Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203438353831.roa
File:                     323630323a666139623a63303a3a2f34382d3438203d3e203438353831.roa (raw, json)
Hash identifier:          M8cCo0MadO+PaZcJzVbhAjrQ6BidS9DQjpy0hT2Fz+I=
Subject key identifier:   E5:0C:C4:EB:33:4D:B8:12:2C:B7:DF:EA:E5:8A:D7:33:03:1F:EE:E9
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       439AB9BA15BC24A73E51136C5B128A5D6773978B
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203438353831.roa
Signing time:             Mon 26 Feb 2024 12:08:48 +0000
ROA not before:           Mon 26 Feb 2024 12:03:48 +0000
ROA not after:            Mon 24 Feb 2025 12:08:48 +0000
asID:                     48581
IP address blocks:        2602:fa9b:c0::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 11:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:9a:b9:ba:15:bc:24:a7:3e:51:13:6c:5b:12:8a:5d:67:73:97:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Feb 26 12:03:48 2024 GMT
            Not After : Feb 24 12:08:48 2025 GMT
        Subject: CN=E50CC4EB334DB8122CB7DFEAE58AD733031FEEE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:98:ba:73:34:44:f2:1e:fa:2c:b6:c0:08:5f:
                    17:31:73:46:14:3d:94:5d:86:de:c3:2e:8c:5b:6c:
                    61:2c:ec:51:20:9e:3b:ee:8e:d3:d9:a6:ca:46:bb:
                    61:44:b2:fc:e4:df:96:6b:2b:f6:a5:c0:87:78:9a:
                    62:e8:72:15:2e:7f:a0:d5:1f:50:ce:00:82:cc:8f:
                    85:d5:42:4c:7c:96:80:0f:d6:48:86:3f:f7:37:8b:
                    23:34:15:72:5a:ef:6a:e0:fa:cf:14:ad:b9:f9:3d:
                    f9:16:7c:40:c7:2f:df:11:6a:55:97:c8:c6:31:08:
                    db:8e:b4:2e:7e:6f:4b:ed:6a:e2:44:49:4d:3e:1c:
                    9e:e7:f0:9d:63:eb:fb:f8:16:23:65:c1:5f:9d:e4:
                    27:80:a0:91:1b:14:1b:fa:92:8b:eb:30:cd:89:f4:
                    90:84:8c:fc:0b:51:ae:b7:cb:c1:f9:b3:e5:17:f8:
                    e1:e3:50:bd:32:9e:31:a6:03:3b:52:d0:d6:45:6a:
                    d1:4d:03:b3:43:d7:09:16:c5:7b:0b:a7:a3:7c:cf:
                    83:55:e2:e2:9d:4c:ed:49:c6:e0:48:06:ca:8e:1a:
                    b6:a8:d5:72:74:a2:54:75:bc:d4:6c:c3:7f:52:c8:
                    b4:fa:e7:a0:6d:19:3a:1b:58:57:f8:29:ed:40:24:
                    23:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0C:C4:EB:33:4D:B8:12:2C:B7:DF:EA:E5:8A:D7:33:03:1F:EE:E9
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:f4:9e:61:8d:44:23:82:91:6f:56:95:89:4b:44:29:03:44:
         83:15:b1:ea:08:40:f2:cf:cd:91:06:f4:38:11:21:04:21:39:
