Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630313a3a2f34382d3438203d3e20323033363335.roa
File:                     323630323a666166643a6630313a3a2f34382d3438203d3e20323033363335.roa (raw, json)
Hash identifier:          Ebx17Cet1GYDSRaTw6X4SoQ0bEULC8ZxbvJc1id2bLA=
Subject key identifier:   F1:68:B6:B3:91:62:08:84:54:D3:A2:0E:D5:4B:BE:8F:7D:55:FF:AE
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       6021CD7280CE61028D7C538C8DA4E26B062D81B9
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630313a3a2f34382d3438203d3e20323033363335.roa
Signing time:             Wed 21 Dec 2022 22:13:51 +0000
ROA not before:           Wed 21 Dec 2022 22:08:51 +0000
ROA not after:            Wed 20 Dec 2023 22:13:51 +0000
asID:                     203635
IP address blocks:        2602:fafd:f01::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:21:cd:72:80:ce:61:02:8d:7c:53:8c:8d:a4:e2:6b:06:2d:81:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Dec 21 22:08:51 2022 GMT
            Not After : Dec 20 22:13:51 2023 GMT
        Subject: CN=F168B6B39162088454D3A20ED54BBE8F7D55FFAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:81:4c:9f:d6:1e:79:ae:ca:c0:70:f2:56:fc:
                    1c:0e:cd:73:85:84:07:9c:f3:c0:9e:2f:fe:00:da:
                    c9:ab:5a:62:f4:79:5d:1a:60:77:e8:9d:c3:c8:41:
                    3b:6d:79:38:18:d9:3d:33:76:77:0b:89:06:76:9b:
                    a3:50:90:93:97:b4:e3:4e:1f:3a:dc:9b:6e:51:6f:
                    df:93:da:9f:c4:86:db:eb:e1:c5:b1:68:5e:dd:a0:
                    7e:7f:ef:bd:6f:80:22:94:b7:6d:20:66:ee:a2:6d:
                    02:e9:3d:5c:1a:74:eb:0f:2d:c8:fc:35:28:e8:10:
                    e0:f7:42:57:ed:b6:f8:da:b6:d5:b4:b8:1f:78:b0:
                    42:c7:59:95:61:97:e1:aa:8a:a7:fd:6e:89:4c:9a:
                    c4:61:df:64:24:13:12:7d:5a:f1:a8:af:68:02:c2:
                    67:cc:1c:7e:0f:68:75:2c:a6:f0:ee:f1:50:fb:52:
                    10:55:be:f1:09:98:33:d7:af:3a:fb:8b:8f:e6:af:
                    82:78:6e:a7:14:e5:27:57:54:b7:89:93:1a:9a:66:
                    29:67:2e:86:64:30:30:c8:9d:59:46:3c:f6:7e:c3:
                    64:52:ad:bb:d3:7d:bf:c5:14:f7:d9:a4:bb:7d:77:
                    94:93:e6:46:8a:67:12:f3:f7:65:4d:2a:ea:cb:f0:
                    95:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:68:B6:B3:91:62:08:84:54:D3:A2:0E:D5:4B:BE:8F:7D:55:FF:AE
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630313a3a2f34382d3438203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f01::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:55:3d:6f:14:02:b7:3c:15:0c:aa:0b:2b:f9:ca:e0:89:53:
