Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132383a3a2f34382d3438203d3e203537313536.roa
File:                     323630323a666131633a3132383a3a2f34382d3438203d3e203537313536.roa (raw, json)
Hash identifier:          DHYGgph7UTxBc8ngpRpu0GZlZjiyu2CLuHZ+75J+kw4=
Subject key identifier:   51:B5:CC:0F:E6:D8:63:FE:4F:79:77:CA:E0:13:0A:18:D0:6C:86:74
Certificate issuer:       /CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
Certificate serial:       20E93532EFCB0CF8E3190F1EE015943902CEEE2C
Authority key identifier: EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132383a3a2f34382d3438203d3e203537313536.roa
Signing time:             Mon 18 Dec 2023 22:28:32 +0000
ROA not before:           Mon 18 Dec 2023 22:23:32 +0000
ROA not after:            Mon 16 Dec 2024 22:28:32 +0000
asID:                     57156
IP address blocks:        2602:fa1c:128::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 20 Jun 2024 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e9:35:32:ef:cb:0c:f8:e3:19:0f:1e:e0:15:94:39:02:ce:ee:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
        Validity
            Not Before: Dec 18 22:23:32 2023 GMT
            Not After : Dec 16 22:28:32 2024 GMT
        Subject: CN=51B5CC0FE6D863FE4F7977CAE0130A18D06C8674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:01:4d:d4:75:2a:9d:0f:8e:5e:77:b0:67:03:
                    35:20:1d:fa:a4:b8:23:7a:c5:75:a6:4a:81:eb:75:
                    d0:7e:df:4f:12:d0:46:de:28:4e:c3:3a:47:83:bb:
                    d3:67:a8:6b:b3:f5:80:e4:2e:74:52:82:fd:82:ef:
                    14:93:09:74:f7:82:60:41:11:02:7b:f8:ea:c8:2b:
                    a3:41:01:2c:5f:17:ec:d1:d7:6d:52:23:1a:53:de:
                    70:8b:0a:61:0f:c1:83:c0:ce:a0:fc:00:a0:ff:e7:
                    3d:4f:46:46:5c:5f:57:32:e7:9a:4f:76:4a:27:56:
                    87:08:08:54:d1:2f:c8:ab:a0:c6:34:2e:11:17:24:
                    50:98:67:ff:87:1a:49:d9:3a:2c:28:de:bf:85:85:
                    ad:d2:f7:7d:a2:c6:ce:01:52:66:69:1c:29:66:42:
                    bd:99:35:44:0e:b7:fb:87:10:9b:3a:3c:d2:c2:0a:
                    06:18:d1:9e:d6:67:e4:d2:d8:90:bc:e8:bc:d5:85:
                    97:05:c5:d0:90:97:c0:2d:1f:30:10:b4:0d:ce:17:
                    3e:54:17:95:71:c0:72:94:87:19:f3:3d:50:1e:1e:
                    3d:b1:39:fd:01:63:e0:38:36:33:0b:77:52:14:1a:
                    f0:cd:a1:bd:67:ea:94:fe:3c:7c:1a:64:82:3f:0d:
                    d3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B5:CC:0F:E6:D8:63:FE:4F:79:77:CA:E0:13:0A:18:D0:6C:86:74
            X509v3 Authority Key Identifier:
                keyid:EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/EC95745C2559943ACE439574C9868665E1688B08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132383a3a2f34382d3438203d3e203537313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa1c:128::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:88:62:07:af:45:58:1d:8e:44:d8:4d:0f:54:1c:ea:ba:63:
         f0:7e:2d:96:59:96:e2:5b:66:eb:ae:c8:a9:23:d3:5a:2d:80:
         bc:97:99:11:6d:9c:91:90:f3:a6:39:fa:f9:e9:6f:97:6a:da:
         f7:a0:8c:30:52:96:db:43:52:21:fc:f4:b9:ab:6e:3f:10:b6:
         a9:f1:3e:9e:60:36:1f:19:2d:6c:04:92:65:3f:ec:8a:9e:1c:
         cc:07:ec:e5:75:40:c8:b4:16:64:7f:aa:19:d4:0b:69:83:5d:
         a2:8d:15:33:5b:88:be:5b:2c:7f:9d:ca:0c:bc:00:84:b6:0b:
         8c:1c:56:cc:15:c3:1a:e0:8b:3a:87:83:d9:eb:80:c3:a0:81:
         43:cb:7b:26:87:99:09:7c:f1:5a:67:ba:58:3f:39:5d:2d:29:
         bb:18:44:16:a9:c3:d0:71:b5:21:fa:25:0b:b6:f8:01:f7:57:
         d3:f4:eb:8d:67:44:39:df:97:98:a1:d4:7c:f8:3b:aa:da:25:
         2d:8a:91:07:eb:3c:55:f6:ec:b0:d1:0f:49:c3:5b:7c:e6:c3:
         f6:bc:d8:6c:27:0b:a5:ac:3f:ff:bd:2e:b8:c4:a1:9c:16:23:
         8c:2a:1f:2a:2a:6d:e0:7b:c2:06:02:76:a5:4f:9d:95:c2:29:
         39:95:3c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----