Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/323630343a613334303a383030303a3a2f33332d3333203d3e203534343736.roa
File:                     323630343a613334303a383030303a3a2f33332d3333203d3e203534343736.roa (raw, json)
Hash identifier:          SOUjFvySck6Vjd0L3vclmFVaf3t6Dw5qoxEEL4AOctg=
Subject key identifier:   D6:C4:60:06:04:88:55:60:95:C5:1A:32:2B:71:01:1D:6E:EF:93:29
Certificate issuer:       /CN=63ef6ba7c75b0732465686b4f94bffe5c8f62e466a4f048b0a
Certificate serial:       522AA29B927E48579CF90BFA4B1860D42BD9D840
Authority key identifier: E5:2C:37:7F:6C:65:01:F9:CA:9E:EB:01:8F:66:22:B1:DC:E9:86:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/63ef6ba7c75b0732465686b4f94bffe5c8f62e466a4f048b0a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/323630343a613334303a383030303a3a2f33332d3333203d3e203534343736.roa
Signing time:             Tue 11 Jul 2023 00:12:20 +0000
ROA not before:           Tue 11 Jul 2023 00:07:20 +0000
ROA not after:            Tue 09 Jul 2024 00:12:20 +0000
asID:                     54476
IP address blocks:        2604:a340:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 18 Oct 2023 17:42:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:2a:a2:9b:92:7e:48:57:9c:f9:0b:fa:4b:18:60:d4:2b:d9:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63ef6ba7c75b0732465686b4f94bffe5c8f62e466a4f048b0a
        Validity
            Not Before: Jul 11 00:07:20 2023 GMT
            Not After : Jul  9 00:12:20 2024 GMT
        Subject: CN=D6C460060488556095C51A322B71011D6EEF9329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:21:4c:4c:72:5e:a0:28:4c:d7:5e:e1:19:0b:
                    92:5f:f1:fb:1a:8f:d4:e5:f0:8b:81:52:92:92:44:
                    46:76:24:ef:b4:1d:13:02:2f:16:ad:a7:5a:74:aa:
                    78:7b:f0:35:85:43:47:67:6a:7d:26:9f:79:72:a7:
                    2c:6a:ef:19:9b:75:a3:51:bf:20:c9:d1:dd:52:fd:
                    57:8a:b4:32:d6:73:00:89:52:49:bf:56:a9:3c:19:
                    f5:e0:ae:61:3f:b9:2e:a6:08:cb:5f:96:e9:f8:31:
                    ff:4a:d7:91:b8:4b:49:67:91:61:df:aa:53:94:0e:
                    5b:76:9f:a1:8a:5d:09:f7:ce:44:bf:6b:d6:34:75:
                    b2:de:09:08:65:b1:a8:8e:3e:0a:76:aa:c2:dd:ad:
                    ee:ac:f7:21:b3:9f:fc:d1:ce:75:ec:be:b1:8f:b3:
                    ca:39:be:81:df:e8:fd:4f:38:da:4d:ca:0c:00:41:
                    ad:57:05:71:1c:3a:b0:b6:8e:39:f1:d1:d4:e0:c6:
                    eb:be:1c:5a:2f:6a:a3:65:bc:e4:2b:79:a7:d6:b5:
                    ca:f5:2c:76:e5:15:68:a8:57:3c:7e:a9:09:61:f8:
                    c4:9b:e5:7b:d2:e0:4b:2c:3e:e1:4b:44:6d:c1:42:
                    d6:52:f9:b3:df:61:16:a1:93:ae:22:23:9f:47:c6:
                    07:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C4:60:06:04:88:55:60:95:C5:1A:32:2B:71:01:1D:6E:EF:93:29
            X509v3 Authority Key Identifier:
                keyid:E5:2C:37:7F:6C:65:01:F9:CA:9E:EB:01:8F:66:22:B1:DC:E9:86:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/E52C377F6C6501F9CA9EEB018F6622B1DCE98600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/63ef6ba7c75b0732465686b4f94bffe5c8f62e466a4f048b0a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/323630343a613334303a383030303a3a2f33332d3333203d3e203534343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a340:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         11:28:50:04:2b:a2:89:ab:1f:6c:1d:c4:8d:7e:1c:43:07:8c:
         36:cd:cf:c9:09:4e:b2:e2:dc:0d:57:fa:91:ad:11:78:f0:db:
         be:b5:c0:a8:8e:c7:0a:16:98:cc:31:a8:a9:3a:29:f7:43:60:
         ae:72:d7:65:68:53:e3:b1:40:38:3e:9b:b5:3b:53:7f:e9:03:
         8e:78:f2:ba:81:b8:5f:2f:da:4c:78:5a:69:ec:58:1b:88:ba:
         31:29:56:4a:76:44:ff:ce:ac:c8:bc:d4:b9:c6:ef:85:4e:46:
         1a:4d:eb:4e:81:0b:d1:03:d3:78:0b:8c:16:ec:db:d0:ea:45:
         13:c3:a0:91:d1:cf:e8:96:1c:4d:38:02:64:84:81:2c:7b:f9:
         d2:db:38:b9:7a:58:7e:8d:41:2d:04:b5:0a:e0:a2:83:79:a3:
         20:bd:fe:9d:7d:57:a2:36:24:a0:53:b4:76:f6:96:f2:aa:ef:
         f9:e0:79:fb:18:c8:e0:aa:0e:24:30:7f:75:51:92:a3:85:da:
         51:e0:05:d1:8c:a4:42:0d:ed:42:97:f7:3d:d1:24:f9:8b:4c:
         18:1a:31:6f:c3:1d:dc:c6:fc:e1:67:a0:be:bd:1e:0e:3d:77:
         e4:dc:e1:40:5c:78:78:09:23:3b:23:4b:4a:50:e6:bd:d4:0a:
         73:03:09:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:39 2024 by rpki-client on console-ams.rpki-client.org