3:13:25:d1:a4:a1:1a:49:6b:ab:f2:04:
         d6:a9:34:f2:09:c1:80:65:3f:4b:bb:f6:56:00:06:bc:b6:fa:
         47:d3:5e:27:c4:6c:e9:6d:67:80:db:22:72:dc:db:96:75:7d:
         07:a0:2b:a3:1a:56:fe:58:56:ae:3f:01:2d:17:23:e9:ef:ab:
         e6:8c:cd:35:b1:e9:f8:b0:e9:93:97:c5:34:2b:fd:79:13:5f:
         fc:06:77:ad:ad:b2:96:55:80:fb:aa:f2:a6:55:a7:3a:08:f7:
         7f:fa:6a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----