         03:87:14:a1:d4:30:eb:38:41:07:73:42:44:ef:92:4b:00:01:
         5a:04:db:6d:2f:c9:03:38:ee:65:1a:c2:3f:5b:27:d4:5d:c0:
         53:e1:3d:68:de:f3:a9:76:1b:c7:b7:e2:9e:e9:8c:ce:1a:3c:
         12:ad:71:f2:3c:5a:a3:bc:39:84:f1:55:bd:30:2e:cc:7b:9a:
         93:f0:6f:26:8b:42:57:e0:08:ec:e8:b2:8c:8e:35:1c:96:9f:
         ea:1e:dc:40:73:98:66:05:a0:03:c8:02:ee:3f:aa:3c:d5:41:
         de:98:86:bf:79:c5:68:89:5a:9d:cb:b3:32:4d:12:da:fc:1c:
         6e:20:2c:ec:e0:5e:42:c7:77:ad:2a:24:4a:29:02:2d:97:99:
         d8:65:65:0c:94:69:f8:31:92:ff:9d:75:cd:8a:d4:6f:1f:24:
         f1:c5:52:26:33:d4:d9:7c:57:52:2a:6b:ba:0e:27:a9:13:1d:
         ef:07:bb:25:76:eb:eb:e0:4c:fd:09:4d:39:dd:9c:04:64:ea:
         92:e6:10:cb:db:a4:21:08:f1:d6:ef:0d:7c:52:3a:6e:78:cb:
         fa:ce:2a:8a
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUQ5q5uhW8JKc+URNsWxKKXWdzl4swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzI0MTM5ZWYyYjEyYjgzMDA5Nzk3YjhkNmMwYjQzMDY1
MDdiZDdkNjM4Y2U5NDE4MDUwHhcNMjQwMjI2MTIwMzQ4WhcNMjUwMjI0MTIwODQ4
WjAzMTEwLwYDVQQDEyhFNTBDQzRFQjMzNERCODEyMkNCN0RGRUFFNThBRDczMzAz
MUZFRUU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJi6czRE8h76
LLbACF8XMXNGFD2UXYbewy6MW2xhLOxRIJ477o7T2abKRrthRLL85N+Wayv2pcCH
eJpi6HIVLn+g1R9QzgCCzI+F1UJMfJaAD9ZIhj/3N4sjNBVyWu9q4PrPFK25+T35
FnxAxy/fEWpVl8jGMQjbjrQufm9L7WriRElNPhye5/CdY+v7+BYjZcFfneQngKCR
GxQb+pKL6zDNifSQhIz8C1Gut8vB+bPlF/jh41C9Mp4xpgM7UtDWRWrRTQOzQ9cJ
FsV7C6ejfM+DVeLinUztScbgSAbKjhq2qNVydKJUdbzUbMN/Usi0+uegbRk6G1hX
+CntQCQjOwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFOUMxOszTbgSLLff6uWK1zMD
H+7pMB8GA1UdIwQYMBaAFNDmx2ut7KXL2pLJGLl8f0WZ77bPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MGM5ZmVlYzEyNDllLzEv
RDBFNkM3NkJBREVDQTVDQkRBOTJDOTE4Qjk3QzdGNDU5OUVGQjZDRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2JjOTQyZjY4LWNiMzMtNGEwNS1hNzI3LTNmOTNlNjEwMzkzZS83MjQx
MzllZjJiMTJiODMwMDk3OTdiOGQ2YzBiNDMwNjUwN2JkN2Q2MzhjZTk0MTgwNS5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTBj
OWZlZWMxMjQ5ZS8xLzMyMzYzMDMyM2E2NjYxMzk2MjNhNjMzMDNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDM0MzgzNTM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvqbAMAwDQYJKoZI
hvcNAQELBQADggEBAID0nmGNRCOCkW9WlYlLRCkDRIMVseoIQPLPzZEG9DgRIQQh
OQOHFKHUMOs4QQdzQkTvkksAAVoE220vyQM47mUawj9bJ9RdwFPhPWje86l2G8e3
4p7pjM4aPBKtcfI8WqO8OYTxVb0wLsx7mpPwbyaLQlfgCOzosoyONRyWn+oe3EBz
mGYFoAPIAu4/qjzVQd6Yhr95xWiJWp3LszJNEtr8HG4gLOzgXkLHd60qJEopAi2X
mdhlZQyUafgxkv+ddc2K1G8fJPHFUiYz1Nl8V1Iqa7oOJ6kTHe8HuyV26+vgTP0J
TTndnARk6pLmEMvbpCEI8dbvDXxSOm54y/rOKoo=
-----END CERTIFICATE-----