Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/40b61994-b66b-3f7c-8892-6e45811ae8d4.roa
File:                     40b61994-b66b-3f7c-8892-6e45811ae8d4.roa (raw, json)
Hash identifier:          f4K/ALkTl5Ny2rciAY60xbU6XFNLIvBCJCYicGVLlhk=
Subject key identifier:   51:5F:76:48:54:95:43:95:D6:1C:E3:E0:65:C7:03:24:C0:E7:DB:5D
Certificate issuer:       /CN=9531f556-030e-49b4-a31b-60b469425432
Certificate serial:       010D0C9F43285842C3DE0EFDE353E7E18FFFAF40
Authority key identifier: 4E:A2:50:27:DE:23:09:65:81:B1:7D:37:DE:80:5E:05:7C:08:BC:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/40b61994-b66b-3f7c-8892-6e45811ae8d4.roa
Signing time:             Thu 03 Aug 2023 19:15:19 +0000
ROA not before:           Thu 03 Aug 2023 19:15:19 +0000
ROA not after:            Wed 01 Nov 2023 19:15:19 +0000
asID:                     8075
IP address blocks:        2620:bc:2000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:c3:de:0e:fd:e3:53:e7:e1:8f:ff:af:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9531f556-030e-49b4-a31b-60b469425432
        Validity
            Not Before: Aug  3 19:15:19 2023 GMT
            Not After : Nov  1 19:15:19 2023 GMT
        Subject: CN=667cb3cc-5be5-48dc-ba15-ec7faf6dfac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8b:fe:80:3c:41:d8:39:d4:47:c5:01:84:8c:
                    59:c7:e6:dc:75:9f:f1:31:82:e7:88:ac:66:3f:48:
                    65:a4:74:7f:40:ea:41:66:3c:7a:5e:c8:bb:97:3f:
                    f6:f8:4c:ac:53:f2:9b:e3:84:19:73:ef:b3:88:aa:
                    2f:45:06:71:c5:62:21:ec:36:96:d3:4e:42:3f:d9:
                    84:05:c3:62:c6:ee:74:e1:35:fc:a8:8d:03:fe:ce:
                    c3:1a:de:4f:ee:91:ec:f0:b4:03:69:5b:89:cb:05:
                    53:9f:bc:92:8f:2a:0d:05:c6:c2:b7:50:ad:dc:e6:
                    91:39:ef:bd:f1:e1:9d:37:af:a6:9f:f9:be:ca:e4:
                    3c:15:81:bd:e2:b7:45:87:39:5d:1a:8e:33:7a:58:
                    3a:ef:ce:2e:ea:c5:ab:3a:69:1a:3f:32:2c:1f:af:
                    77:79:4c:8d:56:0d:c3:26:c8:a8:21:84:92:c0:ef:
                    ce:3c:1f:39:da:cc:e7:d3:24:55:3c:8a:78:fb:fb:
                    42:be:9e:08:18:53:b0:4c:fe:b9:a5:0c:c9:68:e4:
                    49:b5:02:6f:6e:87:56:48:1b:ae:d1:e9:76:e0:85:
                    3b:c2:c4:a6:a7:cb:54:cc:bd:bf:58:47:20:ce:18:
                    72:a7:a4:3c:1a:64:2d:66:2f:eb:f6:c0:fc:17:f0:
                    e7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5F:76:48:54:95:43:95:D6:1C:E3:E0:65:C7:03:24:C0:E7:DB:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/40b61994-b66b-3f7c-8892-6e45811ae8d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/9531f556-030e-49b4-a31b-60b469425432.crl

            X509v3 Authority Key Identifier:
                keyid:4E:A2:50:27:DE:23:09:65:81:B1:7D:37:DE:80:5E:05:7C:08:BC:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:bc:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:00:9b:16:97:ea:ea:9d:ae:8d:9a:88:e6:0e:67:08:c6:e6:
         67:83:e9:83:be:0f:b6:c2:1e:a0:37:fd:01:5f:89:82:5d:dc:
         d1:56:85:31:3e:d4:2d:16:e5:8f:fe:74:76:d1:f1:c5:3a:56:
         df:32:b3:5c:ae:92:d0:dc:0c:a7:e3:41:93:5f:48:80:0a:ae:
         d9:12:e9:4e:86:e9:28:9f:74:2c:ec:71:41:f4:e2:c7:97:61:
         38:a7:44:89:d1:78:05:d0:f4:55:db:75:16:40:f1:d7:67:55:
         6b:88:7f:c1:8c:c2:d4:af:8b:59:09:05:43:65:80:6f:e6:75:
         d8:3d:d4:45:46:08:09:f1:69:00:90:99:bd:75:0f:2d:4b:97:
         4d:0e:52:1f:08:93:5d:c6:52:97:87:53:53:dc:cb:0f:00:50:
         ed:50:0b:8c:8c:c0:23:be:00:2f:39:e0:31:fe:99:c5:f0:de:
         ab:ce:9b:c3:39:46:65:f1:0e:04:5e:92:d3:95:ec:06:be:8c:
         2a:ba:7b:2f:51:82:9c:56:96:2d:7a:1a:27:5b:48:29:5f:95:
         c8:87:6d:f9:1b:bf:61:d1:ce:10:bb:0b:6d:d5:06:f0:61:65:
         a2:36:32:3d:42:0e:77:4a:0f:7b:05:f3:bc:54:2c:ea:5c:6f:
         3c:48:ea:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 15 12:42:16 2023 by rpki-client on console-fra.rpki-client.org