Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/5a5e158d-16ed-396e-85bc-598eb076bb45.roa
File:                     5a5e158d-16ed-396e-85bc-598eb076bb45.roa (raw, json)
Hash identifier:          7+USOWo3n6pmiZyGD3uK+f3Ekv5suwQbQpKyAvzJ59I=
Subject key identifier:   DB:8E:F0:19:46:7B:D1:8C:8B:4F:17:07:12:E0:E7:3B:0C:B3:0A:06
Certificate issuer:       /CN=552db743-b442-4066-8e02-0dcd47471dce
Certificate serial:       010D0C9F4328583D81DA6A73EFFECE76EF0F1D80
Authority key identifier: EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/5a5e158d-16ed-396e-85bc-598eb076bb45.roa
Signing time:             Wed 21 Oct 2020 04:00:00 +0000
ROA not before:           Wed 21 Oct 2020 04:00:00 +0000
ROA not after:            Thu 11 Jul 2024 04:00:00 +0000
asID:                     48413
IP address blocks:        2602:fcf6::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:81:da:6a:73:ef:fe:ce:76:ef:0f:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552db743-b442-4066-8e02-0dcd47471dce
        Validity
            Not Before: Oct 21 04:00:00 2020 GMT
            Not After : Jul 11 04:00:00 2024 GMT
        Subject: CN=423f9c16-5a3c-464b-86a7-f0949113c2cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0d:89:54:e6:c6:cc:19:5b:6a:74:51:b1:d6:
                    fe:42:16:3e:1b:9c:6e:51:8b:21:d1:1f:ab:c1:11:
                    32:bb:7d:4f:81:ef:68:d1:28:c4:0e:cd:42:b1:98:
                    fe:73:44:67:30:74:36:a1:c8:50:56:37:10:74:70:
                    a9:c2:68:69:be:cd:12:5c:38:9b:3a:2c:2e:08:17:
                    34:53:a8:c5:ec:2d:89:03:c6:9d:77:1c:97:1c:91:
                    62:ca:b7:3f:6d:b7:1e:e1:8d:c8:40:81:59:c0:25:
                    e5:c2:89:b2:27:0f:1d:df:3f:e2:0e:19:0e:6b:11:
                    3c:d7:63:23:ae:a7:ad:7e:da:b8:8d:c9:6a:ea:98:
                    64:5d:53:15:b9:b1:29:4f:fe:04:f8:58:29:de:f9:
                    86:c9:8b:99:da:8f:81:6a:3b:e6:a6:d3:c7:77:cd:
                    8e:aa:8e:31:21:fc:48:f2:1e:a7:44:de:52:d4:e8:
                    52:a9:99:2b:da:ca:c8:2a:b4:ba:1f:db:48:e7:95:
                    8a:9a:b3:8d:17:a9:c6:7f:77:0d:14:d9:51:6c:a5:
                    af:20:a1:1c:23:cd:6c:37:59:47:33:7b:58:1e:78:
                    75:5c:bf:10:d1:01:ac:ab:ba:81:22:c7:3a:fa:12:
                    c3:c3:a3:24:37:05:a7:06:5a:33:82:81:3e:88:99:
                    b4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8E:F0:19:46:7B:D1:8C:8B:4F:17:07:12:E0:E7:3B:0C:B3:0A:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/5a5e158d-16ed-396e-85bc-598eb076bb45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl

            X509v3 Authority Key Identifier:
