Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a3a2f34302d3438203d3e203131333538.roa
File:                     323630323a663937653a3a2f34302d3438203d3e203131333538.roa (raw, json)
Hash identifier:          tlLhFrQ/1LECuiXkR0cr2mZa5wZeat02YB6/lXL+Kpc=
Subject key identifier:   CA:D7:6F:32:08:96:7B:7E:C2:C7:6A:1E:23:06:C8:D8:90:FE:C0:44
Certificate issuer:       /CN=ba21647aac78a3704dabe69d74570cb11566afd1b7dbdd388a
Certificate serial:       19C806FC2922D475837FD6A14A97F74F39489898
Authority key identifier: 47:9F:29:66:0F:9E:05:B3:E7:2E:0C:85:B1:58:C5:87:0A:E0:E9:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac78a3704dabe69d74570cb11566afd1b7dbdd388a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a3a2f34302d3438203d3e203131333538.roa
Signing time:             Tue 28 May 2024 06:13:21 +0000
ROA not before:           Tue 28 May 2024 06:08:21 +0000
ROA not after:            Tue 27 May 2025 06:13:21 +0000
asID:                     11358
IP address blocks:        2602:f97e::/40 maxlen: 48

Validation:               Failed, certificate revoked on Wed 26 Jun 2024 19:36:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c8:06:fc:29:22:d4:75:83:7f:d6:a1:4a:97:f7:4f:39:48:98:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba21647aac78a3704dabe69d74570cb11566afd1b7dbdd388a
        Validity
            Not Before: May 28 06:08:21 2024 GMT
            Not After : May 27 06:13:21 2025 GMT
        Subject: CN=CAD76F3208967B7EC2C76A1E2306C8D890FEC044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:64:30:36:fa:3a:43:16:89:09:3c:27:cc:c6:
                    99:ae:e7:19:6b:98:a6:7c:c2:44:c2:79:2a:b8:49:
                    2f:c4:18:d0:09:ea:98:ca:6e:9d:a6:0a:cf:f9:c4:
                    d4:ee:e6:b8:da:b6:44:5c:76:80:90:bc:a4:e8:1d:
                    6e:00:d3:a9:c4:ca:3e:c2:60:ec:26:69:37:d8:dd:
                    3b:7e:a7:f3:7f:85:69:4f:88:54:f5:54:d6:4a:4e:
                    16:aa:98:cf:3d:87:fc:3a:9f:90:5c:bd:f5:88:92:
                    33:a0:d6:7c:a6:95:2b:a5:2b:74:93:f7:1e:bb:ba:
                    f5:a6:65:25:00:7f:c5:20:15:7c:61:12:16:e5:1e:
                    20:1f:ff:ba:37:76:71:4f:89:fa:a0:eb:9d:40:9e:
                    ec:8b:8c:08:67:e5:3b:5f:03:b3:af:27:f2:71:b4:
                    e1:f4:67:9a:87:ea:87:5b:4f:01:ac:f5:40:b6:57:
                    43:fa:67:77:02:f2:ba:b8:2e:c5:ad:47:41:b1:af:
                    d8:1d:aa:e7:69:ef:a7:0e:c4:76:6b:f6:e5:f0:b7:
                    e2:86:31:31:66:ab:6d:45:51:76:66:9b:b8:8f:63:
                    9e:f9:60:de:d1:86:ae:97:40:c1:6b:80:8c:6e:4d:
                    10:47:41:fd:3c:24:31:dc:99:a6:70:24:f4:d1:5d:
                    57:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D7:6F:32:08:96:7B:7E:C2:C7:6A:1E:23:06:C8:D8:90:FE:C0:44
            X509v3 Authority Key Identifier:
                keyid:47:9F:29:66:0F:9E:05:B3:E7:2E:0C:85:B1:58:C5:87:0A:E0:E9:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/479F29660F9E05B3E72E0C85B158C5870AE0E95B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac78a3704dabe69d74570cb11566afd1b7dbdd388a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a3a2f34302d3438203d3e203131333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f97e::/40

    Signature Algorithm: sha256WithRSAEncryption
         ac:0e:6c:5f:3a:b1:4b:70:9f:a8:f7:f1:37:c1:cc:13:b2:8b:
         1e:33:3d:c1:4d:ce:04:16:1b:2a:aa:2d:33:2d:eb:6d:24:09:
         a9:55:d4:13:5e:c3:d1:0b:27:0e:41:7f:80:ee:1e:89:a8:4c:
         58:5a:4b:c1:1e:da:31:1c:c4:e0:3b:5d:07:27:c8:83:16:e6:
         01:2f:ef:30:d8:bf:50:a4:16:f8:b1:98:db:7e:12:af:8d:88:
         96:f9:47:b7:82:f1:31:06:14:c7:b3:31:04:d2:02:4a:58:32:
         7a:9b:94:3a:a1:d3:e0:5b:3e:71:a7:7a:93:39:5e:0e:db:50:
         af:35:1c:16:49:41:11:77:69:47:3a:bb:ce:6b:7f:2b:d6:f8:
         a6:0e:2b:eb:48:04:4c:e0:11:0a:d5:79:bc:7e:a6:51:2e:68:
         cd:64:46:d8:1f:fb:2d:f8:ef:61:af:aa:0c:c3:cd:8a:d2:c3:
         84:3c:60:98:6e:cd:68:67:ac:f0:90:17:f5:11:7f:a7:18:45:
         f0:67:ae:38:3b:9a:6c:32:06:29:4c:cb:a3:92:a0:b5:d5:74:
         16:4b:7a:a1:84:81:73:42:36:5c:ae:b4:ab:3c:d5:7c:dd:53:
         e8:62:ee:cb:2d:18:6c:d5:84:a4:5d:82:92:c4:de:66:d5:2e:
         3d:54:a1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----