Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594/73899d1a-0d77-3da0-ba9e-26b9b4eb3443.roa
File:                     73899d1a-0d77-3da0-ba9e-26b9b4eb3443.roa (raw, json)
Hash identifier:          A98n8m4bkWxP29MhHZq9OsRa/QOPBWgYUZx8dfgZlDY=
Subject key identifier:   CC:36:65:A0:E3:47:37:A1:94:48:F4:4C:59:EB:FC:48:B2:B3:E6:D3
Certificate issuer:       /CN=ef238680-20ad-47df-89b5-7a55fae68594
Certificate serial:       010D0C9F432858424DDDB2A9AC2AC0E4DF015E00
Authority key identifier: 7C:FF:73:AC:9D:6E:BC:1D:25:7E:CD:8F:CE:E9:51:B2:B7:6A:F4:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594/73899d1a-0d77-3da0-ba9e-26b9b4eb3443.roa
Signing time:             Thu 22 Jun 2023 12:49:12 +0000
ROA not before:           Thu 22 Jun 2023 12:49:12 +0000
ROA not after:            Wed 20 Sep 2023 12:49:12 +0000
asID:                     53283
IP address blocks:        2607:33c0:c0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:4d:dd:b2:a9:ac:2a:c0:e4:df:01:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef238680-20ad-47df-89b5-7a55fae68594
        Validity
            Not Before: Jun 22 12:49:12 2023 GMT
            Not After : Sep 20 12:49:12 2023 GMT
        Subject: CN=1923d2ad-ffb8-431f-8e9b-b9fbb0dbfb18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:66:6c:e9:fb:03:a6:db:55:54:e8:cf:bd:01:
                    2b:0b:9f:2b:85:ed:24:7d:1f:d5:ef:71:86:b1:68:
                    d0:9d:3e:13:c8:0a:8b:8e:11:3f:bf:c7:8f:71:c1:
                    c4:f7:72:88:61:67:cf:38:eb:45:33:2d:78:0d:d2:
                    fa:ae:35:7c:fc:3c:69:24:ec:cc:f4:24:6a:fe:a7:
                    47:e3:9c:94:52:8d:69:c7:8e:c0:02:2a:1d:15:f0:
                    1d:e9:b0:62:d6:5a:47:a5:e5:13:f9:29:c1:1f:fe:
                    0d:60:00:a4:69:d0:c0:78:96:dd:ba:bc:bf:cc:73:
                    7a:55:71:43:fd:42:3b:c2:da:01:2b:b9:4a:9a:31:
                    3c:af:35:87:a0:ca:eb:20:da:66:5e:1e:ac:82:02:
                    b8:b3:d5:36:ab:bd:67:44:52:9c:b0:02:5b:a2:10:
                    0f:b8:01:2f:04:93:b8:85:e7:e3:a9:88:82:e4:52:
                    8d:16:3b:ef:bb:13:e2:0a:02:3b:2d:e9:b3:7e:76:
                    1b:f2:d1:48:79:6d:41:79:94:59:76:66:31:a6:69:
                    61:7c:e4:ee:ee:30:d6:8f:0e:e3:86:89:b6:18:86:
                    74:4d:22:15:42:db:78:27:10:ac:0b:f6:a1:72:90:
                    1c:a7:d3:b9:98:9a:f6:11:e0:4c:f3:98:63:97:df:
                    59:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:36:65:A0:E3:47:37:A1:94:48:F4:4C:59:EB:FC:48:B2:B3:E6:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594/73899d1a-0d77-3da0-ba9e-26b9b4eb3443.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594/ef238680-20ad-47df-89b5-7a55fae68594.crl

            X509v3 Authority Key Identifier:
                keyid:7C:FF:73:AC:9D:6E:BC:1D:25:7E:CD:8F:CE:E9:51:B2:B7:6A:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:33c0:c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:8e:90:e1:62:f4:71:7b:d4:1d:03:ab:77:96:2c:e2:3c:9c:
         d1:26:37:7b:0f:56:d6:35:ea:1e:2a:60:ed:8a:1f:5a:d6:6d:
         ad:ec:d5:2a:7d:16:87:db:2d:a6:aa:a2:5c:75:b1:07:49:94:
         f4:03:ba:3c:38:e2:ce:1c:09:cf:a2:ef:c7:b4:b4:bb:38:99:
         63:cd:96:84:14:0e:c0:05:7b:2e:68:28:d0:cf:89:c5:10:99:
         fe:93:2d:d2:13:2e:2e:93:49:c0:39:51:88:45:24:9c:87:5b:
         45:2b:20:e8:45:e0:17:80:be:2e:95:5f:4d:59:e3:62:dd:f7:
         db:57:d1:6a:b8:14:2b:13:b9:22:77:da:87:22:af:a0:69:98:
         7d:ad:14:57:22:b5:66:81:9e:00:b9:1e:4b:c7:f4:88:96:75:
         b6:21:b5:84:b9:de:f7:48:0e:e8:fe:92:f5:11:70:c1:bc:f0:
         35:b0:0c:0c:ad:91:29:6e:65:b2:f8:73:da:57:c5:86:16:c6:
         c2:d7:ba:a9:89:dc:09:f1:58:3e:f2:72:82:a8:bf:47:88:e9:
         85:2f:72:33:7c:ce:3f:92:4e:c2:69:78:bc:7f:e8:b5:ab:82:
         ba:70:c3:46:b6:11:85:15:5f:3e:6b:40:bf:8c:8f:ae:2d:9e:
         15:94:df:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----