Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/abc86be5-9cd6-4d5e-9867-b4d57b3b5c76/f4e61ba5-28eb-3de1-a0ea-915e6ea5f3da.roa
File:                     f4e61ba5-28eb-3de1-a0ea-915e6ea5f3da.roa (raw, json)
Hash identifier:          YAf4thJ0bpez8gl0Y725ODr31FkTvczKhw+bxzc2XPY=
Subject key identifier:   62:2D:62:28:B3:9D:92:CC:C0:02:28:4A:DE:0B:66:BE:7E:7B:56:DF
Certificate issuer:       /CN=abc86be5-9cd6-4d5e-9867-b4d57b3b5c76
Certificate serial:       010D0C9F43285843B1D57AF5B64F771679181700
Authority key identifier: F9:E1:1B:A9:78:B0:19:FD:B6:8D:25:34:2D:48:D6:91:F4:BC:34:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/abc86be5-9cd6-4d5e-9867-b4d57b3b5c76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/abc86be5-9cd6-4d5e-9867-b4d57b3b5c76/f4e61ba5-28eb-3de1-a0ea-915e6ea5f3da.roa
Signing time:             Sat 28 Oct 2023 01:00:16 +0000
ROA not before:           Sat 28 Oct 2023 01:00:16 +0000
ROA not after:            Fri 26 Jan 2024 02:00:16 +0000
asID:                     23214
IP address blocks:        2620:25:6000::/48 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:b1:d5:7a:f5:b6:4f:77:16:79:18:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc86be5-9cd6-4d5e-9867-b4d57b3b5c76
        Validity
            Not Before: Oct 28 01:00:16 2023 GMT
            Not After : Jan 26 02:00:16 2024 GMT
        Subject: CN=9f23c634-794d-4651-9e3d-32f7776fcf88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5e:88:28:d7:9c:d1:52:6f:86:32:b1:fb:ce:
                    c6:2b:a6:d3:f0:2c:3f:8c:9c:9b:ea:63:d3:b0:11:
                    7b:45:07:05:4d:f3:f4:0e:66:b7:fc:51:67:89:80:
                    ea:99:42:3a:1c:49:b2:db:74:6e:21:18:a5:2c:6d:
                    e3:3f:b0:4f:0f:a3:7e:76:49:91:40:4f:a8:a7:f4:
                    e4:b3:ad:a6:aa:7c:ce:14:16:95:a3:13:6e:5c:f3:
                    ea:cb:de:e5:ec:41:cc:3c:1e:b7:04:bf:8c:b9:e4:
                    61:3e:76:0c:ca:22:44:5c:64:f7:82:75:2a:06:7c:
                    6f:3e:80:53:f4:68:25:a2:fc:9a:84:58:76:95:ae:
                    6f:60:04:c4:93:9a:ef:f6:b7:9f:b5:3f:f3:24:91:
                    56:2a:de:bc:4e:ad:66:92:bb:6c:1c:46:51:87:99:
                    61:8b:7d:58:82:6d:24:e6:19:7c:92:4c:d0:31:52:
                    ad:ce:36:3b:8f:7d:e5:92:ef:f1:8d:7b:1b:8d:a6:
                    fd:3b:bf:0e:71:1e:f4:62:3a:92:37:22:85:49:0b:
                    d6:63:0b:36:e8:75:4f:e7:a5:bd:48:39:e0:32:1f:
                    31:eb:94:c0:c5:09:f9:d3:82:3a:73:46:20:b4:38:
                    99:41:77:ba:34:9d:dd:a0:9e:09:9e:ae:f5:11:b5:
                    66:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2D:62:28:B3:9D:92:CC:C0:02:28:4A:DE:0B:66:BE:7E:7B:56:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/abc86be5-9cd6-4d5e-9867-b4d57b3b5c76/f4e61ba5-28eb-3de1-a0ea-915e6ea5f3da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/abc86be5-9cd6-4d5e-9867-b4d57b3b5c76/abc86be5-9cd6-4d5e-9867-b4d57b3b5c76.crl

            X509v3 Authority Key Identifier:
                keyid:F9:E1:1B:A9:78:B0:19:FD:B6:8D:25:34:2D:48:D6:91:F4:BC:34:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/abc86be5-9cd6-4d5e-9867-b4d57b3b5c76.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:25:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:d3:de:96:02:27:f6:c7:2b:fb:d7:3b:9c:7c:b7:82:13:31:
         69:3c:48:2f:bd:29:fd:e7:27:4c:6a:a0:64:35:ad:01:e7:3d:
         36:b6:c0:50:81:75:e6:dc:95:21:6b:cf:9f:31:67:f8:06:63:
         55:23:59:01:e3:e4:e4:1d:73:8f:36:d7:2f:86:4e:5f:c3:19:
         9f:33:99:75:5c:82:e9:01:b2:96:95:bb:eb:62:82:a7:ff:23:
         48:1c:48:c0:ba:6d:72:b1:13:d7:fd:c1:2b:49:fb:64:29:90:
         ca:63:8c:f9:72:d7:fc:00:ce:c3:c9:3d:ef:d1:c5:46:33:7f:
         f7:8b:37:6b:22:7b:52:cb:bd:f7:f9:bd:c8:82:a9:9b:7b:46:
         a6:91:e4:c8:ab:ce:99:9e:09:1c:0e:e1:30:c9:03:cc:89:53:
         75:98:9b:17:23:c5:7c:91:1b:d7:9f:db:9d:d0:01:27:21:1f:
         f7:a7:34:53:94:41:11:97:17:c7:28:57:86:11:9f:37:90:13:
         6d:2f:8d:b4:b4:f8:26:18:ca:64:64:c9:f1:9a:34:4e:d4:70:
         3f:a0:2e:8a:6f:64:75:a1:d4:46:07:0a:1d:b7:b0:32:c0:73:
         24:73:aa:92:1d:f3:c3:93:86:c2:a7:b3:4d:77:91:cb:3c:c5:
         18:68:85:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----