Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c453f35b-ae71-306c-b5b7-b1f8404499e5.roa
File:                     c453f35b-ae71-306c-b5b7-b1f8404499e5.roa (raw, json)
Hash identifier:          SOt4pzdxh/iVdXKJxFYzvUEPiiYFvoe4dh/zvRCTMP4=
Subject key identifier:   E1:3E:A4:A1:D3:12:9A:B6:4C:8C:59:2D:1D:1E:DC:5A:AF:0B:11:FA
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285842C145D462F384F3AB0A2F3C00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c453f35b-ae71-306c-b5b7-b1f8404499e5.roa
Signing time:             Wed 02 Aug 2023 20:56:58 +0000
ROA not before:           Wed 02 Aug 2023 20:56:58 +0000
ROA not after:            Tue 31 Oct 2023 20:56:58 +0000
asID:                     33363
IP address blocks:        2605:a40a::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:c1:45:d4:62:f3:84:f3:ab:0a:2f:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Aug  2 20:56:58 2023 GMT
            Not After : Oct 31 20:56:58 2023 GMT
        Subject: CN=93cbdf0b-01ee-4b9c-99d7-c9c93d621be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6c:60:c2:e7:38:c8:b3:ed:2e:28:5e:d4:3d:
                    87:de:9a:38:92:76:0f:7f:67:68:ad:07:76:63:a5:
                    9c:b0:a1:30:58:49:64:64:e9:95:04:21:05:7e:08:
                    01:55:09:f9:64:dd:ed:d7:77:eb:f7:87:a3:bd:ae:
                    c9:27:3c:de:a4:be:bc:94:26:46:5a:19:79:1b:ec:
                    c6:5c:d3:7c:6f:df:d3:65:f7:38:24:4a:b9:9a:a0:
                    55:a1:f0:5a:94:37:86:73:ab:3c:2c:a2:39:3f:9b:
                    06:63:8c:6b:51:b0:0e:30:f5:8b:b7:19:0e:ca:28:
                    40:76:b8:1c:cf:d3:27:13:71:61:e1:8f:40:5b:c7:
                    94:90:43:b9:be:74:81:b9:3c:eb:9d:8f:1b:5b:01:
                    c1:5d:dd:32:40:ad:e0:26:7b:d7:d6:3e:2f:7f:5d:
                    7b:c6:1b:01:29:70:ce:4b:56:21:f9:a6:d7:31:8f:
                    a8:7b:77:aa:3f:0b:81:70:e7:cb:77:9b:37:24:23:
                    64:aa:0e:56:da:2b:dc:a7:d5:58:54:dc:e5:32:0c:
                    07:3c:7d:6b:af:42:7a:ce:8b:d0:09:01:df:5c:e1:
                    04:a5:5a:0b:70:ae:56:1c:a2:17:97:9e:89:18:7e:
                    b1:ba:bb:d6:a1:95:62:ca:76:8e:28:20:2e:15:d6:
                    1b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3E:A4:A1:D3:12:9A:B6:4C:8C:59:2D:1D:1E:DC:5A:AF:0B:11:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c453f35b-ae71-306c-b5b7-b1f8404499e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a40a::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:29:03:57:e8:36:7e:68:53:5e:b7:a6:6f:d1:f4:c9:f4:85:
         b4:a6:35:14:93:a6:77:1f:21:7e:62:cd:90:21:f7:68:af:51:
         40:3a:67:b7:c8:52:d4:f0:b8:73:02:9b:86:84:ea:fb:0e:ac:
         29:89:ac:17:2b:87:f2:1d:2a:73:cf:0b:b7:0b:bd:70:c1:17:
         84:c9:4c:ea:13:9f:33:9f:b0:5b:a4:8f:a1:49:3e:0f:ef:55:
         e3:30:a7:c9:fd:08:eb:81:c0:1a:7f:5b:8c:aa:44:72:ed:76:
         91:2e:40:cf:42:fc:ce:30:79:38:13:1d:48:5f:81:37:41:31:
         7b:aa:81:76:42:9e:e3:1c:38:96:54:5f:d5:4c:66:f7:eb:de:
         76:bb:f6:66:84:96:52:d1:da:41:2e:7f:65:52:49:e4:dd:2e:
         3c:84:52:81:07:ff:f3:70:56:1c:d3:5f:18:fa:0d:b0:74:a7:
         b5:75:89:fe:b8:91:8e:f6:f9:4a:c7:b6:6b:1f:c0:33:ec:de:
         14:22:76:0a:05:0a:4e:05:a5:cb:55:9e:29:3d:bd:45:8a:07:
         57:1b:0c:8d:d1:7d:d6:92:34:fd:9e:35:be:4a:4e:b6:b4:2e:
         b9:02:27:77:ca:19:a9:ef:06:9a:e4:47:cf:58:60:4f:04:fb:
         2b:23:b0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----