Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a3a2f34382d3438203d3e2039363633.roa
File:                     323630313a316430383a3a2f34382d3438203d3e2039363633.roa (raw, json)
Hash identifier:          lFhCgE/ulX+PGAKapALafMyK6IAfHeqcLWDU412U0kA=
Subject key identifier:   C6:69:55:E0:17:88:16:AA:4E:28:0E:8A:E6:6A:92:E3:B9:0C:D8:7A
Certificate issuer:       /CN=cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf
Certificate serial:       3A935CA151597F63BF8D0B82C35082DC0652AC5A
Authority key identifier: 9A:51:D6:D7:D4:84:FA:0F:C8:55:68:FB:6B:86:E9:1D:8D:F6:F4:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a3a2f34382d3438203d3e2039363633.roa
Signing time:             Sat 03 Aug 2024 09:47:04 +0000
ROA not before:           Sat 03 Aug 2024 09:42:04 +0000
ROA not after:            Sat 02 Aug 2025 09:47:04 +0000
asID:                     9663
IP address blocks:        2601:1d08::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 05 Sep 2024 01:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:93:5c:a1:51:59:7f:63:bf:8d:0b:82:c3:50:82:dc:06:52:ac:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf
        Validity
            Not Before: Aug  3 09:42:04 2024 GMT
            Not After : Aug  2 09:47:04 2025 GMT
        Subject: CN=C66955E0178816AA4E280E8AE66A92E3B90CD87A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e4:cb:40:34:a7:f7:9e:34:4b:ac:ec:d9:05:
                    ec:98:60:55:08:a7:cd:e0:7c:9d:bb:aa:06:e3:6b:
                    f6:4e:51:eb:32:ea:a7:26:df:f3:03:65:a8:8a:c6:
                    57:1c:a9:0e:a7:08:0d:d6:da:f6:4e:18:95:59:ac:
                    a4:0d:35:13:8b:ef:e4:5d:78:c9:2d:31:00:50:a1:
                    14:96:b6:28:58:99:72:98:5c:05:3c:6a:db:ff:8b:
                    04:56:62:c5:61:5d:88:c7:b3:6c:45:dc:e0:24:d8:
                    7d:e4:6d:8c:96:ee:c1:e1:c7:2d:31:6f:af:15:62:
                    62:a1:da:b2:01:bd:67:3b:70:0c:88:65:94:97:7f:
                    57:69:1e:ec:04:39:6f:54:39:07:70:e4:37:a9:4f:
                    c3:3b:c8:a2:67:68:91:11:a4:fb:c1:9c:53:6d:7b:
                    50:1b:12:30:55:fc:8a:ff:75:42:a6:9d:29:60:89:
                    e0:12:09:8c:47:5b:f9:5e:05:8d:26:c8:bf:30:f6:
                    ac:63:93:2d:b1:17:c3:ae:43:f6:0c:f9:0f:5b:76:
                    67:aa:45:28:71:fb:fb:3a:88:d5:00:ac:81:dd:4b:
                    d5:ff:02:f6:a2:a8:60:77:bc:b7:da:8e:4f:5b:46:
                    9a:e9:c4:ce:70:38:47:a1:ae:37:60:c7:24:fe:8f:
                    85:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:69:55:E0:17:88:16:AA:4E:28:0E:8A:E6:6A:92:E3:B9:0C:D8:7A
            X509v3 Authority Key Identifier:
                keyid:9A:51:D6:D7:D4:84:FA:0F:C8:55:68:FB:6B:86:E9:1D:8D:F6:F4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/9A51D6D7D484FA0FC85568FB6B86E91D8DF6F4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a3a2f34382d3438203d3e2039363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d08::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:86:0c:42:6d:77:0c:65:16:58:b5:e9:2b:fa:84:3d:63:cf:
