Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/c1be3836-4020-391c-a77c-4a3ec7c44a42.roa
File:                     c1be3836-4020-391c-a77c-4a3ec7c44a42.roa (raw, json)
Hash identifier:          FIzvVoMP6cB0vcY2bRpsfP7BFHkATyK2FphWKNggVu8=
Subject key identifier:   4B:5E:D0:97:A3:0D:17:C7:24:B3:2D:FA:EB:1F:35:28:EC:BC:3C:2A
Certificate issuer:       /CN=138beb7a-6a99-47ad-a8e7-50bb4d24b667
Certificate serial:       010D0C9F4328584299B22405F3C8262415C14100
Authority key identifier: FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/c1be3836-4020-391c-a77c-4a3ec7c44a42.roa
Signing time:             Wed 19 Jul 2023 16:42:52 +0000
ROA not before:           Wed 19 Jul 2023 16:42:52 +0000
ROA not after:            Tue 17 Oct 2023 16:42:52 +0000
asID:                     397702
IP address blocks:        2607:46c0:509::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:99:b2:24:05:f3:c8:26:24:15:c1:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=138beb7a-6a99-47ad-a8e7-50bb4d24b667
        Validity
            Not Before: Jul 19 16:42:52 2023 GMT
            Not After : Oct 17 16:42:52 2023 GMT
        Subject: CN=f66ba4a2-0980-47a7-8b2f-7b55df451aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e9:db:dc:68:f0:cc:ec:15:d9:60:f1:cc:ad:
                    48:bf:97:de:4e:6e:56:0e:52:a0:26:62:1f:0d:6a:
                    cf:89:31:19:b8:41:d3:28:3a:3c:18:6f:9e:4f:81:
                    67:ef:be:9b:d8:f2:9f:42:36:b0:9c:6f:73:03:e3:
                    6d:61:bd:6f:25:14:7d:d5:e0:a9:9e:36:35:8d:ef:
                    70:09:47:d8:7e:31:15:8a:63:bb:6e:14:94:53:b8:
                    3f:ea:04:07:97:b0:37:c3:f1:27:8d:24:4e:92:31:
                    c2:fe:b4:c4:f3:67:36:3c:03:8b:8b:63:9b:2b:88:
                    35:d3:52:81:ff:cb:d9:91:b6:59:58:78:cd:12:51:
                    fa:c5:a0:ee:e6:14:87:62:4d:6f:43:46:ae:55:e7:
                    8b:53:24:2b:e3:3c:d6:b0:fe:a7:89:b8:c4:c1:fc:
                    c8:01:85:b1:3d:ac:0b:09:4c:9d:39:81:75:1d:c6:
                    46:6e:63:de:82:fe:1b:d7:8a:50:a5:1e:1b:a5:07:
                    a9:2e:b9:17:54:92:d7:06:c0:09:00:11:13:2a:5a:
                    7f:da:74:fb:42:49:13:a3:1e:5a:64:e9:5b:02:6d:
                    11:ef:18:0c:c1:da:c7:2e:95:22:92:97:53:af:f4:
                    05:5d:8b:61:32:82:bd:7c:b0:8a:59:0d:c0:a3:9b:
                    78:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5E:D0:97:A3:0D:17:C7:24:B3:2D:FA:EB:1F:35:28:EC:BC:3C:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/c1be3836-4020-391c-a77c-4a3ec7c44a42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.crl

            X509v3 Authority Key Identifier:
                keyid:FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:46c0:509::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:da:76:2a:97:ea:b8:4d:55:4d:b6:eb:46:b8:65:1b:1c:db:
         8b:4e:3b:6d:d1:7c:96:d4:6a:c4:0d:c4:2c:16:7d:67:03:b3:
         40:31:7d:5f:57:4a:76:b5:b6:c7:1c:5c:37:de:02:b8:48:49:
         06:8f:70:5e:56:1a:69:63:b4:b9:d2:b5:35:61:36:eb:a9:51:
         8e:39:f3:ad:4d:ae:e4:23:f2:e2:cd:be:13:ae:f8:be:03:e3:
         ed:e2:1c:ff:8a:98:ef:9d:85:24:56:7e:6e:11:19:74:5b:95:
         3f:88:d9:f5:af:92:48:a5:f2:bc:5c:62:bd:c8:cf:67:8b:60:
         e1:7f:69:7f:02:3e:ae:e5:dc:43:ac:54:9e:70:95:a8:3e:42:
         d2:75:05:cb:82:35:b4:5b:af:ef:01:c2:c3:2e:74:ec:43:2d:
         7d:91:f5:5e:2d:26:90:9e:10:20:f5:71:e3:24:13:45:bd:da:
         a3:41:a0:8f:f0:2f:ff:e2:ef:9b:f6:e8:f6:67:b4:93:ca:55:
         ad:7b:48:a8:90:bf:46:58:14:27:ff:e6:3e:01:3d:d1:f6:6b:
         b5:2d:70:94:9e:4d:e2:d2:d5:2b:5e:ea:06:70:41:49:7b:28:
         bb:63:fc:d8:ce:87:51:0d:62:e4:98:fc:93:36:a2:f8:8b:86:
         5a:8b:9b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----