Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a1a31138-41c1-3975-8125-10062d807a13.roa
File:                     a1a31138-41c1-3975-8125-10062d807a13.roa (raw, json)
Hash identifier:          i2r5YwgrjyYp3aqH0hO20pJj0U2so0TRXYDhOIsnkUY=
Subject key identifier:   B9:F0:33:7D:17:04:5C:67:BC:9B:00:58:9A:C2:D5:FB:9F:10:60:CF
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285842C146AF0E7364B59F827D7300
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a1a31138-41c1-3975-8125-10062d807a13.roa
Signing time:             Wed 02 Aug 2023 20:58:42 +0000
ROA not before:           Wed 02 Aug 2023 20:58:42 +0000
ROA not after:            Tue 31 Oct 2023 20:58:42 +0000
asID:                     33363
IP address blocks:        2605:a401:8000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:c1:46:af:0e:73:64:b5:9f:82:7d:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Aug  2 20:58:42 2023 GMT
            Not After : Oct 31 20:58:42 2023 GMT
        Subject: CN=b9dac715-c452-4b4a-a921-dc7966005f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6d:93:c6:95:83:f7:41:ad:ed:83:17:45:d2:
                    50:99:62:78:c2:22:b2:f5:6b:c9:0a:2a:49:2f:1b:
                    40:dc:45:81:40:98:b5:e7:e6:51:57:64:43:30:51:
                    e2:e5:39:8e:54:ba:5e:59:50:c9:3b:e9:4e:ef:0f:
                    c3:8d:d7:3e:57:3c:25:94:98:28:8a:3d:f9:3c:34:
                    f4:b4:d6:ba:5d:79:04:a4:50:22:2b:cd:a2:93:d5:
                    79:27:e5:f7:db:63:83:6f:8b:33:f7:9c:53:37:79:
                    36:9a:93:e1:66:5e:78:f3:b1:71:77:53:5a:21:b3:
                    f9:cc:3e:a1:44:a8:51:a1:63:73:7c:87:c7:01:75:
                    3e:ef:bf:f3:03:40:ab:f4:11:a4:28:ab:9d:f5:75:
                    d3:b3:36:83:47:5e:9b:23:1c:d2:1c:e3:54:75:b2:
                    48:d3:ae:64:1a:42:cc:ff:9e:27:77:c2:a0:69:70:
                    ba:a9:74:90:a5:f1:c1:ac:0c:53:74:b1:c8:17:6e:
                    0e:85:cb:ca:32:21:f1:f1:6a:40:d5:09:3f:5b:dc:
                    eb:f2:53:74:82:f8:b5:05:b9:83:2f:09:1f:15:3d:
                    f7:a0:0e:dd:2c:c0:ae:f5:53:ab:04:63:90:ca:83:
                    3d:41:85:a6:7b:a0:54:33:6c:b8:05:f2:78:8f:fc:
                    00:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F0:33:7D:17:04:5C:67:BC:9B:00:58:9A:C2:D5:FB:9F:10:60:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a1a31138-41c1-3975-8125-10062d807a13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ca:be:be:90:e4:59:d5:03:ed:d6:bd:0f:4b:52:5a:cf:03:
         3c:99:c9:9c:8a:e0:c2:fd:7b:40:bd:3c:36:46:71:ff:dd:da:
         04:0e:29:de:02:d6:d8:09:49:a8:78:d1:e9:b7:00:2e:79:1f:
         e3:bd:68:fd:ad:de:eb:84:85:8e:e0:a7:ec:32:76:b3:cc:ba:
         c9:04:6c:d9:c7:b3:1b:29:23:6e:39:de:3c:cc:6f:6c:af:f9:
         a2:f4:3e:38:a0:90:d4:0e:77:61:4b:b9:26:97:6d:ba:e5:a8:
         56:e4:a6:f9:97:a7:23:87:92:74:f2:3a:c0:ad:54:89:f2:d5:
         ed:f3:39:24:46:91:a2:13:f2:18:27:9c:60:f7:2c:12:08:e9:
         5c:4d:8d:01:68:78:01:6e:41:02:33:19:3a:b9:46:d9:f8:02:
         9d:0e:86:b1:12:ca:a7:fe:22:a4:81:84:2c:95:ac:d6:8a:4a:
         b1:06:35:ac:1d:57:65:e7:c7:59:8c:47:e8:5e:96:08:89:2a:
         5f:d5:0d:9c:fc:c5:ff:a7:4e:c4:e8:98:bf:df:d0:f4:7f:ec:
         be:93:0e:fc:03:b6:e5:72:f3:ec:fc:13:0d:93:95:96:ae:7a:
         f6:2b:0c:4a:58:fd:b0:db:90:62:44:b9:b6:f5:0b:c3:5e:dd:
         c7:84:ba:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 9 18:47:38 2023 by rpki-client on console-fra.rpki-client.org