Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132313a3a2f34382d3438203d3e203439313935.roa
File:                     323630323a666131633a3132313a3a2f34382d3438203d3e203439313935.roa (raw, json)
Hash identifier:          Jm7i0bOMIOf3muzeUma+1hSExQyivpwPzvhYkXZuWpU=
Subject key identifier:   D1:41:C6:9D:12:5F:66:15:6E:31:9B:DC:A2:9D:38:42:E2:CF:D5:9E
Certificate issuer:       /CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
Certificate serial:       1BAA9E21AFFD30DAA50040C138D6C6B5202D8FC6
Authority key identifier: EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132313a3a2f34382d3438203d3e203439313935.roa
Signing time:             Sat 11 Nov 2023 22:21:26 +0000
ROA not before:           Sat 11 Nov 2023 22:16:26 +0000
ROA not after:            Sat 09 Nov 2024 22:21:26 +0000
asID:                     49195
IP address blocks:        2602:fa1c:121::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 20 Jun 2024 13:56:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:aa:9e:21:af:fd:30:da:a5:00:40:c1:38:d6:c6:b5:20:2d:8f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
        Validity
            Not Before: Nov 11 22:16:26 2023 GMT
            Not After : Nov  9 22:21:26 2024 GMT
        Subject: CN=D141C69D125F66156E319BDCA29D3842E2CFD59E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4b:28:80:79:83:2e:bd:b4:c5:d5:24:ca:c2:
                    f7:a6:e9:9c:89:d8:65:d9:4a:5d:d8:79:5d:9c:41:
                    ba:a5:64:c7:1c:b6:a0:6d:e4:56:f9:14:08:44:3e:
                    c9:66:e0:be:cb:a5:bf:ef:51:44:d5:b4:6f:63:ad:
                    a2:59:44:0b:d6:fe:d3:db:a0:44:0b:46:a4:a1:20:
                    40:8b:34:84:08:3d:c9:9b:a2:12:00:52:ff:05:45:
                    ea:ff:6b:78:3f:b0:26:5c:a7:0f:80:77:81:a5:b3:
                    fd:12:dc:6a:fa:5c:a9:60:41:73:21:ba:08:e0:bc:
                    d7:47:62:4b:8e:48:87:f1:76:97:76:e9:57:f6:af:
                    01:f5:d8:dc:e7:70:08:ec:c1:5a:0c:88:d3:df:e5:
                    bb:8b:79:6c:a4:18:5f:13:04:d5:44:6f:22:6d:6f:
                    3e:62:c4:a4:38:c7:7a:23:b9:bf:68:bc:c5:94:fe:
                    fd:77:b1:03:ad:3b:44:b2:34:dd:f6:6d:f9:9d:6f:
                    e1:d3:41:92:5a:4c:ca:a1:44:cd:5d:c4:b9:3e:96:
                    9d:1f:17:e1:55:01:fd:23:2f:6d:57:3a:fa:e2:7b:
                    af:e3:14:b0:05:68:60:47:30:84:3b:44:8f:4e:d9:
                    7f:3a:af:c0:e8:a8:e7:70:a1:4b:a2:e1:84:f6:96:
                    e0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:41:C6:9D:12:5F:66:15:6E:31:9B:DC:A2:9D:38:42:E2:CF:D5:9E
            X509v3 Authority Key Identifier:
                keyid:EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/EC95745C2559943ACE439574C9868665E1688B08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132313a3a2f34382d3438203d3e203439313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa1c:121::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:3e:6a:19:31:66:15:51:4f:a9:5a:94:fc:34:2e:a4:16:fd:
