Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247/8d362f35-04d9-3f31-a4ef-d566ab39ebe5.roa
File:                     8d362f35-04d9-3f31-a4ef-d566ab39ebe5.roa (raw, json)
Hash identifier:          28+nDhcBXTzSH9hxNdfMKsBrPVWT9VzA6F7yjfxv6F8=
Subject key identifier:   E8:56:F7:98:E9:3E:DA:58:DD:B1:87:2B:E7:4A:17:C3:52:1A:9E:7E
Certificate issuer:       /CN=c487dbf3-3b16-4d19-9025-e64b6f47a247
Certificate serial:       010D0C9F4328576D51CC73C042CFC16EC81E113C
Authority key identifier: 85:15:99:42:C3:72:B2:77:FC:D2:81:6C:46:72:C3:65:2D:B7:81:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247/8d362f35-04d9-3f31-a4ef-d566ab39ebe5.roa
Signing time:             Mon 02 Dec 2019 19:37:24 +0000
ROA not before:           Wed 27 Nov 2019 05:00:00 +0000
ROA not after:            Tue 27 Nov 2029 05:00:00 +0000
asID:                     25682
IP address blocks:        2620:39:6000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:c8:1e:11:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487dbf3-3b16-4d19-9025-e64b6f47a247
        Validity
            Not Before: Nov 27 05:00:00 2019 GMT
            Not After : Nov 27 05:00:00 2029 GMT
        Subject: CN=6ccd4b42-e1ac-4beb-a5dd-0ee5f2cdfeb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:06:74:c2:75:82:a2:c8:7d:34:64:7f:4a:b6:
                    c9:1f:1b:45:98:8a:96:52:d6:f7:62:6d:ac:25:af:
                    a7:fc:68:30:58:59:bb:2d:2d:41:ef:45:7f:ea:e7:
                    80:6b:be:9c:c8:80:5a:4b:2d:2e:88:2c:bb:1f:36:
                    d9:66:14:23:92:d2:f6:aa:9d:3e:6a:40:fd:23:1d:
                    5f:4d:a4:a5:27:59:9e:61:6e:d5:80:ac:10:26:d3:
                    b4:af:37:53:c6:de:f0:fe:08:3a:92:c0:d4:fc:1f:
                    92:a0:7a:76:11:36:66:c5:a5:2c:ae:08:bc:bb:11:
                    c3:06:b7:50:8c:c5:76:0f:c1:57:a8:33:52:82:f6:
                    ed:49:a9:be:c1:90:86:dd:34:f7:1c:3e:f8:ae:cb:
                    56:b6:21:f7:72:5d:4a:08:e0:52:1e:b6:66:4c:7e:
                    81:c1:a4:dc:17:a3:b3:55:f8:68:39:0d:48:96:a6:
                    03:66:2a:89:91:84:97:98:38:66:76:dd:1a:6d:2f:
                    cc:78:ef:8b:8b:44:e7:fb:68:9e:33:71:d3:5b:ec:
                    58:52:92:be:97:a0:21:48:77:ad:d9:1a:34:53:2d:
                    3b:3b:a0:a6:eb:0a:1c:f4:85:c8:55:8e:b3:5e:c0:
                    8d:cf:c9:74:d6:2a:a6:7e:e8:ac:e6:b5:7e:39:32:
                    6f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:56:F7:98:E9:3E:DA:58:DD:B1:87:2B:E7:4A:17:C3:52:1A:9E:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247/8d362f35-04d9-3f31-a4ef-d566ab39ebe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247/c487dbf3-3b16-4d19-9025-e64b6f47a247.crl

            X509v3 Authority Key Identifier:
                keyid:85:15:99:42:C3:72:B2:77:FC:D2:81:6C:46:72:C3:65:2D:B7:81:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:39:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:e9:7e:1b:a2:dc:39:9b:3a:73:63:38:e1:75:84:59:c0:13:
         82:68:2a:1f:ed:ee:f0:99:3d:89:cf:fd:15:89:06:aa:39:d2:
         12:4d:93:f0:2e:56:de:7d:78:c6:05:e7:58:ec:c5:de:54:c3:
         79:a3:03:1a:ee:43:31:06:b2:cd:01:1c:ae:6c:3e:4e:69:ad:
         15:34:62:67:f4:52:e4:f5:06:49:84:f9:74:48:c8:5b:8d:47:
         fa:db:1e:89:11:9d:11:96:d7:26:c8:d4:c1:26:72:8c:a6:0e:
         bc:a9:7b:84:5a:ef:04:bc:01:41:a9:c6:ca:69:18:d9:42:1c:
         d3:50:77:ee:e3:6d:a0:e9:19:6c:e4:cb:f5:a2:02:9c:8d:2e:
         b4:08:17:a8:5e:0d:15:27:1e:b1:db:4c:3a:b3:33:2a:4d:7c:
         90:0c:be:0c:f9:d1:db:71:34:d2:40:11:ca:36:aa:f3:e4:a8:
         55:25:1c:a0:59:7c:1f:00:f7:dd:18:b2:e3:2f:e7:d1:13:0b:
         38:89:16:fc:c7:69:5c:7c:72:14:50:c4:d5:79:7d:8a:6f:3c:
         67:1b:3a:6a:20:f3:b6:2f:71:de:0a:6c:8d:5a:47:84:e3:81:
         f0:09:8f:f5:6b:48:fb:ce:1e:fb:ad:f7:5e:d6:c6:42:af:f5:
         02:fd:eb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----