Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/21afe711-3e6f-3ba9-87fc-41d7eab7d807.roa
File:                     21afe711-3e6f-3ba9-87fc-41d7eab7d807.roa (raw, json)
Hash identifier:          jB9NZUegKPDbsZLX/BE3jKiakmTnKs2N1oSK7ICZhOc=
Subject key identifier:   1E:5B:CB:85:5B:98:70:9F:AD:36:07:67:09:3F:6D:46:37:E6:AE:2E
Certificate issuer:       /CN=2d64a9b2-da39-490b-a76e-0928cd57270b
Certificate serial:       010D0C9F4328583FA4CA27C16D4DFA682EFE4200
Authority key identifier: C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/21afe711-3e6f-3ba9-87fc-41d7eab7d807.roa
Signing time:             Fri 21 Oct 2022 13:42:09 +0000
ROA not before:           Fri 21 Oct 2022 13:42:09 +0000
ROA not after:            Wed 13 Nov 2024 05:00:00 +0000
asID:                     398057
IP address blocks:        2602:faf5::/40 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a4:ca:27:c1:6d:4d:fa:68:2e:fe:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d64a9b2-da39-490b-a76e-0928cd57270b
        Validity
            Not Before: Oct 21 13:42:09 2022 GMT
            Not After : Nov 13 05:00:00 2024 GMT
        Subject: CN=3542a0bf-ea64-4c15-8aa2-e1fadc01a443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ee:bf:9a:aa:86:3a:0d:66:21:03:79:ef:44:
                    35:c3:54:81:fd:0a:06:19:fd:6d:13:64:14:e1:96:
                    0c:45:60:88:9b:a5:be:d8:42:cf:79:28:e8:68:11:
                    47:ed:ab:67:35:73:4e:79:ee:ab:1d:5b:eb:01:3d:
                    19:50:ab:e5:5f:5d:4a:41:8b:03:35:b8:34:e2:0c:
                    9d:23:25:7e:9b:b9:d7:97:16:34:2f:01:8c:c1:8b:
                    31:4f:28:ba:d1:89:0b:d9:2a:2a:7a:fb:ed:d0:62:
                    b8:c0:46:2e:27:c0:f1:b8:0d:57:e5:d6:2d:87:21:
                    20:32:57:97:db:5a:c0:fc:a7:10:f0:62:cc:6f:06:
                    cf:ed:77:28:b3:1f:24:1d:1b:9d:54:95:a4:28:97:
                    74:70:10:62:2d:3d:7b:a2:cf:d9:d0:c7:65:bc:8f:
                    6a:d7:5f:b9:13:10:fd:28:ac:e9:02:c1:03:56:f9:
                    ef:7f:f2:66:6e:2a:d9:51:a6:a1:0e:03:a0:d7:dd:
                    f5:19:75:f2:6c:2f:cf:91:b1:2c:f0:d8:26:fc:64:
                    96:52:f8:e4:f4:57:de:ef:20:eb:04:0a:35:4a:bc:
                    7b:1a:d3:63:e7:85:dc:f0:45:ad:9d:fc:94:fc:8e:
                    b4:fb:a9:85:8e:90:cf:71:f0:c7:85:30:71:e6:23:
                    11:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5B:CB:85:5B:98:70:9F:AD:36:07:67:09:3F:6D:46:37:E6:AE:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/21afe711-3e6f-3ba9-87fc-41d7eab7d807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.crl

            X509v3 Authority Key Identifier:
                keyid:C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faf5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:c4:cc:6c:75:98:35:10:d3:2e:0b:5b:e7:bc:e0:d7:c7:23:
         35:06:1a:83:70:6c:6f:9b:f2:19:6e:44:b3:00:a5:dc:86:58:
         4b:1e:b2:96:95:b2:5e:ae:a7:d6:e7:c2:7e:7b:f6:fa:3c:2b:
         c0:68:db:a8:bf:c4:a2:1d:70:cb:b0:f1:0e:cc:8c:e0:06:5a:
         28:a9:e4:7e:9d:f0:2f:f8:e5:35:28:8c:9e:ae:53:d8:61:02:
         30:dd:76:3f:5d:e1:3a:45:d1:7e:16:ae:7b:b9:20:18:9b:29:
         df:fd:93:e2:d8:8a:50:46:a0:e4:83:d5:45:ea:9f:a1:c2:fb:
         28:f0:66:98:9a:c5:85:e3:a4:22:97:70:9a:24:3f:b9:2c:2d:
         05:82:56:ba:0e:a1:28:14:bd:42:cd:4e:b7:11:fa:df:d5:4d:
         ef:73:00:95:44:fb:ce:a3:e9:21:ad:0b:66:a5:c4:70:fa:66:
         a5:ce:12:50:09:93:49:b8:64:c5:aa:66:5c:32:1f:c9:8a:96:
         1e:06:ab:9e:cd:96:cc:e4:6c:b4:88:9e:e5:96:34:9c:38:a6:
         eb:f8:68:c9:b4:68:84:20:87:cd:20:76:b2:15:68:ec:8f:29:
         bf:8f:32:55:48:f9:cf:85:4f:06:52:ad:8d:99:ff:d4:fc:96:
         4d:af:19:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----