Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203438353831.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e203438353831.roa (raw, json)
Hash identifier:          JJpIvOrlepR0tYzlenmXoLUhVHFbixomXGVmECVuBQ8=
Subject key identifier:   F1:F4:A0:19:4C:53:41:2F:74:DF:73:E3:66:ED:D3:6C:E9:7C:91:20
Certificate issuer:       /CN=412292C0E24D8885B4760BC708F9E477870D9C70
Certificate serial:       666EDE5791AC3681B40EA866A9286EB007DE9669
Authority key identifier: 41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203438353831.roa
Signing time:             Mon 26 Feb 2024 12:08:50 +0000
ROA not before:           Mon 26 Feb 2024 12:03:50 +0000
ROA not after:            Mon 24 Feb 2025 12:08:50 +0000
asID:                     48581
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 11:58:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:6e:de:57:91:ac:36:81:b4:0e:a8:66:a9:28:6e:b0:07:de:96:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412292C0E24D8885B4760BC708F9E477870D9C70
        Validity
            Not Before: Feb 26 12:03:50 2024 GMT
            Not After : Feb 24 12:08:50 2025 GMT
        Subject: CN=F1F4A0194C53412F74DF73E366EDD36CE97C9120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:07:bb:ca:f9:2e:be:f1:6b:64:8f:4a:25:8e:
                    e1:3d:20:b8:50:3a:b5:f9:6d:c1:71:b1:09:f3:c7:
                    bb:5a:79:b4:08:d2:9e:fd:0f:05:af:34:79:26:ca:
                    29:57:75:61:f2:ba:29:03:01:c5:d9:3a:b7:5b:e9:
                    b6:48:b1:b8:aa:36:36:f0:54:1c:b1:15:0d:b4:2d:
                    6d:ef:8a:a5:81:f8:6a:1a:5e:d5:64:06:47:3d:32:
                    84:05:5d:d5:15:e0:63:a6:11:7d:0c:4b:ff:78:a2:
                    f6:f6:5e:ae:1d:23:1e:b5:ac:d8:11:3c:2d:b8:f9:
                    60:9c:c5:d9:13:df:54:d9:5b:d4:0b:f5:8a:f8:48:
                    45:ee:31:e1:d9:4c:c5:34:3e:cc:29:5b:2a:3e:c9:
                    ec:ca:37:79:b2:ef:8c:fa:15:8d:3c:00:22:df:7b:
                    6b:e7:49:7a:02:f7:44:d9:2a:c7:04:82:a5:23:cf:
                    92:45:99:24:89:86:43:db:74:2a:40:8d:46:ae:cf:
                    c2:41:d8:2b:e7:d5:77:24:b6:93:44:74:91:a9:93:
                    73:00:bd:81:56:86:b8:f3:e4:cd:08:96:ff:2e:7f:
                    d8:d3:d3:cc:83:57:e5:40:5f:0b:86:b1:cf:2f:09:
                    c8:3a:d0:56:09:58:1e:52:3f:fd:7f:f1:aa:2c:c4:
                    ef:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F4:A0:19:4C:53:41:2F:74:DF:73:E3:66:ED:D3:6C:E9:7C:91:20
            X509v3 Authority Key Identifier:
                keyid:41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:c7:25:23:31:fd:9b:4d:65:1d:d3:86:b7:bf:bd:d6:66:d6:
