Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/323030313a6466323a633163303a3a2f34382d3438203d3e20313439333031.roa
File:                     323030313a6466323a633163303a3a2f34382d3438203d3e20313439333031.roa (raw, json)
Hash identifier:          PRf2sCC94uE206/tn66BUZZFw/NhUMljaTXckVUSsx0=
Subject key identifier:   2D:A9:05:9C:ED:09:BD:BC:05:F2:7F:E8:58:9F:54:4F:2F:A4:39:21
Certificate issuer:       /CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
Certificate serial:       39632FFC54A18504AA166D3CA03C19AF30ABEA82
Authority key identifier: 9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/323030313a6466323a633163303a3a2f34382d3438203d3e20313439333031.roa
Signing time:             Mon 17 Jun 2024 06:04:21 +0000
ROA not before:           Mon 17 Jun 2024 05:59:21 +0000
ROA not after:            Mon 16 Jun 2025 06:04:21 +0000
asID:                     149301
IP address blocks:        2001:df2:c1c0::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 17 Jun 2024 11:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:63:2f:fc:54:a1:85:04:aa:16:6d:3c:a0:3c:19:af:30:ab:ea:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
        Validity
            Not Before: Jun 17 05:59:21 2024 GMT
            Not After : Jun 16 06:04:21 2025 GMT
        Subject: CN=2DA9059CED09BDBC05F27FE8589F544F2FA43921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5e:11:35:51:d3:0b:b8:e8:cd:2c:9f:7e:91:
                    78:e8:b2:09:b2:91:21:85:1e:6b:7b:82:7a:77:96:
                    ce:5a:9d:9e:42:17:ad:9f:a1:3e:c2:36:fa:4a:5c:
                    ae:07:9e:96:6f:b0:8e:29:07:d0:1b:68:32:4e:b8:
                    6f:08:82:57:d3:37:6e:a6:dc:32:79:45:e6:be:c3:
                    49:d7:7a:dc:c4:54:a8:7a:58:bb:5e:d3:96:59:22:
                    06:5b:82:f5:3d:73:1e:7a:38:22:2f:d9:74:52:ef:
                    4f:dd:18:0d:37:c5:aa:77:17:b9:52:7a:54:1f:a5:
                    c9:79:ba:19:b2:fb:8e:f7:c0:77:17:ea:a4:2a:f1:
                    9d:37:c6:32:32:61:a6:06:2c:38:9f:fc:5c:52:71:
                    cf:c7:b7:e5:c6:e7:73:72:f1:6a:a6:dc:79:e1:f0:
                    03:a9:f4:ec:d9:22:29:1d:62:b8:f2:1f:7d:9e:11:
                    dc:cc:c5:8b:4e:26:01:d7:05:de:0c:9b:5e:9b:f0:
                    a3:f5:c6:a6:5a:68:56:95:f0:a4:db:7f:34:f8:39:
                    79:d3:08:e1:cd:03:f0:f9:c9:be:2f:12:df:3c:e4:
                    78:83:0f:7d:28:ab:18:3f:5a:62:7e:34:94:d4:f8:
                    2f:8e:20:e1:04:64:22:96:6b:0a:04:95:6a:ab:1c:
                    a2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A9:05:9C:ED:09:BD:BC:05:F2:7F:E8:58:9F:54:4F:2F:A4:39:21
            X509v3 Authority Key Identifier:
                keyid:9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/323030313a6466323a633163303a3a2f34382d3438203d3e20313439333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:c1c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:36:62:7a:5e:d8:09:fb:82:b2:29:e6:a3:9e:ec:e3:f5:12:
         56:6a:44:95:c5:a2:fc:21:8f:8a:d0:15:6e:97:a9:49:e1:2e:
         3c:52:0b:ee:f6:9f:81:6c:8b:d0:e0:9c:07:e4:f8:c9:fd:9a:
         c4:00:1a:78:ad:5f:61:8b:e1:66:aa:4c:79:f4:02:26:0e:3b:
         35:12:7b:b8:ca:d3:3d:d8:7b:e5:22:d9:49:b2:17:ae:cf:60:
         48:82:15:01:3c:65:d6:d4:b4:91:07:f4:d0:73:83:de:86:86:
         c5:e7:f5:dc:8c:73:66:c6:38:9e:73:f0:ea:6b:67:13:40:89:
         97:ae:92:17:f3:29:36:e8:76:f3:7b:dc:01:5e:b6:8f:20:d0:
         5f:d1:5c:d3:19:35:03:61:9d:37:49:7e:5c:54:e5:45:4d:a4:
         b1:b0:54:f9:8d:95:e8:11:97:0e:95:fb:c8:bf:a0:52:bf:80:
         cb:31:14:9b:ca:08:11:38:d6:f1:ca:cd:43:88:b7:06:1d:70:
         e9:a5:97:36:88:f3:98:f6:0d:97:c2:1a:b2:8f:73:b6:f1:88:
         3f:82:6b:fd:53:18:5e:a0:c0:82:3b:35:04:b4:02:57:ac:0c:
         f4:79:ae:e8:0d:50:30:2d:4f:af:f7:87:dc:fd:40:8b:3c:d4:
         30:7d:c7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----