Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/40a5305c-0054-3894-b2a6-cebc69ec060e.roa
File:                     40a5305c-0054-3894-b2a6-cebc69ec060e.roa (raw, json)
Hash identifier:          cAaKrZqQE8He4ZeyRnEtfKeER+5BGTt1TgK0Ap+Igbg=
Subject key identifier:   55:22:E2:82:B1:C3:2B:D8:9E:A0:78:F2:EC:51:CA:5E:A6:7A:80:A3
Certificate issuer:       /CN=a7bb872d-e597-498e-8bd5-d2efae320554
Certificate serial:       010D0C9F43285840494DD5188BB8F4C285C67860
Authority key identifier: 0B:C1:1F:4E:79:79:D6:3F:8B:E2:4A:B8:4F:99:21:03:79:42:69:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/40a5305c-0054-3894-b2a6-cebc69ec060e.roa
Signing time:             Mon 19 Dec 2022 11:56:43 +0000
ROA not before:           Mon 19 Dec 2022 11:56:43 +0000
ROA not after:            Sun 23 Mar 2025 04:00:00 +0000
asID:                     62890
IP address blocks:        2606:ed40::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 20 Dec 2022 17:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:49:4d:d5:18:8b:b8:f4:c2:85:c6:78:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7bb872d-e597-498e-8bd5-d2efae320554
        Validity
            Not Before: Dec 19 11:56:43 2022 GMT
            Not After : Mar 23 04:00:00 2025 GMT
        Subject: CN=36eee0a8-2e7c-4dcd-b5ef-aea0287bb6da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:59:9e:6b:42:87:2c:df:16:11:f1:15:42:fc:
                    5a:9a:31:44:d8:83:f9:3d:65:b9:f3:04:a1:28:f7:
                    f2:5b:7a:ab:b9:fb:da:7e:95:6a:3e:60:c8:fa:51:
                    3f:7a:f5:56:9a:1c:b9:f0:dd:3d:b9:3e:b7:92:0e:
                    d1:29:7e:84:ab:d8:4e:d5:1e:2a:32:ae:e5:73:42:
                    a6:40:c0:2d:e7:0a:a0:2d:0e:d2:d4:8c:a8:0e:29:
                    aa:60:a0:b2:86:70:5a:03:d9:aa:d0:81:9a:c7:73:
                    ad:ec:13:dc:30:ab:e1:af:6e:52:95:4e:e8:70:22:
                    1f:88:08:a1:5b:38:25:e4:cd:f0:e8:b9:56:ea:c5:
                    02:b7:a5:25:92:6a:a5:c4:a5:2b:bd:c1:5f:01:b8:
                    b9:c3:48:06:18:38:93:49:e9:2b:df:f5:64:a1:09:
                    e7:88:55:e7:5e:60:6f:a1:aa:17:3f:9c:ed:3e:f1:
                    90:e7:23:8f:7b:ba:3a:bf:b4:53:4a:64:aa:5d:d4:
                    08:13:80:70:cb:0f:23:d9:03:ff:b4:a3:db:8a:5d:
                    15:a7:2c:c1:6b:2a:22:fb:f7:09:6d:fa:fe:9c:36:
                    20:d8:0e:e2:64:02:d8:c2:1b:e7:a7:c7:36:2e:c0:
                    16:a7:f7:f9:df:7b:3d:41:d9:e7:8f:70:5d:15:8d:
                    12:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:22:E2:82:B1:C3:2B:D8:9E:A0:78:F2:EC:51:CA:5E:A6:7A:80:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/40a5305c-0054-3894-b2a6-cebc69ec060e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.crl

            X509v3 Authority Key Identifier:
                keyid:0B:C1:1F:4E:79:79:D6:3F:8B:E2:4A:B8:4F:99:21:03:79:42:69:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ed40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:36:fb:57:a1:ba:f6:be:f0:eb:c1:45:31:28:2b:6a:bb:5d:
         e3:e2:3d:2b:d3:20:9d:30:be:a8:7e:1d:94:52:15:ee:01:dd:
         d4:8f:3f:ff:07:03:53:75:0b:81:0b:24:30:2e:1a:8b:61:eb:
         e4:dc:b4:39:20:b8:1f:42:06:88:cb:24:7a:6f:5c:0b:6d:36:
         be:39:cf:6c:86:fa:c5:4b:59:aa:a5:44:74:e3:ad:4c:df:0e:
         12:17:1d:18:cf:2d:34:e3:20:1e:bc:2a:f0:1e:2c:d0:d7:68:
         3b:ab:78:ac:2e:8f:f7:22:b3:94:46:cf:2b:db:de:c1:dd:3e:
         0d:29:06:58:de:fa:13:7c:c2:e1:5f:37:45:78:16:4a:8b:04:
         80:39:6a:a4:7f:6c:44:0b:92:61:4b:12:e2:70:04:63:a2:05:
         b7:03:ba:a1:11:57:35:a5:83:55:16:59:52:5c:aa:d1:cb:20:
         be:01:45:29:9d:cf:34:96:8c:4a:9a:83:41:02:13:0e:d6:4b:
         9b:ee:57:8d:30:22:90:90:d4:fe:b9:a7:a3:a7:96:96:bd:36:
         98:35:36:fd:fb:20:91:55:ad:56:5f:95:5c:e8:ed:8b:4f:70:
         0d:41:27:ff:71:76:b3:60:ef:70:ff:fe:c6:a2:1c:73:80:c8:
         a7:b8:cd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----