Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/c4367ba4-56ce-3926-8737-4e0e8c306710.roa
File:                     c4367ba4-56ce-3926-8737-4e0e8c306710.roa (raw, json)
Hash identifier:          YOiM+XbE4P8Jxsqjb33COjHpY80eYePSG55D9Wb3Afk=
Subject key identifier:   0D:E1:F6:E9:17:3B:4A:C9:BD:5B:41:A4:12:42:5B:A6:FF:23:A9:E3
Certificate issuer:       /CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Certificate serial:       010D0C9F4328576D51CC73C042CFC168ED8240D6
Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/c4367ba4-56ce-3926-8737-4e0e8c306710.roa
Signing time:             Thu 14 Feb 2019 19:36:03 +0000
ROA not before:           Wed 13 Feb 2019 05:00:00 +0000
ROA not after:            Tue 13 Feb 2029 05:00:00 +0000
asID:                     803
IP address blocks:        2607:f4a8::/32 maxlen: 48
                          2604:1e80::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:68:ed:82:40:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1
        Validity
            Not Before: Feb 13 05:00:00 2019 GMT
            Not After : Feb 13 05:00:00 2029 GMT
        Subject: CN=d7c055ef-05e0-4d50-a1a2-d9266a57799b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:d8:93:bd:1a:4f:4f:07:70:ce:5b:e7:75:
                    3e:f5:bf:97:dd:94:92:ec:2c:3a:65:6e:9a:3f:5e:
                    6b:ce:8c:5d:d3:e7:da:4c:06:b1:5e:06:49:5b:7f:
                    48:db:3f:ca:d9:81:0b:e5:6b:03:c9:5c:eb:9c:40:
                    0c:b0:d8:34:b5:e5:12:47:47:bb:84:3e:a2:b5:35:
                    fd:fa:a4:62:66:26:0f:48:c7:ad:7a:74:b6:de:10:
                    5a:14:ce:4a:5a:78:4d:d2:db:29:9b:56:3d:dd:b7:
                    e1:e3:ab:b3:68:7f:9b:3b:7d:fa:b7:71:50:c4:4e:
                    b9:ac:dc:08:ca:b0:d8:6b:52:dc:75:ce:24:73:24:
                    75:2b:e1:15:93:ff:8f:99:ff:e9:4e:47:f3:7c:cf:
                    9d:71:b6:07:ba:4b:7b:27:88:81:a1:c5:44:19:05:
                    9b:99:3c:14:ca:fc:81:37:47:18:61:d5:c0:03:09:
                    0f:99:82:14:a3:cb:40:af:87:f0:91:06:6f:c8:45:
                    67:3c:99:1c:7b:ec:78:a7:ba:c1:94:2b:aa:b9:5e:
                    81:7b:46:68:c5:87:87:22:24:2f:83:53:b9:bf:e1:
                    f2:c6:d2:46:3d:23:c0:c8:4f:67:11:96:f6:99:15:
                    8b:1f:bb:1c:21:1d:ca:be:d1:e3:77:c4:22:83:35:
                    29:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E1:F6:E9:17:3B:4A:C9:BD:5B:41:A4:12:42:5B:A6:FF:23:A9:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/c4367ba4-56ce-3926-8737-4e0e8c306710.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl

            X509v3 Authority Key Identifier:
                keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1e80::/32
                  2607:f4a8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:72:de:5a:96:ec:36:ed:a7:d2:9a:17:6d:86:a9:5b:fa:a5:
         49:dd:78:8a:71:7a:ab:ea:62:2a:78:24:1f:b9:eb:a2:78:c2:
         12:25:b8:66:b8:38:b6:46:6d:69:cc:22:12:bb:60:6e:00:f0:
         16:d0:f7:d6:93:7c:a2:fc:ab:71:ca:1c:24:bd:ca:fc:ed:3d:
         38:07:41:db:99:a9:c3:1f:f6:e4:30:b3:3e:63:51:37:79:07:
         81:cc:8a:cc:d0:c3:6a:56:d2:d0:7d:e1:0e:2b:49:9d:21:92:
         bf:c2:4f:15:0e:89:25:56:11:ab:3d:a0:3b:e4:d6:60:45:bc:
         38:36:25:80:83:be:e6:c8:d0:5e:00:41:2d:e0:47:81:43:b3:
         48:fb:fb:39:bf:f1:e1:57:e9:1c:de:64:d3:8e:84:c2:9e:c9:
         d5:76:24:3d:9f:06:a3:01:e9:30:c1:ec:62:f8:75:38:d8:55:
         aa:19:f0:cf:a9:75:ef:bc:c6:6a:80:58:7e:a5:51:f0:8d:6f:
         08:ed:d1:3d:5b:9e:f2:32:4d:9d:b5:16:23:e7:33:22:d8:87:
         03:70:8c:86:b8:e4:ae:6c:37:46:bf:52:1f:51:e1:b2:af:0d:
         43:1d:a9:03:8e:f9:9e:a0:22:1a:2e:1f:6b:33:c5:66:31:84:
         16:df:0b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----