Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/029a772b-4c55-3bcd-9746-b979ea440ec5.roa
File:                     029a772b-4c55-3bcd-9746-b979ea440ec5.roa (raw, json)
Hash identifier:          Ce3ASJqD7j/48pzGFpaMe/AkOP4Hvpj+tsBAdbCX/zs=
Subject key identifier:   05:7D:E8:F3:9C:32:29:40:B2:0A:DA:8A:15:28:0D:C0:3E:48:91:A2
Certificate issuer:       /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial:       010D0C9F4328584309CE4D5DCB49ABB01C280080
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/029a772b-4c55-3bcd-9746-b979ea440ec5.roa
Signing time:             Mon 28 Aug 2023 20:30:09 +0000
ROA not before:           Mon 28 Aug 2023 20:30:09 +0000
ROA not after:            Sun 26 Nov 2023 21:30:09 +0000
asID:                     53416
IP address blocks:        2620:bd:a000::/48 maxlen: 52

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ce:4d:5d:cb:49:ab:b0:1c:28:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
        Validity
            Not Before: Aug 28 20:30:09 2023 GMT
            Not After : Nov 26 21:30:09 2023 GMT
        Subject: CN=f394f31a-fa3a-4366-9b96-2969d9a3f34f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:52:e8:a2:0c:1e:f3:21:66:a5:af:e4:04:f3:
                    14:bd:93:77:ce:fc:c5:37:ec:bf:01:e7:dd:e4:4c:
                    ab:00:83:a2:50:bf:51:99:52:bd:5f:43:58:18:35:
                    e7:37:ce:2e:7e:28:e6:20:46:50:11:7f:a3:19:19:
                    2e:fd:41:53:9d:9c:7e:fd:a7:f7:15:11:87:08:2d:
                    d5:63:16:34:e3:09:bc:1b:a7:8d:26:41:b0:1e:43:
                    53:09:21:b9:28:a3:bf:2d:83:90:f6:c9:38:c4:a7:
                    11:2c:e1:68:b1:a4:20:63:38:48:5b:97:e9:f2:23:
                    16:51:63:1f:4f:31:07:9e:42:67:56:e2:4e:16:9f:
                    e8:7b:de:93:a4:ea:96:c5:1e:02:6a:53:9c:92:c5:
                    99:a1:89:8e:4f:00:c7:a5:67:e5:46:dd:15:1c:36:
                    4e:63:06:f5:bc:b3:d3:9a:06:9d:6f:f7:2b:af:be:
                    e7:58:34:a7:08:dd:ad:a0:6d:a1:28:28:53:48:4f:
                    eb:4e:02:44:fe:6a:38:92:a9:58:07:7a:77:30:66:
                    3c:2b:f7:92:22:28:bf:e7:35:86:1c:99:89:4f:a6:
                    95:33:57:28:82:5e:58:bb:ff:bd:ca:ad:79:36:7a:
                    63:6c:78:2f:18:5c:d1:dc:ec:93:38:4b:72:b1:9e:
                    c2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7D:E8:F3:9C:32:29:40:B2:0A:DA:8A:15:28:0D:C0:3E:48:91:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/029a772b-4c55-3bcd-9746-b979ea440ec5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl

            X509v3 Authority Key Identifier:
                keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:bd:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:3a:49:53:f0:c1:c8:7a:81:4d:05:b2:7d:bf:d6:77:85:d6:
         27:7a:20:ff:ba:dc:63:36:94:f3:33:4f:e4:8b:99:45:51:82:
         66:6b:75:21:ae:6e:ca:32:89:db:60:2b:84:19:7d:95:e9:1c:
         ed:09:c3:5b:6f:9f:26:9a:dd:c7:e5:3a:1d:ff:e3:45:89:2f:
         7c:7f:b8:2c:c7:ae:40:80:03:27:c9:ac:16:03:8d:3d:48:07:
         46:db:0e:4c:ae:b2:62:03:6f:92:4b:4d:92:62:d2:81:3e:bf:
         a2:04:90:2a:f0:96:bd:ae:0a:88:d6:8b:ed:0b:74:ec:ac:87:
         a0:1d:bc:56:58:f1:d3:12:9c:e5:61:90:9c:a1:22:c2:db:64:
         d5:d4:4e:e6:a9:c7:96:a7:e7:d5:3c:22:86:6a:44:ec:94:28:
         42:02:bc:e5:06:aa:8c:f1:e9:a7:09:aa:9b:b3:76:af:7e:21:
         fc:4f:77:56:3f:54:8f:e4:8b:e4:ea:5a:87:39:ac:e5:0b:c5:
         69:01:a1:f8:fa:ee:ed:45:de:c7:13:8a:a4:80:4e:9c:ce:cc:
         8d:d3:5f:43:25:59:92:ff:89:28:60:72:9a:6a:00:98:c5:be:
         e0:6f:5d:65:df:95:47:67:74:64:9d:26:b5:c9:13:a8:f1:d3:
         d3:af:06:ed
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEMJzk1dy0mrsBwoAIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWY5ODMyMDctODA3My00MmFmLTg4ZWUtZGY0OTAyYzhh
ZGFmMB4XDTIzMDgyODIwMzAwOVoXDTIzMTEyNjIxMzAwOVowLzEtMCsGA1UEAxMk
ZjM5NGYzMWEtZmEzYS00MzY2LTliOTYtMjk2OWQ5YTNmMzRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1Loogwe8yFmpa/kBPMUvZN3zvzFN+y/Aefd
5EyrAIOiUL9RmVK9X0NYGDXnN84ufijmIEZQEX+jGRku/UFTnZx+/af3FRGHCC3V
YxY04wm8G6eNJkGwHkNTCSG5KKO/LYOQ9sk4xKcRLOFosaQgYzhIW5fp8iMWUWMf
TzEHnkJnVuJOFp/oe96TpOqWxR4CalOcksWZoYmOTwDHpWflRt0VHDZOYwb1vLPT
mgadb/crr77nWDSnCN2toG2hKChTSE/rTgJE/mo4kqlYB3p3MGY8K/eSIii/5zWG
HJmJT6aVM1cogl5Yu/+9yq15NnpjbHgvGFzR3OyTOEtysZ7CpwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAV96POcMilAsgraihUoDcA+SJGiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85Zjk4
MzIwNy04MDczLTQyYWYtODhlZS1kZjQ5MDJjOGFkYWYvMDI5YTc3MmItNGM1NS0z
YmNkLTk3NDYtYjk3OWVhNDQwZWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWY5ODMyMDctODA3My00MmFmLTg4
ZWUtZGY0OTAyYzhhZGFmLzlmOTgzMjA3LTgwNzMtNDJhZi04OGVlLWRmNDkwMmM4
YWRhZi5jcmwwHwYDVR0jBBgwFoAUwyy5+3oif0oFHkqZqPtujWhZyqEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85Zjk4MzIwNy04MDczLTQyYWYtODhlZS1kZjQ5
MDJjOGFkYWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAvaAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACE6SVPwwch6gU0Fsn2/1neF1id6IP+63GM2lPMzT+SLmUVRgmZr
dSGubsoyidtgK4QZfZXpHO0Jw1tvnyaa3cflOh3/40WJL3x/uCzHrkCAAyfJrBYD
jT1IB0bbDkyusmIDb5JLTZJi0oE+v6IEkCrwlr2uCojWi+0LdOysh6AdvFZY8dMS
nOVhkJyhIsLbZNXUTuapx5an59U8IoZqROyUKEICvOUGqozx6acJqpuzdq9+IfxP
d1Y/VI/ki+TqWoc5rOULxWkBofj67u1F3scTiqSATpzOzI3TX0MlWZL/iShgcppq
AJjFvuBvXWXflUdndGSdJrXJE6jx09OvBu0=
-----END CERTIFICATE-----