Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132353a3a2f34382d3438203d3e203537313536.roa
File:                     323630323a666131633a3132353a3a2f34382d3438203d3e203537313536.roa (raw, json)
Hash identifier:          WZocaVEz7kgxDxI/J7/zZfjT6gjBsI1OoJTH99mleuA=
Subject key identifier:   0B:CA:24:A2:64:2C:DF:23:91:55:EA:4A:F8:E4:55:25:84:49:18:BD
Certificate issuer:       /CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
Certificate serial:       123312823D0DA98CCD0F4627AD032F4F20F07A4E
Authority key identifier: EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132353a3a2f34382d3438203d3e203537313536.roa
Signing time:             Sat 12 Oct 2024 23:14:54 +0000
ROA not before:           Sat 12 Oct 2024 23:09:54 +0000
ROA not after:            Sat 11 Oct 2025 23:14:54 +0000
asID:                     57156
IP address blocks:        2602:fa1c:125::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 14:06:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:33:12:82:3d:0d:a9:8c:cd:0f:46:27:ad:03:2f:4f:20:f0:7a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
        Validity
            Not Before: Oct 12 23:09:54 2024 GMT
            Not After : Oct 11 23:14:54 2025 GMT
        Subject: CN=0BCA24A2642CDF239155EA4AF8E45525844918BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5f:e6:ef:e2:7f:4b:3c:04:a4:f4:5e:29:06:
                    be:61:dd:7f:f6:09:4c:71:ad:59:c2:12:aa:05:b6:
                    26:cc:a0:e6:98:2d:ae:bb:3a:1f:e8:38:b1:6e:7f:
                    57:d5:1d:40:c3:fe:c7:01:d0:c2:2a:74:43:c4:30:
                    13:05:01:45:00:39:94:04:a2:43:b0:0d:b3:62:9a:
                    e4:36:d7:db:71:18:61:3f:7a:eb:0a:54:8c:20:b4:
                    ec:6e:ef:52:3a:25:43:81:e9:ef:e5:38:10:d0:62:
                    60:c0:f9:d9:f4:72:5e:6b:75:6e:11:20:59:9f:5d:
                    9c:dc:57:06:22:a1:ab:17:f9:31:c8:ee:e8:a1:e9:
                    2f:37:b1:73:ab:f0:e2:9a:22:4b:a6:47:51:36:d2:
                    60:29:b0:07:3b:a8:4f:96:7c:03:c3:6b:9e:34:9c:
                    e1:a4:c9:26:fa:c0:0c:b8:77:94:a3:3c:28:fe:dd:
                    f9:14:8c:ac:6d:50:19:4d:d3:6a:dc:c8:20:13:df:
                    7c:53:84:ad:98:f1:bc:c3:04:ce:ee:34:c4:26:d2:
                    c1:3e:be:e2:1a:c8:17:d2:1c:04:94:55:3d:38:d5:
                    dc:f4:3e:32:9c:a8:1e:cb:a8:97:d9:a3:d4:77:d6:
                    3e:c6:82:54:8e:9b:2b:fd:27:27:44:2f:4c:89:44:
                    30:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CA:24:A2:64:2C:DF:23:91:55:EA:4A:F8:E4:55:25:84:49:18:BD
            X509v3 Authority Key Identifier:
                keyid:EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/EC95745C2559943ACE439574C9868665E1688B08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132353a3a2f34382d3438203d3e203537313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa1c:125::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:33:b7:94:ea:d2:8e:ab:e5:0e:ae:f2:d7:a4:0b:6e:fe:d2:
         64:69:c2:74:27:2a:58:f6:fd:ae:44:dc:bc:49:d6:65:93:de:
         69:4c:45:68:9b:2a:6d:a2:5a:7f:f0:13:29:20:56:aa:4d:c2:
         a1:24:5d:2f:75:09:eb:8c:69:f8:a0:aa:66:30:34:58:fd:19:
         dd:c9:c0:b0:54:35:1b:66:3b:07:72:3e:9f:31:34:72:86:ba:
         e8:c2:79:b1:6c:2a:66:b2:98:da:48:9e:fb:44:e1:96:d1:e3:
         34:53:aa:2a:b9:fa:7a:ab:ea:62:34:95:1f:a8:ea:9f:97:ad:
         fe:3d:f3:15:ab:49:18:af:46:e5:2f:e1:4a:d2:5a:18:ec:b4:
         92:9f:5b:49:79:c2:b5:3c:00:e0:6a:e6:9e:3c:8d:f9:a8:e8:
         36:8f:c8:53:05:a2:f2:20:4a:8b:84:58:56:5f:6e:7f:c6:e7:
         2b:01:fe:d6:5e:b5:1d:bb:72:0a:9a:1e:5e:27:08:91:88:7c:
         3d:70:ae:24:b4:16:a3:4e:36:52:79:ee:65:bb:5b:35:a5:31:
         98:78:8e:ad:ac:49:f2:b3:e4:18:8f:f5:8f:f9:d0:73:31:e6:
         72:83:64:c1:3c:b4:75:de:83:5f:47:39:b9:14:a8:a3:cb:d4:
         b4:38:8b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----