Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/668c9f1e-290d-31e6-9839-eb84c9b8c30b.roa
File:                     668c9f1e-290d-31e6-9839-eb84c9b8c30b.roa (raw, json)
Hash identifier:          1um3zLGkdM6+UNHdTgkWaqp2tWawJeWausghUvXwe9w=
Subject key identifier:   4C:52:DB:CB:AC:20:75:A3:EE:C5:D7:30:B7:AC:F2:83:8E:57:10:7B
Certificate issuer:       /CN=bfc0b168-b834-4192-acf1-30565a4b3e0c
Certificate serial:       010D0C9F4328583A9030210A9CABF7E907E22B20
Authority key identifier: 0B:5F:68:42:78:8A:DF:A3:B0:1A:AB:9A:E1:3D:C6:B9:1E:0F:D1:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/668c9f1e-290d-31e6-9839-eb84c9b8c30b.roa
Signing time:             Mon 12 Jul 2021 04:00:00 +0000
ROA not before:           Mon 12 Jul 2021 04:00:00 +0000
ROA not after:            Mon 15 Oct 2029 04:00:00 +0000
asID:                     16509
IP address blocks:        2602:fc5c:2::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 22 Aug 2022 18:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:90:30:21:0a:9c:ab:f7:e9:07:e2:2b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfc0b168-b834-4192-acf1-30565a4b3e0c
        Validity
            Not Before: Jul 12 04:00:00 2021 GMT
            Not After : Oct 15 04:00:00 2029 GMT
        Subject: CN=02795a94-238f-4b76-a4ba-1f16fa75e8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:58:80:a3:97:27:a3:2f:63:7e:5a:04:b8:9a:
                    a8:d2:0e:09:0c:de:92:fa:96:87:2b:32:ad:78:59:
                    b1:d9:7f:34:5d:0f:3a:90:ca:bd:c7:83:ce:91:7f:
                    f8:9c:28:d1:c8:0b:f0:80:ac:83:8b:e2:0a:b0:aa:
                    da:28:49:74:af:31:39:60:d5:70:0c:40:8e:0c:64:
                    16:70:3e:a7:f4:8d:4b:bd:70:99:36:99:65:68:af:
                    8a:1b:20:a1:60:06:e4:17:6b:1f:3b:7a:40:70:3f:
                    a1:ec:90:d2:a7:e9:25:d0:ec:c0:0f:2e:be:8f:74:
                    ed:6a:57:29:f6:12:52:ee:0c:75:46:7f:52:0b:89:
                    a2:74:07:3e:3c:15:2f:6e:03:c8:03:84:b5:44:d5:
                    47:da:81:14:a4:23:a1:db:2d:e8:6f:68:35:69:69:
                    04:89:e7:94:4a:6c:d7:3e:eb:b7:23:f0:2c:d9:71:
                    e2:c4:c8:8d:58:e2:77:ac:2c:35:ab:e1:62:e2:e0:
                    74:57:b3:fa:d6:fd:4e:7b:cd:9d:13:b5:57:20:1b:
                    de:95:da:51:92:05:cb:d7:08:1e:95:c4:47:a9:17:
                    1f:5a:e1:79:8e:3a:ac:1c:bd:88:aa:f4:54:dd:69:
                    9b:3f:7a:0a:7d:fc:02:7e:f0:b3:94:29:fd:c2:ae:
                    8e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:52:DB:CB:AC:20:75:A3:EE:C5:D7:30:B7:AC:F2:83:8E:57:10:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/668c9f1e-290d-31e6-9839-eb84c9b8c30b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:5F:68:42:78:8A:DF:A3:B0:1A:AB:9A:E1:3D:C6:B9:1E:0F:D1:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc5c:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:7a:a9:99:a7:b1:a2:13:4a:b7:5d:22:fe:62:89:15:87:3c:
         81:89:5c:8c:28:b8:c1:7f:1d:0a:01:eb:a4:a3:b3:14:08:82:
         8f:8f:b1:31:59:7e:0f:78:39:02:ef:72:08:df:74:05:68:5e:
         d6:e9:04:88:87:c1:8a:6f:de:b9:59:63:5a:6c:a6:40:6b:9c:
         f2:7a:06:be:88:86:86:45:5f:96:e7:41:ee:3b:42:6d:14:f3:
         7b:46:6a:e4:38:82:f3:c6:fc:58:3f:c4:88:6e:85:19:4a:bb:
         00:e5:ad:a8:13:65:ce:f5:ae:21:ac:51:49:1f:16:a1:35:8d:
         1f:f4:11:d5:2a:de:2c:db:b1:f7:e2:9f:e2:15:2a:95:ca:19:
         0e:21:02:43:29:2a:11:b0:35:23:c1:d6:8b:ad:13:60:26:d9:
         b7:b1:e4:3e:81:8c:01:22:34:65:74:5a:3c:bc:c3:2c:ed:db:
         0e:4b:4f:0f:ec:31:9f:72:3d:73:75:ee:c4:fe:d5:80:fe:66:
         7f:a3:d7:20:49:eb:b5:e1:fb:37:b3:b2:c5:56:0d:ad:11:40:
         75:b7:b9:93:f8:e7:0b:47:65:bc:99:be:90:97:63:8e:1b:c7:
         28:88:4a:8a:31:60:4d:a9:a3:e8:41:92:88:7a:57:79:2e:ef:
         43:5b:ac:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----