Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/1acf4934-0fff-3751-94a0-51b9fb659268.roa
File:                     1acf4934-0fff-3751-94a0-51b9fb659268.roa (raw, json)
Hash identifier:          D1cTqnRrKCWO78n2mh40NGIdagyPamvE8pW6ZDz/f7w=
Subject key identifier:   A4:B7:83:65:F0:B0:58:6A:0C:D6:3D:50:B0:B6:10:06:F6:55:57:A7
Certificate issuer:       /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7
Certificate serial:       010D0C9F4328583DEF91BA47C0203D5D8E5F7100
Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/1acf4934-0fff-3751-94a0-51b9fb659268.roa
Signing time:             Tue 17 May 2022 18:28:55 +0000
ROA not before:           Tue 17 May 2022 18:28:55 +0000
ROA not after:            Mon 19 Aug 2024 04:00:00 +0000
asID:                     398419
IP address blocks:        2602:fb82::/36 maxlen: 48

Validation:               Failed, certificate revoked on Fri 17 Jun 2022 17:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ef:91:ba:47:c0:20:3d:5d:8e:5f:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7
        Validity
            Not Before: May 17 18:28:55 2022 GMT
            Not After : Aug 19 04:00:00 2024 GMT
        Subject: CN=40ed2a05-1842-4bdd-82f3-76bbc7f81771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:53:40:1f:43:a7:d4:4d:2a:4c:ca:c9:2b:24:
                    4b:61:53:b0:11:b6:b1:d8:23:a8:37:ae:f9:5e:2a:
                    06:24:82:07:2f:8b:2e:f6:73:7e:dc:e2:45:cb:67:
                    1e:f9:c6:90:f8:2b:d5:95:95:e3:bf:46:d2:b0:13:
                    40:3c:8a:1c:61:5b:5f:06:1d:7c:ab:41:ea:54:cd:
                    16:a4:f8:d3:37:ef:83:53:44:cf:73:fb:51:80:7b:
                    08:e2:27:78:f4:9b:2a:48:01:2e:c8:36:55:05:ca:
                    ec:09:23:c1:d5:6b:40:a2:b7:15:9a:3d:34:48:d6:
                    b7:5c:3e:cb:d4:06:42:8c:c9:58:bc:de:36:59:27:
                    91:b1:54:08:84:5b:f5:ad:70:96:a7:5f:19:ff:e1:
                    ca:1c:06:da:2b:50:4e:92:aa:c5:33:6f:f5:36:31:
                    e9:a1:6b:cd:d9:b9:53:f5:1a:e0:18:61:06:80:70:
                    88:a5:08:73:a1:58:d0:4e:ca:dc:64:33:77:bf:97:
                    d6:d4:fd:50:8e:e8:c4:91:6e:63:c4:54:c2:c0:71:
                    5f:c9:17:1e:0e:24:d1:b6:c6:38:6c:eb:c5:4c:f2:
                    34:f7:98:75:5a:b2:9a:13:99:08:32:c8:0f:e5:ea:
                    b6:86:31:5c:c0:b8:49:e2:a2:e7:5d:cd:c2:80:2c:
                    5c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B7:83:65:F0:B0:58:6A:0C:D6:3D:50:B0:B6:10:06:F6:55:57:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/1acf4934-0fff-3751-94a0-51b9fb659268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl

            X509v3 Authority Key Identifier:
                keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb82::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:2e:d8:d5:a6:f9:09:ee:58:7b:1f:df:c7:e1:cf:68:c4:94:
         48:5b:bf:40:e1:7f:a5:ba:ed:4a:6b:3c:62:ba:49:fe:c6:3f:
         0d:83:80:fa:9d:01:ea:ae:2f:c9:0d:4b:22:da:25:f2:55:cf:
         49:00:d6:22:68:6a:c2:e6:f2:db:ff:f7:35:69:23:9a:fe:b1:
         57:fd:22:2e:e8:cf:a5:d8:47:dc:eb:cf:94:c5:89:70:5d:00:
         fd:5f:d1:b9:67:f8:54:37:09:b4:ee:96:59:27:c6:2a:9d:37:
         9e:fa:80:e0:3a:d2:7e:ff:15:87:5f:e5:93:6e:81:6c:e2:d5:
         df:1b:eb:1e:bc:aa:5e:79:30:3f:da:77:c2:6b:f8:47:27:9d:
         18:6c:c3:d2:70:57:ae:20:e1:8b:a1:63:94:de:b7:17:ab:c7:
         75:21:91:63:d3:7d:b5:9e:e1:46:ce:ab:8b:83:5f:75:d4:51:
         d7:cb:0c:2b:23:f4:89:02:c1:7b:e1:68:30:22:92:e2:41:60:
         d5:1c:d1:ba:ea:b2:59:ae:ca:79:3a:7b:89:79:58:31:2f:c1:
         7a:60:db:99:12:6d:a8:4e:11:57:84:b6:60:bd:3a:40:87:f8:
         57:c5:dd:23:92:e1:2e:46:bf:c6:7a:06:13:2d:de:25:dc:2d:
         b0:c9:7a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----