Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/85c72f8d-e4e5-362c-8c11-e754c4cf38c3.roa
File:                     85c72f8d-e4e5-362c-8c11-e754c4cf38c3.roa (raw, json)
Hash identifier:          hthMZdgtjgQcXRwzHEHbiVBBaR8+KQWqKm00YVatFR8=
Subject key identifier:   59:A4:D1:74:50:B9:E6:C2:D3:8D:BB:59:EF:3F:02:91:24:F4:CE:42
Certificate issuer:       /CN=eaf7df35-c67f-440d-9799-461e7a809ef3
Certificate serial:       010D0C9F4328583DD7C401D8E0B281B24C5F1E00
Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/85c72f8d-e4e5-362c-8c11-e754c4cf38c3.roa
Signing time:             Thu 05 May 2022 14:07:47 +0000
ROA not before:           Thu 05 May 2022 14:07:47 +0000
ROA not after:            Wed 05 May 2032 04:00:00 +0000
asID:                     62856
IP address blocks:        2620:130:f000::/44 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d7:c4:01:d8:e0:b2:81:b2:4c:5f:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3
        Validity
            Not Before: May  5 14:07:47 2022 GMT
            Not After : May  5 04:00:00 2032 GMT
        Subject: CN=f28d04b8-6fbf-42b7-8428-bfb7cc5a65a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d9:85:c6:5d:71:74:21:82:0e:81:a9:9d:db:
                    0f:6c:70:0b:09:c2:a4:da:f3:7e:af:6f:20:8e:ba:
                    eb:86:5f:08:9e:cb:c1:43:2d:13:d7:a0:af:a9:71:
                    29:70:f5:48:5e:dc:40:4f:0d:37:70:3e:c2:05:fd:
                    9a:45:2a:0a:8f:9f:ed:a2:d9:c0:ab:7e:59:92:fc:
                    f2:56:73:d9:fd:a6:2b:fc:6f:af:f6:1c:14:c3:9e:
                    da:ad:10:b2:1b:c5:fd:cd:a9:ea:de:64:5a:ff:53:
                    39:4f:40:4c:aa:20:90:bf:ca:86:5b:f2:74:5a:72:
                    2f:93:53:31:98:cb:e6:f7:ea:cb:b4:9e:be:8e:11:
                    dc:f0:c0:6c:84:ee:6f:18:bb:65:07:92:60:a4:8d:
                    69:2a:5f:6a:2e:d8:e4:ab:7d:e5:79:5c:e5:86:a2:
                    f6:7d:29:cb:91:10:42:1b:4e:69:68:d8:d6:c9:85:
                    a4:f3:16:b3:e2:86:4d:9f:95:58:9f:e4:6f:90:ef:
                    99:b1:ae:36:3e:a5:cb:21:49:1f:82:9f:28:34:ff:
                    60:d8:f9:67:1e:c5:f0:38:5e:24:5b:8a:cf:c3:9f:
                    14:5d:a0:ba:c3:d8:cb:d0:07:29:a9:07:47:87:5b:
                    b8:02:d0:f1:18:e0:49:33:49:5a:8b:62:73:ab:e7:
                    64:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A4:D1:74:50:B9:E6:C2:D3:8D:BB:59:EF:3F:02:91:24:F4:CE:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/85c72f8d-e4e5-362c-8c11-e754c4cf38c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl

            X509v3 Authority Key Identifier:
                keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:130:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:fa:7f:a8:8f:a8:ae:ed:fd:e8:71:40:e5:67:40:39:17:79:
         03:57:6a:9b:9b:7f:c6:d0:3d:e2:c9:6d:38:74:3f:00:d1:f8:
         89:92:a4:35:d2:ab:5f:a7:2d:b3:da:70:c0:f0:da:1e:cc:83:
         9c:7d:cf:22:a7:a2:6e:04:ad:5f:04:3b:ec:37:20:a1:ca:c0:
         6c:97:be:4a:1b:fd:76:89:26:f8:db:e4:ef:5e:46:64:d0:24:
         9b:4b:70:6a:8d:fb:dd:d8:73:c0:ce:63:d0:fe:d9:4f:48:cc:
         de:44:23:2d:7c:d3:d5:bb:6f:09:ef:80:0c:c0:dd:3f:3a:c5:
         39:8c:db:d3:c1:9b:4e:7d:d8:2c:76:f8:5c:dc:15:d8:08:ec:
         78:bd:0a:df:17:7d:e0:a4:5e:5f:f2:f7:ae:12:ef:9c:aa:e0:
         40:61:ce:80:01:eb:ca:4c:e8:70:96:35:6e:16:8d:bd:1a:97:
         1c:6c:9b:3d:34:1f:e9:1f:68:c7:c0:21:b8:a6:09:13:c2:f0:
         6d:85:07:1c:32:2e:12:2a:41:2c:ff:60:ba:bc:41:36:cc:c3:
         5c:9d:d6:fe:35:14:50:a2:6d:ff:56:45:b7:79:ec:30:26:a7:
         94:c0:99:c0:aa:9e:37:58:2c:62:d4:b7:63:06:63:54:65:4a:
         17:4c:03:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----