                keyid:EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcf6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:7b:34:28:f0:d9:de:b0:b2:67:fe:be:ee:a5:d0:dd:39:39:
         c0:7e:ae:66:78:cd:18:f4:43:2b:54:e6:4c:41:65:ad:7d:34:
         1e:0b:e6:a9:f6:24:fb:f6:99:42:75:60:cf:ae:6c:db:db:12:
         22:99:c4:af:6c:ed:9a:14:83:51:6d:ca:3a:db:fc:28:ed:35:
         d0:63:49:0f:17:3b:a5:5c:72:8e:eb:8c:24:7e:5e:8b:5f:b1:
         56:78:3f:d2:7c:ed:93:01:66:33:01:22:3b:c4:8e:7f:7d:06:
         e3:db:4e:3c:9d:c6:f7:cf:e3:a8:23:30:d9:1a:05:16:43:14:
         77:6b:58:4e:04:6b:c7:df:76:a2:bd:4a:6d:18:c0:39:11:1d:
         a0:ab:78:fd:24:3d:7d:7a:8a:0d:b6:6b:a0:1e:6a:b8:19:b6:
         b6:c5:36:fb:1e:85:71:18:5b:d4:2a:05:3d:70:68:6e:28:53:
         4e:a3:96:7b:29:3a:17:aa:aa:74:dc:72:62:15:1f:b8:25:d8:
         46:51:e9:4f:11:f9:b1:4a:bf:e3:6c:cd:ee:87:71:b3:ed:19:
         01:b1:2e:d4:f4:e0:03:1f:bb:cf:af:f9:be:0c:48:16:1b:b2:
         c4:ae:71:48:1d:13:1f:46:fa:51:1c:2d:69:a4:d7:13:4c:d7:
         2c:55:01:ff
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD2B2mpz7/7Odu8PHYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTUyZGI3NDMtYjQ0Mi00MDY2LThlMDItMGRjZDQ3NDcx
ZGNlMB4XDTIwMTAyMTA0MDAwMFoXDTI0MDcxMTA0MDAwMFowLzEtMCsGA1UEAxMk
NDIzZjljMTYtNWEzYy00NjRiLTg2YTctZjA5NDkxMTNjMmNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgA2JVObGzBlbanRRsdb+QhY+G5xuUYsh0R+r
wREyu31Pge9o0SjEDs1CsZj+c0RnMHQ2ochQVjcQdHCpwmhpvs0SXDibOiwuCBc0
U6jF7C2JA8addxyXHJFiyrc/bbce4Y3IQIFZwCXlwomyJw8d3z/iDhkOaxE812Mj
rqetftq4jclq6phkXVMVubEpT/4E+Fgp3vmGyYuZ2o+BajvmptPHd82Oqo4xIfxI
8h6nRN5S1OhSqZkr2srIKrS6H9tI55WKmrONF6nGf3cNFNlRbKWvIKEcI81sN1lH
M3tYHnh1XL8Q0QGsq7qBIsc6+hLDw6MkNwWnBlozgoE+iJm0lQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNuO8BlGe9GMi08XBxLg5zsMswoGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NTJk
Yjc0My1iNDQyLTQwNjYtOGUwMi0wZGNkNDc0NzFkY2UvNWE1ZTE1OGQtMTZlZC0z
OTZlLTg1YmMtNTk4ZWIwNzZiYjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTUyZGI3NDMtYjQ0Mi00MDY2LThl
MDItMGRjZDQ3NDcxZGNlLzU1MmRiNzQzLWI0NDItNDA2Ni04ZTAyLTBkY2Q0NzQ3
MWRjZS5jcmwwHwYDVR0jBBgwFoAU6m0i4+Sxndvay/Dik7AYgek/mbIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NTJkYjc0My1iNDQyLTQwNjYtOGUwMi0wZGNk
NDc0NzFkY2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL89gAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEN7NCjw2d6wsmf+vu6l0N05OcB+rmZ4zRj0QytU5kxBZa19NB4L
5qn2JPv2mUJ1YM+ubNvbEiKZxK9s7ZoUg1Ftyjrb/CjtNdBjSQ8XO6Vcco7rjCR+
XotfsVZ4P9J87ZMBZjMBIjvEjn99BuPbTjydxvfP46gjMNkaBRZDFHdrWE4Ea8ff
dqK9Sm0YwDkRHaCreP0kPX16ig22a6AeargZtrbFNvsehXEYW9QqBT1waG4oU06j
lnspOheqqnTccmIVH7gl2EZR6U8R+bFKv+Nsze6HcbPtGQGxLtT04AMfu8+v+b4M
SBYbssSucUgdEx9G+lEcLWmk1xNM1yxVAf8=
-----END CERTIFICATE-----