Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/04be6b47-089e-37ad-b58e-77d1c77f54f0.roa
File:                     04be6b47-089e-37ad-b58e-77d1c77f54f0.roa (raw, json)
Hash identifier:          wVPcYMgIUW/5YkGAcVP38zXZtkjqO76diS6p5imkzlw=
Subject key identifier:   00:A1:C0:EB:44:CB:BD:56:E1:5C:31:3E:25:B9:82:0A:E3:AE:18:92
Certificate issuer:       /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial:       010D0C9F432858437D668BA179D4920B3452A2EE
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/04be6b47-089e-37ad-b58e-77d1c77f54f0.roa
Signing time:             Mon 09 Oct 2023 06:14:52 +0000
ROA not before:           Mon 09 Oct 2023 06:14:52 +0000
ROA not after:            Sun 07 Jan 2024 07:14:52 +0000
asID:                     403
IP address blocks:        2602:fa2e:a97:402::/63 maxlen: 63

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:7d:66:8b:a1:79:d4:92:0b:34:52:a2:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
        Validity
            Not Before: Oct  9 06:14:52 2023 GMT
            Not After : Jan  7 07:14:52 2024 GMT
        Subject: CN=71052f05-6455-41d7-9fdc-2ff7e31d44e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9f:a3:87:36:ea:b9:49:bd:b4:f0:f3:a5:3f:
                    89:2a:6c:44:9c:79:65:f4:05:d1:6f:6e:89:e4:02:
                    1f:83:1a:53:62:be:a4:96:c5:9c:82:f7:e7:23:25:
                    e0:48:7f:ea:0a:99:89:53:bb:89:a0:18:17:57:cd:
                    56:13:53:3d:39:67:2f:4a:06:41:07:6d:2c:20:87:
                    03:ca:5a:72:98:c5:bd:02:2c:11:b2:ac:f1:9c:32:
                    70:88:00:2e:ca:d2:6e:09:a1:d2:3b:f4:52:b4:c1:
                    f3:4b:be:1a:d4:61:d1:76:42:73:ab:e2:fc:ea:df:
                    60:7c:f0:0e:dc:73:42:b4:16:8d:5f:e1:ff:0b:33:
                    fc:50:1d:5c:2e:2e:67:f8:9b:63:e2:48:59:44:75:
                    6e:97:ae:c0:a9:f4:2d:20:96:59:8c:be:2b:3f:f6:
                    71:bc:49:dd:5c:94:fe:db:4f:d3:67:97:d2:f6:3e:
                    c9:88:ae:cd:cf:86:ee:9a:54:7a:28:06:3a:ac:65:
                    14:68:6a:cd:e8:9a:0f:40:90:85:33:c3:b4:f9:89:
                    37:eb:de:41:bb:82:7a:9d:01:78:9e:87:53:6d:ed:
                    7b:ed:24:8c:75:ea:6a:76:d1:64:30:d3:f3:c0:ef:
                    65:52:d9:f7:49:19:8c:61:59:0c:50:1c:4c:aa:f7:
                    1b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A1:C0:EB:44:CB:BD:56:E1:5C:31:3E:25:B9:82:0A:E3:AE:18:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/04be6b47-089e-37ad-b58e-77d1c77f54f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl

            X509v3 Authority Key Identifier:
                keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa2e:a97:402::/63

