Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/7795f329-5369-3670-824a-8794c9089911.roa
File:                     7795f329-5369-3670-824a-8794c9089911.roa (raw, json)
Hash identifier:          7r07bNJ6xMZsHwimZsFPFmJY+66TyHEMTQVKfpXAmTM=
Subject key identifier:   83:A8:10:CB:EB:69:0E:2D:3A:6E:4A:65:C3:60:B0:10:4B:B5:EE:0C
Certificate issuer:       /CN=38d6b993-a8bd-44a2-8e04-89483e698a23
Certificate serial:       010D0C9F432858409EDCE855B68B3BB187ADADC0
Authority key identifier: 6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/7795f329-5369-3670-824a-8794c9089911.roa
Signing time:             Wed 18 Jan 2023 19:39:07 +0000
ROA not before:           Wed 18 Jan 2023 19:39:07 +0000
ROA not after:            Thu 10 Apr 2025 04:00:00 +0000
asID:                     57406
IP address blocks:        2602:29c::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sun 16 Apr 2023 12:22:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:9e:dc:e8:55:b6:8b:3b:b1:87:ad:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38d6b993-a8bd-44a2-8e04-89483e698a23
        Validity
            Not Before: Jan 18 19:39:07 2023 GMT
            Not After : Apr 10 04:00:00 2025 GMT
        Subject: CN=fe003cfe-b25c-4987-a3b1-ae3356dcea9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:62:85:9f:ca:b9:04:4c:6b:f6:69:5b:b1:00:
                    ad:8c:24:93:24:42:97:9e:24:a5:bf:d7:af:a0:71:
                    0c:59:38:5a:e1:1a:6c:49:d8:0b:cf:2d:18:11:50:
                    a0:05:f1:21:32:54:07:86:95:0c:95:3f:14:a7:fa:
                    6b:dd:91:0c:f3:27:03:6c:28:1d:ea:db:c6:3c:06:
                    13:e3:51:cb:18:03:60:31:55:94:e7:66:1c:06:3a:
                    0d:cf:5f:cc:0c:29:15:0a:a5:b5:72:6a:36:10:e5:
                    7d:78:51:ac:47:2d:d5:05:d9:b8:75:0b:6a:fe:b9:
                    bd:93:b3:39:f7:18:15:0e:07:26:55:c4:8f:76:1d:
                    9c:36:35:e1:61:a9:46:13:23:35:ec:13:db:b4:e8:
                    16:b1:92:d9:dc:00:0f:74:8f:03:dd:24:78:3a:d6:
                    3e:fc:57:ad:4f:0c:07:f1:2b:fb:03:a2:01:3f:4b:
                    87:ac:3c:95:3c:50:19:0e:d8:bf:5c:1e:52:b3:f1:
                    a1:36:4b:53:71:32:8a:f4:13:5d:93:41:c5:51:aa:
                    b0:a9:ce:ae:21:3a:93:5b:7c:ac:e6:a4:df:78:b6:
                    7e:8d:3c:54:01:04:9f:a2:ca:e5:89:78:6e:2a:5b:
                    7c:8a:a9:46:f1:64:1d:65:cd:af:db:c6:6d:fa:d4:
                    41:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A8:10:CB:EB:69:0E:2D:3A:6E:4A:65:C3:60:B0:10:4B:B5:EE:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/7795f329-5369-3670-824a-8794c9089911.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl

            X509v3 Authority Key Identifier:
                keyid:6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:29c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:cf:7a:8d:66:5f:81:ca:27:06:3c:91:0b:14:97:81:03:27:
         5f:04:b6:b1:d3:28:67:be:b0:fe:49:05:2c:b0:9a:52:4c:cd:
         f8:4d:dc:5e:f6:48:b2:fa:f4:ff:54:f4:3d:73:27:85:21:68:
         0e:f2:17:e5:9a:88:ff:fd:72:1a:a7:c1:ce:cf:1a:c4:99:00:
         0a:94:f0:95:02:ed:09:1e:43:8e:04:16:0a:3d:8b:ef:72:af:
         19:d6:b9:ab:51:c5:f1:2f:d1:60:9c:88:e2:05:8f:25:85:5b:
         03:65:75:6e:58:6c:fb:70:c9:8a:11:81:04:52:d7:41:65:36:
         94:15:a8:95:e1:15:5c:16:68:ed:f8:f1:0d:5b:c2:77:de:92:
         ba:06:16:48:46:09:58:93:9e:c0:b7:60:df:1d:b5:13:37:e0:
         e8:ba:eb:44:d8:db:43:df:4f:3f:f2:f9:ec:75:5f:58:00:c3:
         f8:8e:ee:d1:c7:0f:79:e7:93:5c:44:7b:c6:30:2d:3c:53:f4:
         6e:7b:5c:fd:91:cd:4b:6d:86:8f:a2:60:7f:6c:79:fb:d5:f3:
         0e:c5:b0:77:e7:5f:d9:1f:20:74:a3:af:14:37:86:3b:1d:a4:
         37:5a:48:ce:ea:f3:7e:bd:91:35:4e:c2:0c:eb:f7:64:5c:be:
         92:6f:ee:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----