Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630633a3a2f34372d3437203d3e20323030373735.roa
File:                     323630323a666166643a6630633a3a2f34372d3437203d3e20323030373735.roa (raw, json)
Hash identifier:          YpwHi2nUVvrSZvLTpdyk0AUWV+9Y+pfHeM10a+2Q4L8=
Subject key identifier:   FB:99:B9:D6:18:C1:C8:91:A1:10:82:CD:E2:3E:36:A7:E8:C3:D3:44
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       182C16AC27FDE60282D6948089776B5FDD68607C
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630633a3a2f34372d3437203d3e20323030373735.roa
Signing time:             Wed 16 Oct 2024 12:45:22 +0000
ROA not before:           Wed 16 Oct 2024 12:40:22 +0000
ROA not after:            Wed 15 Oct 2025 12:45:22 +0000
asID:                     200775
IP address blocks:        2602:fafd:f0c::/47 maxlen: 47
Validation:               Failed, certificate revoked on Thu 19 Dec 2024 10:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:2c:16:ac:27:fd:e6:02:82:d6:94:80:89:77:6b:5f:dd:68:60:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Oct 16 12:40:22 2024 GMT
            Not After : Oct 15 12:45:22 2025 GMT
        Subject: CN=FB99B9D618C1C891A11082CDE23E36A7E8C3D344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7a:12:f8:88:dd:df:e7:3b:bb:60:71:db:10:
                    53:68:a3:0e:43:17:ba:06:5a:24:d0:42:ba:b2:58:
                    08:86:1b:75:f1:ea:63:23:64:a9:4e:2f:5a:1e:a9:
                    19:c3:3a:68:2a:e9:19:64:25:f9:2b:8c:2c:55:1f:
                    d1:0b:90:03:8a:39:e5:53:78:4b:6e:96:db:2a:7c:
                    4a:39:d6:b6:8b:4d:72:1e:6d:68:d0:8c:d1:8e:b7:
                    e8:44:f7:12:de:eb:98:8b:e0:4c:35:b3:51:ee:27:
                    ba:0e:36:54:b8:fd:e9:92:8b:db:d4:19:2e:e8:8f:
                    9d:ed:b3:6e:d7:4b:b8:4e:72:73:99:a2:71:69:4f:
                    93:68:52:57:ec:84:41:c9:b0:99:78:16:98:73:c8:
                    f7:50:a4:33:9d:36:88:13:a4:22:50:6d:00:d9:03:
                    a8:3a:59:28:d7:ff:92:ce:8f:fa:ee:be:c9:27:0c:
                    41:ca:e2:74:fc:a3:3e:21:23:07:2c:f6:e7:8d:6b:
                    d6:9a:82:c2:05:25:cf:2f:52:77:e9:77:6d:28:f8:
                    2c:00:f9:a8:aa:89:78:eb:ae:92:e8:f1:9d:d0:93:
                    32:f3:f5:55:cf:79:af:06:b2:cd:42:d8:63:26:78:
                    77:23:2a:dd:2f:fd:c8:cc:f0:e3:e6:79:1d:c1:9c:
                    60:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:99:B9:D6:18:C1:C8:91:A1:10:82:CD:E2:3E:36:A7:E8:C3:D3:44
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630633a3a2f34372d3437203d3e20323030373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f0c::/47

    Signature Algorithm: sha256WithRSAEncryption
         b2:d8:45:89:0e:f9:c2:6d:b2:dc:76:7c:13:15:83:d5:b1:2c:
         70:92:6d:de:f9:85:05:d9:b4:83:08:43:24:0c:2f:e9:8d:6b:
         36:98:3f:f8:c2:14:d4:1e:b5:a4:2e:9a:96:0f:4d:18:45:a9:
         14:26:5a:0d:31:2e:d1:5f:8d:6e:0e:00:1d:ca:74:c2:30:09:
         17:83:7b:1a:c9:49:de:50:20:5e:88:e7:be:4b:ab:9f:68:72:
         47:b1:d2:b6:43:a4:73:e2:75:a4:83:8e:3c:78:10:33:ab:da:
         d8:9f:38:fc:6c:d4:da:ef:be:93:85:87:2f:32:01:02:25:aa:
         8a:85:9b:22:30:c8:ae:a9:4a:7c:2b:9e:d2:36:50:82:21:f3:
         55:7e:32:12:53:71:83:02:7f:ca:60:15:b9:7c:94:e5:a5:f3:
         ec:8a:54:35:ff:82:11:80:62:61:f7:77:78:18:3f:55:fd:7d:
         4e:67:68:e8:1e:35:f4:f5:f8:a7:de:b8:2f:63:bf:42:51:ad:
         74:90:fe:ee:7c:5b:91:9e:41:1d:c4:dd:72:97:21:ba:4f:bf:
         65:df:a5:6c:15:a0:e9:4d:2e:9d:c3:4a:03:59:79:d8:f9:16:
         b5:06:48:32:cf:3c:e8:e6:35:5b:cc:30:67:11:be:49:86:e4:
         70:68:e9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----