         d7:52:09:c7:78:e7:47:1a:1f:a3:59:85:16:e2:63:a0:28:a5:
         a4:38:3c:9b:a5:85:21:61:8f:b8:52:9d:9f:22:f8:d6:75:76:
         56:63:72:87:41:06:2f:ba:6d:d8:af:3c:63:01:95:e6:0f:8a:
         9a:22:28:87:15:58:cc:96:da:43:f4:de:66:6e:e9:30:17:35:
         54:bb:ca:83:ab:58:ee:cc:94:9d:1f:75:bf:5a:3f:23:8d:96:
         a9:26:94:00:de:14:f2:c3:e2:be:2c:b1:b7:7d:93:21:56:dd:
         07:99:7e:10:16:3a:e5:73:38:71:b1:c5:5c:6d:67:79:51:94:
         92:6d:72:96:59:d4:02:43:46:42:e4:20:db:47:cd:17:f3:fc:
         e1:50:89:3e:66:fe:e4:a1:48:c9:4e:c0:ca:4a:fb:6b:1f:4f:
         f0:82:27:fa:dd:6d:a9:12:e6:9b:48:3c:83:15:68:f2:55:b8:
         79:e6:c3:d3:ff:12:7d:1e:3b:37:75:28:5f:86:2d:67:91:a2:
         c0:f0:3b:c3:5e:a5:2e:b5:cd:b4:0c:db:fe:29:a0:9c:52:21:
         ff:f1:ea:c4:79:47:10:89:13:d3:5b:40:34:2f:5c:65:bd:47:
         64:a1:38:36
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUOpNcoVFZf2O/jQuCw1CC3AZSrFowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyY2YyYzQ4MzAwZjg0MWRmMzJiYmU5MjU2MDMzMjE5M2U0
MTNmMDViZjQyODJkYzU4Y2YwHhcNMjQwODAzMDk0MjA0WhcNMjUwODAyMDk0NzA0
WjAzMTEwLwYDVQQDEyhDNjY5NTVFMDE3ODgxNkFBNEUyODBFOEFFNjZBOTJFM0I5
MENEODdBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+TLQDSn9540
S6zs2QXsmGBVCKfN4Hydu6oG42v2TlHrMuqnJt/zA2WoisZXHKkOpwgN1tr2ThiV
WaykDTUTi+/kXXjJLTEAUKEUlrYoWJlymFwFPGrb/4sEVmLFYV2Ix7NsRdzgJNh9
5G2Mlu7B4cctMW+vFWJiodqyAb1nO3AMiGWUl39XaR7sBDlvVDkHcOQ3qU/DO8ii
Z2iREaT7wZxTbXtQGxIwVfyK/3VCpp0pYIngEgmMR1v5XgWNJsi/MPasY5MtsRfD
rkP2DPkPW3ZnqkUocfv7OojVAKyB3UvV/wL2oqhgd7y32o5PW0aa6cTOcDhHoa43
YMck/o+FLQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFMZpVeAXiBaqTigOiuZqkuO5
DNh6MB8GA1UdIwQYMBaAFJpR1tfUhPoPyFVo+2uG6R2N9vSoMA4GA1UdDwEB/wQE
AwIHgDCBhgYDVR0fBH8wfTB7oHmgd4Z1cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMzNkYmRlY2M0ZmE0LzE4
LzlBNTFENkQ3RDQ4NEZBMEZDODU1NjhGQjZCODZFOTFEOERGNkY0QTguY3JsMIHz
BggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJp
bi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNl
LWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJk
MmE4MzM3ZC9jOWFiMjdhNi03NjIyLTQ4ZWMtOWUzMy0xNTJiYWIyYjRhMmIvY2Yy
YzQ4MzAwZjg0MWRmMzJiYmU5MjU2MDMzMjE5M2U0MTNmMDViZjQyODJkYzU4Y2Yu
Y2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMz
ZGJkZWNjNGZhNC8xOC8zMjM2MzAzMTNhMzE2NDMwMzgzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzOTM2MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYBHQgAADANBgkqhkiG9w0BAQsF
AAOCAQEApoYMQm13DGUWWLXpK/qEPWPP11IJx3jnRxofo1mFFuJjoCilpDg8m6WF
IWGPuFKdnyL41nV2VmNyh0EGL7pt2K88YwGV5g+KmiIohxVYzJbaQ/TeZm7pMBc1
VLvKg6tY7syUnR91v1o/I42WqSaUAN4U8sPiviyxt32TIVbdB5l+EBY65XM4cbHF
XG1neVGUkm1yllnUAkNGQuQg20fNF/P84VCJPmb+5KFIyU7Aykr7ax9P8IIn+t1t
qRLmm0g8gxVo8lW4eebD0/8SfR47N3UoX4YtZ5GiwPA7w16lLrXNtAzb/imgnFIh
//HqxHlHEIkT01tANC9cZb1HZKE4Ng==
-----END CERTIFICATE-----