Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/8e59ff89-e4f3-367a-b54f-4721946f0b2d.roa
File:                     8e59ff89-e4f3-367a-b54f-4721946f0b2d.roa (raw, json)
Hash identifier:          gpjkWRwRPtBmI+GWrJnHK1ILnxRUvfQ2Ilvq3SCozr4=
Subject key identifier:   09:51:4E:7B:B5:EA:59:5E:2A:3F:5F:09:CA:F4:D5:2B:24:1D:BD:01
Certificate issuer:       /CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
Certificate serial:       010D0C9F4328583A9F2A82B7FDCD0BBB76FBF440
Authority key identifier: 75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/8e59ff89-e4f3-367a-b54f-4721946f0b2d.roa
Signing time:             Mon 28 Sep 2020 04:00:00 +0000
ROA not before:           Mon 28 Sep 2020 04:00:00 +0000
ROA not after:            Mon 31 Dec 2029 05:00:00 +0000
asID:                     19529
IP address blocks:        2602:fd10:c00::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 19 Aug 2022 23:46:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:9f:2a:82:b7:fd:cd:0b:bb:76:fb:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
        Validity
            Not Before: Sep 28 04:00:00 2020 GMT
            Not After : Dec 31 05:00:00 2029 GMT
        Subject: CN=331da958-84d6-4b04-8d07-7c309c6a40af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7b:ba:8c:aa:f7:0b:75:9a:8a:66:5e:63:9d:
                    5c:cc:b0:e6:a9:d6:65:50:da:66:29:5a:3e:7e:3a:
                    e7:73:30:9b:fb:2e:36:4d:a8:ab:6a:d1:f1:a1:d6:
                    36:74:5a:eb:d9:e3:49:c2:d3:b4:b1:cf:27:60:48:
                    6a:a9:44:25:82:77:0d:cf:3c:6a:78:47:33:b6:49:
                    75:7a:ce:d7:da:a4:da:57:c5:d6:e5:1b:c6:6f:31:
                    64:82:fa:ca:a3:6e:a6:13:99:d8:d5:fe:83:b7:06:
                    b7:ff:79:b5:4d:15:60:96:fa:7b:5f:bf:81:29:46:
                    a9:ca:a5:4d:cc:6c:2c:07:59:5e:f4:6a:32:7b:ad:
                    78:9c:e7:e4:06:1e:8f:b6:90:ce:bd:da:35:34:a3:
                    2a:69:1a:9c:cb:29:bc:cf:ec:cd:d9:a0:c3:34:e3:
                    a2:04:d9:98:6a:f5:14:a0:c5:69:e5:de:77:a3:3c:
                    9a:66:70:1f:24:a7:87:72:a7:19:c5:69:ff:4f:3f:
                    5f:91:78:d7:b6:6d:c2:59:00:9c:94:ca:ed:3d:f0:
                    33:4e:96:93:d1:5c:77:24:f0:2d:2e:aa:2e:2c:d2:
                    d1:5a:df:2a:af:c8:e2:0d:18:16:3d:b9:92:bc:af:
                    01:64:bd:ff:2b:b0:87:ce:ea:85:91:d5:2a:d9:b7:
                    6b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:51:4E:7B:B5:EA:59:5E:2A:3F:5F:09:CA:F4:D5:2B:24:1D:BD:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/8e59ff89-e4f3-367a-b54f-4721946f0b2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.crl

            X509v3 Authority Key Identifier:
                keyid:75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd10:c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:d7:e3:3a:e7:1e:38:f7:66:c4:33:56:71:b7:3e:a3:6e:dc:
         0f:27:79:44:3e:c8:25:2e:e7:33:76:91:54:6b:79:ac:cf:9b:
         8c:6c:a2:aa:82:64:d5:71:35:bc:c5:9d:9d:bf:5d:1b:13:bd:
         d7:02:6b:e2:06:ce:ad:8f:8c:56:ef:89:c3:ef:98:e4:4a:98:
         a7:eb:40:40:27:de:4e:c2:b1:7f:af:e4:97:de:dc:70:0a:2b:
         6c:9a:c8:af:08:cd:d2:c1:8d:0f:9e:37:a2:12:1c:6f:7b:dc:
         0d:1e:5e:60:31:f9:c1:13:09:dc:63:b8:e2:c3:2c:8f:5c:04:
         42:94:dd:8a:f7:b2:66:7c:b5:6c:d7:11:d3:02:4e:3a:cd:09:
         4d:23:27:27:2a:e8:ed:4a:16:56:99:43:17:08:28:6b:03:1e:
         cc:42:0d:c3:a7:0b:b3:92:eb:bd:80:dc:09:bb:3c:09:f8:52:
         e7:f5:b8:6f:b8:26:f4:8f:41:64:51:a4:a8:b1:9a:23:6f:6c:
         c3:cf:18:e3:17:e8:4a:10:ba:25:cf:ae:e9:43:b0:63:51:ef:
         61:c8:20:4c:a9:fd:84:30:ba:df:b5:34:c8:e9:35:12:85:1a:
         ad:00:52:ff:e7:cc:0f:b1:16:4a:75:85:e1:1d:72:7b:6d:f1:
         b3:40:9e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----