         e6:5f:ae:7d:36:41:22:4a:25:9e:67:71:2b:de:49:f2:ec:a2:
         72:79:87:cf:1b:45:6a:65:72:4f:cf:78:e8:fb:fc:cc:97:41:
         39:f2:61:99:28:95:d6:47:e1:66:97:2f:d1:ff:bf:0f:dd:aa:
         43:a4:64:3c:76:3c:97:bc:6d:49:cc:45:8e:df:bb:60:04:ad:
         e1:fd:71:d6:13:29:d3:0a:8e:b1:43:61:f7:66:93:19:6d:c3:
         b1:96:a1:be:f9:dc:6a:bd:2b:52:89:ae:68:88:70:18:19:7b:
         9f:1c:20:2c:f7:c7:10:c3:08:ad:07:95:9a:9a:0d:84:63:3d:
         69:d1:15:80:34:1b:c3:2b:03:56:cc:a6:40:56:31:f3:7a:c8:
         e8:c3:85:bd:8c:bd:ef:77:65:cd:0a:b8:61:5b:f5:12:52:44:
         bd:5a:c3:64:e9:58:5a:ae:a2:b8:b0:ed:a6:c7:f4:48:cf:51:
         8d:f9:5e:79:87:96:97:31:b8:73:d0:47:74:7f:68:0c:85:c0:
         73:c4:95:98:32:30:47:11:05:a4:32:de:63:54:40:74:23:f8:
         cc:f5:f1:d8:0c:23:cc:01:9e:f0:7a:fe:9b:00:bc:1c:64:02:
         dd:a8:bb:48
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUG6qeIa/9MNqlAEDBONbGtSAtj8YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTY5MDRmNzliYTEyYWIxMmI0YWYwOGYyYzViODg3MDdm
ODU2ZDJlZjYzMTNiZTUyYjcwHhcNMjMxMTExMjIxNjI2WhcNMjQxMTA5MjIyMTI2
WjAzMTEwLwYDVQQDEyhEMTQxQzY5RDEyNUY2NjE1NkUzMTlCRENBMjlEMzg0MkUy
Q0ZENTlFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUsogHmDLr20
xdUkysL3pumcidhl2Upd2HldnEG6pWTHHLagbeRW+RQIRD7JZuC+y6W/71FE1bRv
Y62iWUQL1v7T26BEC0akoSBAizSECD3Jm6ISAFL/BUXq/2t4P7AmXKcPgHeBpbP9
Etxq+lypYEFzIboI4LzXR2JLjkiH8XaXdulX9q8B9djc53AI7MFaDIjT3+W7i3ls
pBhfEwTVRG8ibW8+YsSkOMd6I7m/aLzFlP79d7EDrTtEsjTd9m35nW/h00GSWkzK
oUTNXcS5PpadHxfhVQH9Iy9tVzr64nuv4xSwBWhgRzCEO0SPTtl/Oq/A6KjncKFL
ouGE9pbg2QIDAQABo4ICuzCCArcwHQYDVR0OBBYEFNFBxp0SX2YVbjGb3KKdOELi
z9WeMB8GA1UdIwQYMBaAFOyVdFwlWZQ6zkOVdMmGhmXhaIsIMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODllMDI1YTcwMThhYjNjY2NkMGMxMDAwLzAv
RUM5NTc0NUMyNTU5OTQzQUNFNDM5NTc0Qzk4Njg2NjVFMTY4OEIwOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzhhYzE3NTJlLTMwMjAtNDk5ZC1hOTUyLWQ1NGJkZmFkZjc2NS8xNjkw
NGY3OWJhMTJhYjEyYjRhZjA4ZjJjNWI4ODcwN2Y4NTZkMmVmNjMxM2JlNTJiNy5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg5ZTAyNWE3MDE4YWIz
Y2NjZDBjMTAwMC8wLzMyMzYzMDMyM2E2NjYxMzE2MzNhMzEzMjMxM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzQzOTMxMzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC+hwBITANBgkq
hkiG9w0BAQsFAAOCAQEAaj5qGTFmFVFPqVqU/DQupBb95l+ufTZBIkolnmdxK95J
8uyicnmHzxtFamVyT8946Pv8zJdBOfJhmSiV1kfhZpcv0f+/D92qQ6RkPHY8l7xt
ScxFjt+7YASt4f1x1hMp0wqOsUNh92aTGW3DsZahvvncar0rUomuaIhwGBl7nxwg
LPfHEMMIrQeVmpoNhGM9adEVgDQbwysDVsymQFYx83rI6MOFvYy973dlzQq4YVv1
ElJEvVrDZOlYWq6iuLDtpsf0SM9RjfleeYeWlzG4c9BHdH9oDIXAc8SVmDIwRxEF
pDLeY1RAdCP4zPXx2AwjzAGe8Hr+mwC8HGQC3ai7SA==
-----END CERTIFICATE-----