         80:2f:5e:3d:26:d6:35:03:0d:2e:4a:34:eb:3e:6d:d6:c9:3e:
         f3:a8:c9:b3:90:9b:07:da:2d:a6:dd:ef:0f:67:d3:0f:33:60:
         a3:37:a1:ed:37:2f:12:66:be:1b:02:c8:bc:93:14:0e:2d:b5:
         95:35:ab:2a:23:16:0e:68:b3:f0:01:fe:df:4d:f6:d2:a0:9e:
         ad:b9:fc:d9:64:ca:a7:c7:af:da:66:10:3a:65:3e:4e:77:ac:
         13:11:5e:3c:63:d2:b6:3f:a0:d6:c2:5c:2e:59:75:68:73:4f:
         36:5b:bd:fd:03:d1:6d:b3:7e:fe:9f:33:c2:6f:da:c0:f0:5f:
         22:e9:ae:31:9c:97:87:55:3b:c7:75:e1:01:78:d6:9a:f7:00:
         37:ab:e4:65:33:a3:3e:92:2e:89:0f:e7:2a:aa:81:5c:6b:a3:
         f3:e3:bf:04:db:65:dd:0b:a9:86:a7:fd:17:e6:6c:29:e0:ef:
         1f:b7:66:b7:5b:87:f5:69:af:68:df:17:71:11:79:de:b2:ac:
         b9:89:60:ca:2d:4e:33:ca:96:e6:17:36:44:8f:27:44:5f:e7:
         57:93:d7:f4:45:d4:b0:07:e1:39:42:a8:fb:54:bd:7f:bb:88:
         f1:88:2f:9d
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUZm7eV5GsNoG0DqhmqShusAfelmkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEyMjkyQzBFMjREODg4NUI0NzYwQkM3MDhGOUU0Nzc4
NzBEOUM3MDAeFw0yNDAyMjYxMjAzNTBaFw0yNTAyMjQxMjA4NTBaMDMxMTAvBgNV
BAMTKEYxRjRBMDE5NEM1MzQxMkY3NERGNzNFMzY2RUREMzZDRTk3QzkxMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTB7vK+S6+8Wtkj0oljuE9ILhQ
OrX5bcFxsQnzx7taebQI0p79DwWvNHkmyilXdWHyuikDAcXZOrdb6bZIsbiqNjbw
VByxFQ20LW3viqWB+GoaXtVkBkc9MoQFXdUV4GOmEX0MS/94ovb2Xq4dIx61rNgR
PC24+WCcxdkT31TZW9QL9Yr4SEXuMeHZTMU0PswpWyo+yezKN3my74z6FY08ACLf
e2vnSXoC90TZKscEgqUjz5JFmSSJhkPbdCpAjUauz8JB2Cvn1XcktpNEdJGpk3MA
vYFWhrjz5M0Ilv8uf9jT08yDV+VAXwuGsc8vCcg60FYJWB5SP/1/8aosxO8RAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU8fSgGUxTQS9033PjZu3TbOl8kSAwHwYDVR0j
BBgwFoAUQSKSwOJNiIW0dgvHCPnkd4cNnHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvNC80MTIyOTJDMEUy
NEQ4ODg1QjQ3NjBCQzcwOEY5RTQ3Nzg3MEQ5QzcwLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzQzNDRmZjI5LTcxODQtNDdiZC05MTcyLTM2MDlmNTlj
ZTZkZi8yLzQxMjI5MkMwRTI0RDg4ODVCNDc2MEJDNzA4RjlFNDc3ODcwRDlDNzAu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OGUzOWJmYTAxODkw
YzlmZWVjMTI0OWUvNC8zMjYxMzAzNzNhMzUzNDYzMzAzYTY2NjY2NTY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzODM1MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoHVMD/7jAN
BgkqhkiG9w0BAQsFAAOCAQEAd8clIzH9m01lHdOGt7+91mbWgC9ePSbWNQMNLko0
6z5t1sk+86jJs5CbB9otpt3vD2fTDzNgozeh7TcvEma+GwLIvJMUDi21lTWrKiMW
Dmiz8AH+30320qCerbn82WTKp8ev2mYQOmU+TnesExFePGPStj+g1sJcLll1aHNP
Nlu9/QPRbbN+/p8zwm/awPBfIumuMZyXh1U7x3XhAXjWmvcAN6vkZTOjPpIuiQ/n
KqqBXGuj8+O/BNtl3Quphqf9F+ZsKeDvH7dmt1uH9WmvaN8XcRF53rKsuYlgyi1O
M8qW5hc2RI8nRF/nV5PX9EXUsAfhOUKo+1S9f7uI8YgvnQ==
-----END CERTIFICATE-----