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:b2:07:3a:ce:d4:97:0d:b4:bc:05:4c:9d:a4:94:c9:26:4c:
         c3:ed:de:99:51:24:22:db:dc:08:60:0a:d1:c6:12:3c:7e:5c:
         01:9c:80:b8:3b:24:fe:f0:30:8a:83:c1:f7:80:4d:e9:77:53:
         97:93:91:7d:89:cc:de:ed:c2:73:f4:7d:fa:89:75:48:37:9b:
         c7:8b:68:ec:a4:3a:11:25:41:10:ba:64:ee:e1:5a:81:55:0d:
         17:6d:a3:ae:e0:82:26:f5:25:be:d2:cd:5c:f7:bb:09:3d:7b:
         a1:c7:d6:81:24:e4:90:13:8b:81:94:dd:67:ce:fa:17:68:88:
         8b:48:73:30:57:33:58:a4:c4:73:40:9f:3c:df:74:9a:38:9b:
         a7:4b:61:20:72:9b:72:a0:84:7f:0d:11:12:65:b5:2c:9b:66:
         29:a0:dd:54:e0:1d:a0:c4:7e:3e:65:ae:64:eb:d6:88:31:01:
         40:f3:06:7d:bc:cd:cc:7e:8b:79:ee:25:cd:cd:70:16:a1:9a:
         47:67:d2:79:ef:b6:56:b3:41:19:c9:ae:d7:98:4d:52:5a:7a:
         ea:85:c8:94:e6:b0:74:65:32:90:86:90:4a:da:bc:2c:40:fc:
         14:e9:28:a1:0a:cc:18:6d:72:74:bc:c4:e5:0d:1b:db:fd:45:
         ab:99:de:00
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEN9ZouhedSSCzRSou4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWY5ODMyMDctODA3My00MmFmLTg4ZWUtZGY0OTAyYzhh
ZGFmMB4XDTIzMTAwOTA2MTQ1MloXDTI0MDEwNzA3MTQ1MlowLzEtMCsGA1UEAxMk
NzEwNTJmMDUtNjQ1NS00MWQ3LTlmZGMtMmZmN2UzMWQ0NGUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ+jhzbquUm9tPDzpT+JKmxEnHll9AXRb26J
5AIfgxpTYr6klsWcgvfnIyXgSH/qCpmJU7uJoBgXV81WE1M9OWcvSgZBB20sIIcD
ylpymMW9AiwRsqzxnDJwiAAuytJuCaHSO/RStMHzS74a1GHRdkJzq+L86t9gfPAO
3HNCtBaNX+H/CzP8UB1cLi5n+Jtj4khZRHVul67AqfQtIJZZjL4rP/ZxvEndXJT+
20/TZ5fS9j7JiK7Nz4bumlR6KAY6rGUUaGrN6JoPQJCFM8O0+Yk3695Bu4J6nQF4
nodTbe177SSMdepqdtFkMNPzwO9lUtn3SRmMYVkMUBxMqvcbRQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFAChwOtEy71W4VwxPiW5ggrjrhiSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85Zjk4
MzIwNy04MDczLTQyYWYtODhlZS1kZjQ5MDJjOGFkYWYvMDRiZTZiNDctMDg5ZS0z
N2FkLWI1OGUtNzdkMWM3N2Y1NGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWY5ODMyMDctODA3My00MmFmLTg4
ZWUtZGY0OTAyYzhhZGFmLzlmOTgzMjA3LTgwNzMtNDJhZi04OGVlLWRmNDkwMmM4
YWRhZi5jcmwwHwYDVR0jBBgwFoAUwyy5+3oif0oFHkqZqPtujWhZyqEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85Zjk4MzIwNy04MDczLTQyYWYtODhlZS1kZjQ5
MDJjOGFkYWYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkBJgL6LgqX
BAIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAbLIHOs7Ulw20vAVMnaSUySZMw+3emVEkItvcCGAK0cYSPH5c
AZyAuDsk/vAwioPB94BN6XdTl5ORfYnM3u3Cc/R9+ol1SDebx4to7KQ6ESVBELpk
7uFagVUNF22jruCCJvUlvtLNXPe7CT17ocfWgSTkkBOLgZTdZ876F2iIi0hzMFcz
WKTEc0CfPN90mjibp0thIHKbcqCEfw0REmW1LJtmKaDdVOAdoMR+PmWuZOvWiDEB
QPMGfbzNzH6Lee4lzc1wFqGaR2fSee+2VrNBGcmu15hNUlp66oXIlOawdGUykIaQ
Stq8LED8FOkooQrMGG1ydLzE5Q0b2/1Fq5neAA==
-----END CERTIFICATE-----