Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/f34ef153-6003-3be8-acf0-a4d6b973fa75.roa
File:                     f34ef153-6003-3be8-acf0-a4d6b973fa75.roa (raw, json)
Hash identifier:          TpBpD+8inLgSGFSQn3OTVSl8L9FtCFqj8yjXwtRfACc=
Subject key identifier:   B6:ED:22:DD:BB:D3:A3:A3:DA:16:E7:ED:89:CF:A6:41:28:E2:CD:C5
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F4328583A41BF212D7F67385DCF4B47D0
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/f34ef153-6003-3be8-acf0-a4d6b973fa75.roa
Signing time:             Wed 06 Jan 2021 05:00:00 +0000
ROA not before:           Wed 06 Jan 2021 05:00:00 +0000
ROA not after:            Sun 17 Sep 2023 04:00:00 +0000
asID:                     399516
IP address blocks:        2606:18c0:3::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:41:bf:21:2d:7f:67:38:5d:cf:4b:47:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Jan  6 05:00:00 2021 GMT
            Not After : Sep 17 04:00:00 2023 GMT
        Subject: CN=ae6cb054-4494-4626-aafc-2f9a923b266d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c4:4a:d5:03:49:4d:a6:52:48:32:7f:ab:79:
                    51:3d:56:48:05:dd:0e:ef:11:12:13:14:8a:44:58:
                    0f:77:81:cc:87:ed:ea:4f:32:e7:9a:f7:45:96:84:
                    fe:cb:e6:f5:6f:c0:b9:d6:a0:d7:89:8a:8d:9d:98:
                    50:f4:55:77:77:13:2d:1a:9f:9a:da:57:0a:7a:b2:
                    70:f8:45:3a:49:f2:37:15:53:f2:cf:e9:09:1d:8c:
                    57:9e:33:eb:89:1c:9b:a0:a6:30:75:00:a3:dc:52:
                    31:6c:c7:0c:66:53:2e:55:fc:5e:55:e1:43:da:0e:
                    20:76:89:8c:4e:45:06:8e:ec:aa:1c:8f:be:d2:a1:
                    9b:9d:3b:36:2f:83:14:2d:42:b7:88:7a:06:da:71:
                    5c:92:0f:e4:94:a3:b0:72:04:9f:0b:f5:b6:b1:d5:
                    1d:18:02:e6:58:be:e9:aa:7a:ef:7b:28:a1:fb:19:
                    41:3c:fe:96:e2:f7:46:5f:5b:ec:f0:a5:72:e5:a0:
                    70:74:72:ee:cb:b4:fd:fc:8d:11:7f:d1:4a:93:d1:
                    97:19:ca:c7:48:55:ac:f3:81:01:de:b5:4e:a6:1f:
                    06:22:fe:e1:ab:a0:06:6c:b2:f4:5d:04:81:a6:74:
                    f0:f5:3f:69:71:4e:86:11:17:80:41:ad:e6:f3:e9:
                    72:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:ED:22:DD:BB:D3:A3:A3:DA:16:E7:ED:89:CF:A6:41:28:E2:CD:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/f34ef153-6003-3be8-acf0-a4d6b973fa75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:18c0:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:8f:a7:f4:b7:04:b1:1e:49:3a:a8:27:ce:8f:83:19:f1:d3:
         b1:1f:51:2e:fd:87:65:3e:31:96:4a:41:c2:ca:a6:65:d3:53:
         ab:1b:0b:7a:48:cb:9b:ba:3c:63:45:4e:a7:d0:8c:7f:0a:7a:
         24:fa:90:56:a4:3f:05:26:03:7b:42:ee:02:4b:c1:51:8e:09:
         e0:82:b0:a5:35:04:b2:2e:65:3f:54:a6:7d:aa:e6:6b:4b:52:
         e0:49:bd:5d:f3:2b:06:fe:2b:83:ef:6e:35:94:e7:26:78:e4:
         44:49:2d:c2:d1:3b:98:b2:32:e5:93:19:9e:05:f5:9b:3c:43:
         af:38:07:26:61:e5:94:07:cc:11:f8:6b:e6:40:f3:a9:72:6b:
         10:b1:84:5e:55:ce:75:84:04:91:5d:1a:e1:29:5e:d8:92:96:
         40:2d:d9:20:42:5e:f5:33:56:25:c2:0a:e8:fa:8f:a1:1f:82:
         68:eb:6c:be:32:d3:94:d5:e9:6b:f7:55:67:85:35:b2:e9:eb:
         28:81:59:e5:d1:24:85:28:50:09:f2:40:83:7a:e1:ad:ba:a2:
         cb:49:1d:ac:85:11:9b:4d:61:d4:ca:64:b4:ba:d9:7c:64:4b:
         11:dc:de:70:b9:76:6e:00:0a:a9:2c:1d:3c:a1:09:43:0b:49:
         1e:03:fb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----