Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/6e797b85-30b4-3ace-a13e-0d983ea824e4.roa
File:                     6e797b85-30b4-3ace-a13e-0d983ea824e4.roa (raw, json)
Hash identifier:          KuaqlS7hbEmkq/10u8FPRB6bnVE1kOmAuZDmqzY26rQ=
Subject key identifier:   90:E6:8F:E4:5C:DB:55:83:AE:42:F3:9A:A9:97:DE:EE:EC:40:8E:E1
Certificate issuer:       /CN=66afc7a0-9424-431b-87aa-fab4c7032ed2
Certificate serial:       010D0C9F43285841EDF1C9A11B61F04EB2BA94C0
Authority key identifier: 8B:B7:43:2E:1D:4B:AF:D0:79:03:06:96:4C:AC:AD:5C:64:24:61:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/6e797b85-30b4-3ace-a13e-0d983ea824e4.roa
Signing time:             Fri 19 May 2023 04:12:05 +0000
ROA not before:           Fri 19 May 2023 04:12:05 +0000
ROA not after:            Thu 17 Aug 2023 04:12:05 +0000
asID:                     19919
IP address blocks:        2601:1600::/28 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:ed:f1:c9:a1:1b:61:f0:4e:b2:ba:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66afc7a0-9424-431b-87aa-fab4c7032ed2
        Validity
            Not Before: May 19 04:12:05 2023 GMT
            Not After : Aug 17 04:12:05 2023 GMT
        Subject: CN=97820085-74d8-45af-ac6e-d1836c3253d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:78:45:86:ff:8a:f3:59:43:dd:d9:0b:29:03:
                    ea:3b:04:db:e8:af:cf:21:19:4d:25:51:00:03:b2:
                    3c:7e:6d:6b:a0:d6:1e:52:9c:7f:7e:42:bf:22:51:
                    85:6a:62:df:d1:e9:f2:68:ac:c3:0c:06:3c:74:0b:
                    95:36:9e:99:c0:15:83:53:68:88:08:16:ae:9e:1f:
                    ca:65:ec:ea:19:15:1b:07:00:0f:f0:28:56:ee:93:
                    3a:08:03:db:d6:96:75:b2:f6:b2:43:30:15:bc:02:
                    d7:85:b1:2a:a1:15:cf:8e:1b:f9:75:29:f9:47:fc:
                    9f:13:87:93:72:d1:6e:32:63:a0:71:76:3b:b6:0e:
                    e3:57:f4:fd:4d:9b:3e:b2:d8:35:38:35:de:e0:a8:
                    e4:fc:31:11:2e:af:8a:6e:4d:ef:33:27:19:ac:11:
                    a8:42:02:7f:4a:28:7e:12:ff:bf:6f:6f:40:b7:f3:
                    10:79:c6:ec:ad:3c:ae:a3:d9:6d:7a:9e:c2:42:9b:
                    7f:1c:55:e3:bb:b3:d4:c6:2f:3f:39:a8:11:9a:e9:
                    c0:e6:04:5c:82:e6:0e:5b:b1:76:f8:46:72:a5:59:
                    c6:a1:74:7f:0b:58:ad:1f:ff:27:af:f8:5e:c0:a9:
                    ab:45:f8:f4:b1:5b:ad:eb:7f:3b:58:98:18:a7:61:
                    83:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E6:8F:E4:5C:DB:55:83:AE:42:F3:9A:A9:97:DE:EE:EC:40:8E:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/6e797b85-30b4-3ace-a13e-0d983ea824e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/66afc7a0-9424-431b-87aa-fab4c7032ed2.crl

            X509v3 Authority Key Identifier:
