Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132363a3a2f34382d3438203d3e203537313536.roa
File:                     323630323a666131633a3132363a3a2f34382d3438203d3e203537313536.roa (raw, json)
Hash identifier:          9c2TYAFbmYlac1qz4IQv+qe3Dl2/X5UvcFINSiJo1c8=
Subject key identifier:   26:B0:04:09:D6:EC:62:45:05:21:60:D4:5A:AD:EA:D8:75:6D:E1:4E
Certificate issuer:       /CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
Certificate serial:       166AEBCBD4FB19993EC59A240189A894B327D9BF
Authority key identifier: EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132363a3a2f34382d3438203d3e203537313536.roa
Signing time:             Sat 12 Oct 2024 23:14:53 +0000
ROA not before:           Sat 12 Oct 2024 23:09:53 +0000
ROA not after:            Sat 11 Oct 2025 23:14:53 +0000
asID:                     57156
IP address blocks:        2602:fa1c:126::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 12:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:6a:eb:cb:d4:fb:19:99:3e:c5:9a:24:01:89:a8:94:b3:27:d9:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
        Validity
            Not Before: Oct 12 23:09:53 2024 GMT
            Not After : Oct 11 23:14:53 2025 GMT
        Subject: CN=26B00409D6EC6245052160D45AADEAD8756DE14E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:52:c6:7d:30:07:88:2a:8b:f9:a0:bc:64:00:
                    27:b4:02:c4:56:48:f8:4b:74:fc:3e:e2:0c:5d:db:
                    83:2f:c7:b7:6f:61:40:9e:10:95:52:21:da:5a:59:
                    dd:db:49:02:21:bd:bb:16:76:6e:89:c5:76:72:bc:
                    ca:4d:ee:67:62:11:af:2d:c4:02:64:b5:2f:d0:b6:
                    11:c7:b3:c2:86:27:20:c7:00:fe:0d:18:74:a9:2e:
                    38:a7:ba:42:7b:68:24:f2:25:57:d5:7e:49:8e:f8:
                    1a:62:bc:70:e6:60:f1:f9:29:f8:1c:d6:3c:49:aa:
                    f9:d6:00:5c:78:05:2b:05:6a:ec:ec:cb:fc:7b:25:
                    2f:e6:3d:ba:ad:c2:0c:59:a2:64:2a:a3:55:a6:25:
                    d3:dc:b8:55:46:be:02:88:91:8c:00:66:eb:73:f9:
                    36:1f:9b:21:78:95:a4:ef:b3:9c:4c:58:8e:0e:94:
                    27:b3:a9:ad:74:4f:f9:bd:a9:cf:3c:32:b1:3c:76:
                    98:cb:f5:1e:8e:2a:b9:7c:ba:a3:c7:2e:d2:b6:2c:
                    cf:24:0f:56:8b:de:65:95:30:76:97:39:37:88:0b:
                    05:88:82:32:81:f3:88:8c:01:90:19:35:05:92:5b:
                    44:9b:d9:51:07:df:3a:28:26:23:8f:54:18:3b:95:
                    e3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B0:04:09:D6:EC:62:45:05:21:60:D4:5A:AD:EA:D8:75:6D:E1:4E
            X509v3 Authority Key Identifier:
                keyid:EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/EC95745C2559943ACE439574C9868665E1688B08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132363a3a2f34382d3438203d3e203537313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa1c:126::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:e2:b4:76:03:6b:52:66:8b:84:ea:b8:79:5d:4c:38:fb:2c:
         54:fe:b1:2e:46:0d:b3:f8:a2:d7:d3:c2:e0:d6:fe:2b:c3:b8:
         2b:f0:c0:42:17:c2:22:91:25:76:7d:0c:61:47:03:30:29:9e:
         7a:a0:21:69:53:d7:a8:14:d6:dc:bb:91:72:41:33:fc:84:27:
         ae:b6:d5:ee:fa:5c:42:49:d8:2b:1a:48:29:3e:bc:64:6f:c0:
         48:97:33:a5:8e:ff:a7:88:81:cb:ab:db:dc:5b:5d:bf:1b:3e:
         6e:80:4e:d6:c8:41:a4:92:54:0f:dd:62:79:58:dd:17:9c:fe:
         b8:ee:23:2a:5d:43:37:23:3d:00:4f:13:02:36:2e:95:ce:60:
         f7:05:81:ae:53:03:00:fb:40:c4:22:bd:70:ce:94:a8:eb:42:
         06:9e:ac:a6:24:6d:a2:d3:1b:d1:66:98:eb:9f:88:bd:b4:59:
         fd:56:1b:2a:51:02:7f:f1:13:4d:99:16:54:75:f5:fd:24:ee:
         f1:ec:6d:d1:8a:e6:f2:f3:7d:69:c8:9c:17:b6:6a:bb:59:20:
         4e:14:13:df:1e:94:ee:d3:3e:d0:1e:f9:e0:3c:6d:98:de:64:
         e5:32:91:3d:5e:7f:6f:03:8b:ab:67:6d:0f:d0:cc:d4:9b:1d:
         39:1c:77:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----