Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0be2bb82-bb63-3c91-bef6-25d36afcfe81.roa
File:                     0be2bb82-bb63-3c91-bef6-25d36afcfe81.roa (raw, json)
Hash identifier:          jxo0vc921YPILMoIGqUjPTl7hPPD4nfcMPFcPJMKADs=
Subject key identifier:   1F:BB:7A:89:8F:4C:52:43:29:4B:7A:72:D2:E2:9F:5D:7E:29:6E:EE
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584316E49E88BD51310FBDF22FC0
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0be2bb82-bb63-3c91-bef6-25d36afcfe81.roa
Signing time:             Sat 02 Sep 2023 13:00:30 +0000
ROA not before:           Sat 02 Sep 2023 13:00:30 +0000
ROA not after:            Fri 01 Dec 2023 14:00:30 +0000
asID:                     16839
IP address blocks:        2606:3600::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:16:e4:9e:88:bd:51:31:0f:bd:f2:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Sep  2 13:00:30 2023 GMT
            Not After : Dec  1 14:00:30 2023 GMT
        Subject: CN=dc45ad09-b7ef-48ce-aaa5-b65d10f59c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:44:1a:05:32:96:40:5a:f1:c6:d0:9c:41:3a:
                    e3:5c:ab:51:46:f7:ac:69:76:c2:9f:d9:64:d4:9b:
                    c4:2d:7d:a1:13:d0:70:4a:96:05:d7:fb:8e:8f:1c:
                    fb:18:4e:9d:1d:ae:52:1a:f9:7e:e4:be:68:42:13:
                    84:32:f4:a3:24:09:ed:eb:a9:b0:99:c3:7f:c3:c8:
                    8f:32:4f:7c:30:cd:50:c0:83:b4:77:c1:a8:b4:19:
                    94:8f:92:65:2d:63:1b:3c:c0:1b:cc:64:22:cf:c3:
                    33:9a:5c:e3:54:98:09:24:8c:f2:31:15:0f:ad:96:
                    f2:39:47:63:7e:ca:23:c9:63:0c:19:e1:a8:98:a5:
                    38:90:fa:da:67:a5:08:f5:1a:31:69:15:d6:84:de:
                    de:7c:b1:3e:ad:3b:42:28:b6:02:9b:0a:c4:d8:00:
                    e1:a3:07:4e:34:98:0c:bf:2d:74:b3:d7:20:f3:44:
                    60:5d:fb:f2:77:9f:5d:96:ea:9b:91:49:6c:46:b0:
                    b9:a6:5e:ec:c0:dc:a3:76:6b:14:6d:b4:de:43:f9:
                    33:84:76:46:43:3e:1f:22:25:01:bb:da:c3:8a:07:
                    77:de:11:6c:49:07:95:2c:52:21:08:ab:b2:c3:cf:
                    4c:a1:84:68:5e:c1:a7:ed:c3:eb:39:c7:be:07:79:
                    fd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BB:7A:89:8F:4C:52:43:29:4B:7A:72:D2:E2:9F:5D:7E:29:6E:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0be2bb82-bb63-3c91-bef6-25d36afcfe81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3600::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:00:4f:57:68:12:59:0c:39:c3:a8:65:d5:8b:51:46:7c:bc:
         a1:6f:07:bb:44:f8:d0:cf:35:84:56:1e:d2:2d:c1:7e:0c:92:
         ff:a0:f2:d6:26:d8:32:ec:25:cb:bc:dc:d3:cc:71:76:39:f6:
         d7:bd:fd:f1:3b:ca:8e:86:3a:af:93:11:39:9d:2c:d2:3a:58:
         79:20:87:f1:f8:87:34:41:9b:37:3c:7e:f7:1b:a2:74:55:d8:
         96:d0:82:07:5b:54:f5:7c:47:80:bb:32:62:49:84:33:2e:d6:
         42:96:41:6b:22:f4:59:c6:4a:17:6e:3e:1e:84:55:74:a2:93:
         aa:13:f6:ec:d3:0e:90:18:a0:ff:77:af:a3:d8:89:4c:cf:d7:
         12:ff:8c:2b:f6:de:b0:aa:eb:61:bc:18:ae:57:f6:0c:2b:1c:
         03:7e:02:e4:23:60:ac:56:bd:0f:ae:54:34:0e:3b:0a:11:84:
         00:b8:ea:5e:bf:ea:0c:58:57:65:6f:2c:91:3a:f4:9c:df:b3:
         e7:ea:ae:a7:0e:f1:6d:03:0a:9d:22:46:94:8e:0e:46:44:e4:
         09:c7:fa:dc:29:9b:fc:ea:9b:34:c0:4d:ff:7c:12:0f:8e:5e:
         51:9f:87:15:26:97:34:06:00:5e:a9:11:a7:ad:be:f7:6b:f5:
         25:1c:aa:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----