                keyid:8B:B7:43:2E:1D:4B:AF:D0:79:03:06:96:4C:AC:AD:5C:64:24:61:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1600::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:d7:a3:30:e5:77:c6:33:34:11:66:06:c3:d0:fb:b5:87:05:
         08:65:4c:8f:b3:2f:eb:28:17:15:60:69:00:d3:9d:f3:79:0a:
         37:88:ee:9f:d9:ee:20:1f:12:75:7a:e6:e3:3a:89:2b:35:90:
         83:1a:59:e1:aa:a3:0e:e8:82:13:50:f7:bd:fd:5d:ca:83:94:
         44:95:de:26:b9:0e:cd:4a:38:51:c6:7d:91:6d:cd:8b:96:09:
         6e:c5:f7:4a:d0:5d:bb:94:d7:00:26:bf:bb:3a:5b:43:d9:3a:
         d5:c8:b3:7c:16:4f:fa:32:fc:16:41:3a:6c:57:2b:94:77:12:
         22:90:a6:ab:73:84:69:bb:89:06:b7:00:84:c6:41:46:e8:24:
         f7:52:7d:61:7b:06:9d:58:fc:7d:b8:1f:85:7b:8a:f3:44:be:
         fd:f3:f7:35:98:62:3d:bc:64:33:5d:09:3c:97:d1:b7:c4:1d:
         a9:99:17:08:fa:5f:d8:b0:e6:c7:5b:c5:1a:99:b3:98:c5:8e:
         a2:6d:85:d6:92:ef:35:05:8d:14:da:ce:d7:81:6c:04:65:bf:
         c8:1c:bc:7e:aa:3a:6a:75:44:47:45:ee:53:b0:78:b5:28:f8:
         f6:5a:d6:ae:01:f5:27:5f:b9:1e:83:a1:59:3d:3f:ce:9d:22:
         6e:ad:35:a4
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEHt8cmhG2HwTrK6lMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZhZmM3YTAtOTQyNC00MzFiLTg3YWEtZmFiNGM3MDMy
ZWQyMB4XDTIzMDUxOTA0MTIwNVoXDTIzMDgxNzA0MTIwNVowLzEtMCsGA1UEAxMk
OTc4MjAwODUtNzRkOC00NWFmLWFjNmUtZDE4MzZjMzI1M2Q4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13hFhv+K81lD3dkLKQPqOwTb6K/PIRlNJVEA
A7I8fm1roNYeUpx/fkK/IlGFamLf0enyaKzDDAY8dAuVNp6ZwBWDU2iICBaunh/K
ZezqGRUbBwAP8ChW7pM6CAPb1pZ1svayQzAVvALXhbEqoRXPjhv5dSn5R/yfE4eT
ctFuMmOgcXY7tg7jV/T9TZs+stg1ODXe4Kjk/DERLq+Kbk3vMycZrBGoQgJ/Sih+
Ev+/b29At/MQecbsrTyuo9ltep7CQpt/HFXju7PUxi8/OagRmunA5gRcguYOW7F2
+EZypVnGoXR/C1itH/8nr/hewKmrRfj0sVut6387WJgYp2GDswIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJDmj+Rc21WDrkLzmqmX3u7sQI7hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NmFm
YzdhMC05NDI0LTQzMWItODdhYS1mYWI0YzcwMzJlZDIvNmU3OTdiODUtMzBiNC0z
YWNlLWExM2UtMGQ5ODNlYTgyNGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjZhZmM3YTAtOTQyNC00MzFiLTg3
YWEtZmFiNGM3MDMyZWQyLzY2YWZjN2EwLTk0MjQtNDMxYi04N2FhLWZhYjRjNzAz
MmVkMi5jcmwwHwYDVR0jBBgwFoAUi7dDLh1Lr9B5AwaWTKytXGQkYSAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82NmFmYzdhMC05NDI0LTQzMWItODdhYS1mYWI0
YzcwMzJlZDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgEWADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAj16Mw5XfGMzQRZgbD0Pu1hwUIZUyPsy/rKBcVYGkA053zeQo3iO6f
2e4gHxJ1eubjOokrNZCDGlnhqqMO6IITUPe9/V3Kg5REld4muQ7NSjhRxn2Rbc2L
lgluxfdK0F27lNcAJr+7OltD2TrVyLN8Fk/6MvwWQTpsVyuUdxIikKarc4Rpu4kG
twCExkFG6CT3Un1hewadWPx9uB+Fe4rzRL798/c1mGI9vGQzXQk8l9G3xB2pmRcI
+l/YsObHW8UambOYxY6ibYXWku81BY0U2s7XgWwEZb/IHLx+qjpqdURHRe5TsHi1
KPj2WtauAfUnX7keg6FZPT/OnSJurTWk
-----END CERTIFICATE-----