         54:44:7a:91:08:2d:ae:ea:86:76:dc:ad:1e:5a:89:fb:df:53:
         c8:1c:92:14:16:40:9d:f2:9c:cb:6d:2f:cd:b7:58:d6:4d:ba:
         ac:44:0c:cc:1e:99:b3:ba:a2:91:59:32:b1:f5:fd:e0:d1:ac:
         a3:06:9b:66:63:67:f3:b5:2c:a2:40:49:50:66:3d:5c:ea:be:
         50:6e:1a:b9:75:6b:e1:eb:c9:3d:b5:df:96:98:a0:dc:5a:20:
         ae:58:22:02:d6:db:42:4a:29:b3:74:3b:b3:5e:52:c0:1d:0d:
         3b:de:9c:82:bf:61:a8:42:fc:92:e3:8e:4e:ba:09:21:e8:84:
         d1:7a:e5:23:2f:4c:ed:f0:3f:ca:17:78:d0:38:32:b8:7e:da:
         3e:e8:b5:84:35:97:7b:ce:f3:87:d7:6c:8b:91:8d:cd:45:ef:
         9f:03:6a:d6:58:5f:ed:f2:1d:40:31:89:cc:ca:b0:92:60:af:
         0a:4f:58:de:63:f7:68:9b:63:d6:97:13:a0:f9:e0:76:db:64:
         a1:49:f7:19:3d:c4:7a:fb:04:1c:09:ca:50:c5:a1:f6:41:e1:
         87:a5:f7:2c:a5:1d:7d:18:66:f9:fa:94:04:88:7f:19:71:8d:
         25:07:95:58
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUYCHNcoDOYQKNfFOMjaTiawYtgbkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhhY2I1MDZh
OTA0OTU5YmIxOGIwM2RlNzgwHhcNMjIxMjIxMjIwODUxWhcNMjMxMjIwMjIxMzUx
WjAzMTEwLwYDVQQDEyhGMTY4QjZCMzkxNjIwODg0NTREM0EyMEVENTRCQkU4RjdE
NTVGRkFFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4FMn9Yeea7K
wHDyVvwcDs1zhYQHnPPAni/+ANrJq1pi9HldGmB36J3DyEE7bXk4GNk9M3Z3C4kG
dpujUJCTl7TjTh863JtuUW/fk9qfxIbb6+HFsWhe3aB+f++9b4AilLdtIGbuom0C
6T1cGnTrDy3I/DUo6BDg90JX7bb42rbVtLgfeLBCx1mVYZfhqoqn/W6JTJrEYd9k
JBMSfVrxqK9oAsJnzBx+D2h1LKbw7vFQ+1IQVb7xCZgz1686+4uP5q+CeG6nFOUn
V1S3iZMammYpZy6GZDAwyJ1ZRjz2fsNkUq27032/xRT32aS7fXeUk+ZGimcS8/dl
TSrqy/CVewIDAQABo4ICjzCCAoswHQYDVR0OBBYEFPFotrORYgiEVNOiDtVLvo99
Vf+uMB8GA1UdIwQYMBaAFOUYfU2odhnT27l1DoPRnlt/gDJxMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8xL0U1MTg3RDREQTg3NjE5RDNEQkI5NzUw
RTgzRDE5RTVCN0Y4MDMyNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRhODA5NC1hNGEwLTQ4
MjItOWJhYy01YzVhODNhZmNhM2QvNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhh
Y2I1MDZhOTA0OTU5YmIxOGIwM2RlNzguY2VyMIGTBggrBgEFBQcBCwSBhjCBgzCB
gAYIKwYBBQUHMAuGdHJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzEvMzIzNjMwMzIzYTY2NjE2NjY0M2E2NjMwMzEzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMjMwMzMzNjMzMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvr9DwEw
DQYJKoZIhvcNAQELBQADggEBAKVVPW8UArc8FQyqCyv5yuCJU1REepEILa7qhnbc
rR5aifvfU8gckhQWQJ3ynMttL823WNZNuqxEDMwembO6opFZMrH1/eDRrKMGm2Zj
Z/O1LKJASVBmPVzqvlBuGrl1a+HryT2135aYoNxaIK5YIgLW20JKKbN0O7NeUsAd
DTvenIK/YahC/JLjjk66CSHohNF65SMvTO3wP8oXeNA4Mrh+2j7otYQ1l3vO84fX
bIuRjc1F758DatZYX+3yHUAxiczKsJJgrwpPWN5j92ibY9aXE6D54HbbZKFJ9xk9
xHr7BBwJylDFofZB4Yel9yylHX0YZvn6lASIfxlxjSUHlVg=
-----END CERTIFICATE-----