Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132373a3a2f34382d3438203d3e20323039313635.roa
File:                     323630323a666131633a3132373a3a2f34382d3438203d3e20323039313635.roa (raw, json)
Hash identifier:          qoKK0Y13W0PnkYFyV+4G6JEXcw8DbhmXyTRuwSqH08Y=
Subject key identifier:   39:3B:55:02:F7:BA:C3:70:DC:91:E1:BC:21:99:3D:F7:E0:1F:49:15
Certificate issuer:       /CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
Certificate serial:       103BABF7AFA35DAA56F093DF81858D6E5ED8446E
Authority key identifier: EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132373a3a2f34382d3438203d3e20323039313635.roa
Signing time:             Sat 11 Nov 2023 22:22:00 +0000
ROA not before:           Sat 11 Nov 2023 22:17:00 +0000
ROA not after:            Sat 09 Nov 2024 22:22:00 +0000
asID:                     209165
IP address blocks:        2602:fa1c:127::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 29 Mar 2024 08:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:3b:ab:f7:af:a3:5d:aa:56:f0:93:df:81:85:8d:6e:5e:d8:44:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
        Validity
            Not Before: Nov 11 22:17:00 2023 GMT
            Not After : Nov  9 22:22:00 2024 GMT
        Subject: CN=393B5502F7BAC370DC91E1BC21993DF7E01F4915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b3:0d:98:e4:85:9f:84:1e:54:77:6e:e6:55:
                    41:e1:16:43:39:ca:7e:b8:ff:49:94:26:c8:ec:c3:
                    d9:58:aa:21:bf:f4:da:ec:8b:23:43:a6:d1:21:e0:
                    ca:14:5e:0f:39:eb:9c:b4:51:96:47:48:b8:e8:7c:
                    e0:4d:53:b2:63:ee:67:73:ae:90:61:fe:87:8c:c5:
                    30:3b:cc:f9:a6:2b:1a:c1:42:05:f1:27:97:e1:4a:
                    3e:73:82:b3:07:ff:c7:dd:e4:20:20:7d:01:f5:c8:
                    c0:44:2a:b0:74:61:21:8d:91:c8:a6:69:d9:8f:49:
                    ef:f2:0a:f8:92:4e:3e:f0:66:6d:cb:04:3e:4c:bc:
                    f6:e1:8e:91:17:fe:9e:0f:1f:fd:69:b8:3e:de:05:
                    42:73:b0:25:99:2f:e0:63:4c:52:20:33:84:95:ea:
                    70:71:33:61:94:8e:56:1b:61:f1:98:cf:b1:73:cd:
                    52:80:b0:42:f7:2a:6f:4a:60:bd:21:12:b8:03:7b:
                    02:dc:ad:67:7f:b9:5f:6f:0c:fd:27:62:9a:50:bf:
                    6a:8f:ab:83:51:32:c3:9a:f7:7d:f7:98:99:48:a3:
                    09:d1:7b:dd:4b:03:97:39:39:bd:de:a4:67:0e:9b:
                    00:04:cf:76:74:56:46:8d:f3:bc:62:d9:74:62:72:
                    a8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3B:55:02:F7:BA:C3:70:DC:91:E1:BC:21:99:3D:F7:E0:1F:49:15
            X509v3 Authority Key Identifier:
                keyid:EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/EC95745C2559943ACE439574C9868665E1688B08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132373a3a2f34382d3438203d3e20323039313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa1c:127::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:c3:2b:a3:84:a4:5f:ab:1d:55:94:da:89:b3:7b:77:f6:56:
         4e:de:e8:72:69:79:d0:9b:70:81:89:be:3e:e5:85:0a:ec:b2:
         29:4b:61:97:f0:15:a2:9d:b0:b5:b5:03:6b:39:c0:1c:e1:3d:
         4c:15:53:2a:2f:6b:6e:01:49:a2:21:5b:9a:f1:ee:49:df:71:
         50:a5:2a:02:2a:bc:ab:b0:b8:b7:69:f2:19:df:62:9c:a0:e2:
         a7:6f:11:f8:5f:59:fb:22:58:43:85:f7:15:77:ab:2d:ad:89:
         b5:4e:9c:89:5a:98:dc:00:2f:43:65:91:c5:c7:03:32:36:1c:
         67:56:38:e2:df:70:6f:dc:71:73:5d:98:64:b7:85:2d:99:34:
         ce:23:c1:b4:fa:bb:52:22:83:70:dd:72:f1:a0:17:de:ad:3c:
         cf:39:b8:ae:cf:46:e5:74:99:6d:9d:ae:81:92:89:99:83:13:
         f4:53:7d:b0:c6:15:bb:c1:a8:f9:19:ea:73:36:0d:b0:c2:66:
         1b:46:ce:5a:98:1c:84:23:c0:40:21:07:90:d4:0c:2e:36:22:
         82:bb:29:38:7d:b4:ce:a5:b1:b8:97:ca:e4:60:aa:2e:cf:4e:
         4d:34:0c:57:cb:8f:ce:c1:85:24:a8:3a:c1:37:eb:f9:86:93:
         36:d5:6b:e0
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUEDur96+jXapW8JPfgYWNbl7YRG4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTY5MDRmNzliYTEyYWIxMmI0YWYwOGYyYzViODg3MDdm
ODU2ZDJlZjYzMTNiZTUyYjcwHhcNMjMxMTExMjIxNzAwWhcNMjQxMTA5MjIyMjAw
WjAzMTEwLwYDVQQDEygzOTNCNTUwMkY3QkFDMzcwREM5MUUxQkMyMTk5M0RGN0Uw
MUY0OTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07MNmOSFn4Qe
VHdu5lVB4RZDOcp+uP9JlCbI7MPZWKohv/Ta7IsjQ6bRIeDKFF4POeuctFGWR0i4
6HzgTVOyY+5nc66QYf6HjMUwO8z5pisawUIF8SeX4Uo+c4KzB//H3eQgIH0B9cjA
RCqwdGEhjZHIpmnZj0nv8gr4kk4+8GZtywQ+TLz24Y6RF/6eDx/9abg+3gVCc7Al
mS/gY0xSIDOElepwcTNhlI5WG2HxmM+xc81SgLBC9ypvSmC9IRK4A3sC3K1nf7lf
bwz9J2KaUL9qj6uDUTLDmvd995iZSKMJ0XvdSwOXOTm93qRnDpsABM92dFZGjfO8
Ytl0YnKolwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFDk7VQL3usNw3JHhvCGZPffg
H0kVMB8GA1UdIwQYMBaAFOyVdFwlWZQ6zkOVdMmGhmXhaIsIMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODllMDI1YTcwMThhYjNjY2NkMGMxMDAwLzAv
RUM5NTc0NUMyNTU5OTQzQUNFNDM5NTc0Qzk4Njg2NjVFMTY4OEIwOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzhhYzE3NTJlLTMwMjAtNDk5ZC1hOTUyLWQ1NGJkZmFkZjc2NS8xNjkw
NGY3OWJhMTJhYjEyYjRhZjA4ZjJjNWI4ODcwN2Y4NTZkMmVmNjMxM2JlNTJiNy5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg5ZTAyNWE3MDE4YWIz
Y2NjZDBjMTAwMC8wLzMyMzYzMDMyM2E2NjYxMzE2MzNhMzEzMjM3M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzIzMDM5MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6HAEnMA0G
CSqGSIb3DQEBCwUAA4IBAQClwyujhKRfqx1VlNqJs3t39lZO3uhyaXnQm3CBib4+
5YUK7LIpS2GX8BWinbC1tQNrOcAc4T1MFVMqL2tuAUmiIVua8e5J33FQpSoCKryr
sLi3afIZ32KcoOKnbxH4X1n7IlhDhfcVd6strYm1TpyJWpjcAC9DZZHFxwMyNhxn
Vjji33Bv3HFzXZhkt4UtmTTOI8G0+rtSIoNw3XLxoBferTzPObiuz0bldJltna6B
komZgxP0U32wxhW7waj5GepzNg2wwmYbRs5amByEI8BAIQeQ1AwuNiKCuyk4fbTO
pbG4l8rkYKouz05NNAxXy4/OwYUkqDrBN+v5hpM21Wvg
-----END CERTIFICATE-----