Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132393a3a2f34382d3438203d3e203537313536.roa
File:                     323630323a666131633a3132393a3a2f34382d3438203d3e203537313536.roa (raw, json)
Hash identifier:          hjVlU2oTYgEDeLrblqVCKtnn5uqdii4to+QyYaWVP2w=
Subject key identifier:   D9:DD:A8:71:81:07:A7:9D:44:62:A7:47:0A:7B:F0:31:CF:67:FB:9C
Certificate issuer:       /CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
Certificate serial:       5039322C2ECE878CECE3FB1633B4F9B4D1BFD157
Authority key identifier: EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132393a3a2f34382d3438203d3e203537313536.roa
Signing time:             Mon 25 Mar 2024 04:02:08 +0000
ROA not before:           Mon 25 Mar 2024 03:57:08 +0000
ROA not after:            Mon 24 Mar 2025 04:02:08 +0000
asID:                     57156
IP address blocks:        2602:fa1c:129::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 20 Jun 2024 13:55:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:39:32:2c:2e:ce:87:8c:ec:e3:fb:16:33:b4:f9:b4:d1:bf:d1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
        Validity
            Not Before: Mar 25 03:57:08 2024 GMT
            Not After : Mar 24 04:02:08 2025 GMT
        Subject: CN=D9DDA8718107A79D4462A7470A7BF031CF67FB9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dd:d1:fa:7b:a5:8a:84:c9:bb:72:1a:9f:f6:
                    2d:13:b0:71:9b:a4:1d:ea:d5:72:cf:84:48:28:79:
                    23:db:ff:a3:db:5b:57:9f:a8:9b:94:de:d8:ac:0a:
                    b7:d1:20:a7:a6:0d:fd:a1:ef:75:c1:cc:7b:e4:c3:
                    f8:e2:b5:39:ce:2d:69:57:37:6d:11:3b:c6:07:ea:
                    67:f8:94:33:d7:ba:35:ab:61:30:99:8e:c0:65:ec:
                    08:68:c8:5b:ef:03:c8:99:8d:43:8f:7b:33:03:d4:
                    6e:53:af:fd:eb:cf:37:4b:6e:f5:18:ff:27:00:2e:
                    c8:ab:ca:a1:3a:89:63:17:14:3e:08:7c:b7:bf:6e:
                    3a:ca:e8:83:25:95:af:f7:9e:6a:5d:d2:01:fb:ac:
                    4e:f5:8a:e6:f7:d0:c2:e5:5b:30:46:2c:b0:7c:de:
                    ea:4c:3c:d4:7c:f3:90:cd:3f:52:ea:4f:90:65:bc:
                    56:c7:c0:43:8f:56:9c:4c:12:5f:ee:a2:b5:a4:5d:
                    d9:fc:96:68:23:84:14:b0:00:2e:a3:b5:c2:26:91:
                    6d:d5:fa:90:ca:7a:d6:9c:23:5e:a0:28:d0:9e:d7:
                    7e:fa:97:d5:56:fd:c4:70:81:72:d0:d0:48:ef:46:
                    90:8a:ae:c0:55:58:27:3f:1e:c0:0e:fb:b2:fd:79:
                    9b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DD:A8:71:81:07:A7:9D:44:62:A7:47:0A:7B:F0:31:CF:67:FB:9C
            X509v3 Authority Key Identifier:
                keyid:EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/EC95745C2559943ACE439574C9868665E1688B08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132393a3a2f34382d3438203d3e203537313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa1c:129::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:cc:44:84:db:79:b8:19:e9:d0:84:cb:90:94:3c:ee:33:35:
