Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/630a8c57-cfac-3624-a820-3759286bdf3f.roa
File:                     630a8c57-cfac-3624-a820-3759286bdf3f.roa (raw, json)
Hash identifier:          KlwrBh2ONlW/h3+Lf1tWvQx5LuH+TmelKR3EGDi0rNo=
Subject key identifier:   C3:7D:38:AA:E8:1A:77:21:71:96:CD:38:E3:91:33:73:2A:29:14:2D
Certificate issuer:       /CN=a683f70a-4d8a-489e-b03c-abca94cd7852
Certificate serial:       010D0C9F4328583ACBF65C8D2CE142BC246868E8
Authority key identifier: B8:59:03:9E:D8:37:04:1C:D9:8D:1B:75:25:FF:EA:F2:58:28:49:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/630a8c57-cfac-3624-a820-3759286bdf3f.roa
Signing time:             Mon 02 Aug 2021 04:00:00 +0000
ROA not before:           Mon 02 Aug 2021 04:00:00 +0000
ROA not after:            Mon 31 Dec 2029 05:00:00 +0000
asID:                     133072
IP address blocks:        2602:fe69:e00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Fri 21 Apr 2023 17:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:cb:f6:5c:8d:2c:e1:42:bc:24:68:68:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a683f70a-4d8a-489e-b03c-abca94cd7852
        Validity
            Not Before: Aug  2 04:00:00 2021 GMT
            Not After : Dec 31 05:00:00 2029 GMT
        Subject: CN=1da53b90-892e-4d84-9fb1-5b6c59fc4f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6b:a4:05:30:51:9b:ea:df:e0:40:ef:74:d3:
                    cb:a1:4c:62:11:f5:a6:39:7a:61:f3:7b:9b:d0:a1:
                    96:42:83:f0:56:3c:44:e4:e6:69:d1:00:38:ea:4c:
                    20:30:12:6e:cc:eb:f5:5a:2b:d5:6c:fc:1d:4d:dc:
                    34:b4:f5:38:72:71:c6:20:1d:c4:4f:5f:b1:35:6d:
                    f6:a9:0d:07:b2:b1:5d:76:d2:dc:a5:cd:7c:c8:28:
                    d6:ec:fc:00:3b:b8:8a:ce:05:88:50:94:59:9f:07:
                    a1:96:4c:62:af:fb:20:31:aa:4d:28:6b:bd:45:a6:
                    7a:15:c0:41:e1:ac:7e:43:ee:26:5b:c3:87:6b:34:
                    4a:02:fc:76:24:a2:b4:8b:86:b4:d7:6c:1a:83:33:
                    6a:38:5e:5b:a6:00:a7:31:7d:20:7b:38:9d:18:7b:
                    98:44:83:4a:8e:9e:cf:00:81:95:c2:ab:42:a8:2b:
                    24:0d:8a:26:62:5a:00:1f:79:c6:e5:af:0b:55:63:
                    90:02:df:12:85:be:02:1f:4d:9e:52:10:52:8b:54:
                    c7:bd:9e:09:9d:47:68:6d:f6:50:b8:18:77:d7:80:
                    96:f2:ad:76:20:3c:9a:c2:7b:05:4a:f8:bc:64:21:
                    f4:0c:d6:44:78:47:22:a9:db:7c:9c:2f:08:fb:85:
                    5a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7D:38:AA:E8:1A:77:21:71:96:CD:38:E3:91:33:73:2A:29:14:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/630a8c57-cfac-3624-a820-3759286bdf3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.crl

            X509v3 Authority Key Identifier:
                keyid:B8:59:03:9E:D8:37:04:1C:D9:8D:1B:75:25:FF:EA:F2:58:28:49:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe69:e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:ab:3e:48:e7:64:80:c0:d3:c3:e5:b5:3c:e2:62:f8:f7:18:
         d7:c0:69:0d:0c:d3:24:b6:b6:ca:a9:14:17:49:88:e4:11:8f:
         c1:07:d7:7a:53:00:9b:0a:64:f6:c8:9f:2c:a0:c5:73:36:ed:
         bb:4e:84:57:d4:26:e6:e5:fe:df:98:f2:84:87:2e:81:25:b0:
         3c:ff:a9:82:dc:78:06:da:5a:b8:c2:ee:b4:aa:38:c3:a9:e8:
         93:cd:8a:81:35:94:fc:0d:89:33:80:cb:0a:f7:61:d6:99:c6:
         aa:ec:4d:64:a9:f9:f6:a3:47:b0:14:50:9d:e9:b7:1a:44:b0:
         c0:3f:fd:8b:59:ae:fc:7c:99:ba:f6:c7:54:0d:1d:03:d7:c5:
         61:c8:4e:52:b4:ff:78:53:e8:18:02:2e:19:82:3e:db:7f:8d:
         d6:71:07:3f:61:65:f6:02:3a:a1:d5:ec:45:1b:64:b9:4b:0e:
         ab:35:96:f8:d3:c7:77:59:2b:70:c5:c6:f3:34:37:7e:34:20:
         88:a1:9b:cf:46:a9:62:16:75:2f:ae:59:2e:8a:f3:a7:c3:b7:
         6f:d1:17:11:c0:35:fc:72:e2:84:d9:92:94:fa:7c:04:3e:c6:
         12:f8:d0:9c:93:3c:44:ec:1c:eb:c1:00:ae:a2:a6:b3:e0:a5:
         8c:69:94:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----