         b1:8c:8f:f5:2d:fd:fa:3f:71:0a:7e:cf:17:4e:39:e4:17:3b:
         cf:9a:d9:04:ad:63:75:cb:92:85:8a:de:17:8b:c2:8c:a8:f6:
         15:7a:78:12:31:2f:8b:58:43:43:08:58:ed:d0:ea:94:01:70:
         f1:0e:88:05:a8:dc:38:b7:74:ef:e5:01:f5:00:07:da:25:10:
         60:da:71:4b:af:01:2d:64:7a:41:bc:aa:74:c5:e3:30:74:7e:
         46:3d:10:e7:20:3b:6b:ab:88:69:3c:5a:77:78:b4:a5:78:5e:
         23:77:b8:66:a1:86:df:48:a2:28:84:12:2f:24:ac:cd:82:72:
         7f:c8:6d:bc:7b:4c:30:eb:ff:b5:7e:8c:85:52:fa:98:6b:65:
         ce:c8:58:d4:66:64:6e:71:12:1a:22:d3:2e:ff:8c:d8:ba:ce:
         af:9f:de:e6:f7:75:ca:36:ac:16:cf:64:82:59:23:f8:27:cc:
         8f:c7:d1:17:7c:15:1c:e9:2e:d0:4d:ea:0d:a1:91:b8:ae:15:
         64:7e:6c:df:0d:22:15:6f:3a:df:9f:11:86:30:3a:6d:5d:42:
         08:e1:b4:e5:d5:1a:c7:db:11:76:6f:8e:22:b1:76:0e:05:09:
         42:39:f3:24
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUUDkyLC7Oh4zs4/sWM7T5tNG/0VcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTY5MDRmNzliYTEyYWIxMmI0YWYwOGYyYzViODg3MDdm
ODU2ZDJlZjYzMTNiZTUyYjcwHhcNMjQwMzI1MDM1NzA4WhcNMjUwMzI0MDQwMjA4
WjAzMTEwLwYDVQQDEyhEOUREQTg3MTgxMDdBNzlENDQ2MkE3NDcwQTdCRjAzMUNG
NjdGQjlDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd3R+nulioTJ
u3Ian/YtE7Bxm6Qd6tVyz4RIKHkj2/+j21tXn6iblN7YrAq30SCnpg39oe91wcx7
5MP44rU5zi1pVzdtETvGB+pn+JQz17o1q2EwmY7AZewIaMhb7wPImY1Dj3szA9Ru
U6/96883S271GP8nAC7Iq8qhOoljFxQ+CHy3v246yuiDJZWv955qXdIB+6xO9Yrm
99DC5VswRiywfN7qTDzUfPOQzT9S6k+QZbxWx8BDj1acTBJf7qK1pF3Z/JZoI4QU
sAAuo7XCJpFt1fqQynrWnCNeoCjQntd++pfVVv3EcIFy0NBI70aQiq7AVVgnPx7A
Dvuy/XmbdwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFNndqHGBB6edRGKnRwp78DHP
Z/ucMB8GA1UdIwQYMBaAFOyVdFwlWZQ6zkOVdMmGhmXhaIsIMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODllMDI1YTcwMThhYjNjY2NkMGMxMDAwLzAv
RUM5NTc0NUMyNTU5OTQzQUNFNDM5NTc0Qzk4Njg2NjVFMTY4OEIwOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzhhYzE3NTJlLTMwMjAtNDk5ZC1hOTUyLWQ1NGJkZmFkZjc2NS8xNjkw
NGY3OWJhMTJhYjEyYjRhZjA4ZjJjNWI4ODcwN2Y4NTZkMmVmNjMxM2JlNTJiNy5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg5ZTAyNWE3MDE4YWIz
Y2NjZDBjMTAwMC8wLzMyMzYzMDMyM2E2NjYxMzE2MzNhMzEzMjM5M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzUzNzMxMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC+hwBKTANBgkq
hkiG9w0BAQsFAAOCAQEAYsxEhNt5uBnp0ITLkJQ87jM1sYyP9S39+j9xCn7PF045
5Bc7z5rZBK1jdcuShYreF4vCjKj2FXp4EjEvi1hDQwhY7dDqlAFw8Q6IBajcOLd0
7+UB9QAH2iUQYNpxS68BLWR6QbyqdMXjMHR+Rj0Q5yA7a6uIaTxad3i0pXheI3e4
ZqGG30iiKIQSLySszYJyf8htvHtMMOv/tX6MhVL6mGtlzshY1GZkbnESGiLTLv+M
2LrOr5/e5vd1yjasFs9kglkj+CfMj8fRF3wVHOku0E3qDaGRuK4VZH5s3w0iFW86
358RhjA6bV1CCOG05dUax9sRdm+OIrF2DgUJQjnzJA==
-----END CERTIFICATE-----