Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a66663a3a2f34382d3438203d3e203131333538.roa
File:                     323630323a663937653a66663a3a2f34382d3438203d3e203131333538.roa (raw, json)
Hash identifier:          FYKGvAZJX5g+aAyRrzOvbQj3BIr4qTwO/EbK8L0BfrM=
Subject key identifier:   61:C1:F1:AE:66:37:33:D4:33:46:AC:0B:64:1F:F4:31:2D:F0:25:0B
Certificate issuer:       /CN=ba21647aac78a3704dabe69d74570cb11566afd1b7dbdd388a
Certificate serial:       4CD6BCF9C40B28572A101E004A43D93455354BAA
Authority key identifier: 47:9F:29:66:0F:9E:05:B3:E7:2E:0C:85:B1:58:C5:87:0A:E0:E9:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac78a3704dabe69d74570cb11566afd1b7dbdd388a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a66663a3a2f34382d3438203d3e203131333538.roa
Signing time:             Thu 22 Aug 2024 22:42:39 +0000
ROA not before:           Thu 22 Aug 2024 22:37:39 +0000
ROA not after:            Thu 21 Aug 2025 22:42:39 +0000
asID:                     11358
IP address blocks:        2602:f97e:ff::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 26 Oct 2024 01:36:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d6:bc:f9:c4:0b:28:57:2a:10:1e:00:4a:43:d9:34:55:35:4b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba21647aac78a3704dabe69d74570cb11566afd1b7dbdd388a
        Validity
            Not Before: Aug 22 22:37:39 2024 GMT
            Not After : Aug 21 22:42:39 2025 GMT
        Subject: CN=61C1F1AE663733D43346AC0B641FF4312DF0250B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:63:80:81:46:64:53:9e:55:af:a8:15:24:46:
                    e3:07:1a:2c:b2:1f:83:3c:f5:0a:a0:e5:1e:41:f8:
                    58:29:23:dc:51:54:08:14:7d:46:f2:85:91:62:6c:
                    b0:6d:4a:9b:96:34:c5:68:af:93:e6:c1:16:56:b7:
                    c7:de:5d:8f:76:30:c0:39:49:88:51:e6:87:3b:75:
                    30:21:d1:8b:6a:5f:78:e3:9d:48:a1:8a:50:8c:c5:
                    bc:14:44:38:21:fa:1c:29:cb:c3:aa:51:12:1b:c5:
                    73:70:5a:9b:3c:6d:bf:57:3e:55:45:73:e5:71:ce:
                    30:2a:e9:dd:f6:f6:c0:4f:0b:af:a9:f1:98:d5:97:
                    32:11:72:1e:d3:96:4a:d2:d8:c5:d5:de:6d:43:1b:
                    fc:6c:78:d7:b8:06:a7:75:4e:e2:d9:a8:b5:e3:28:
                    73:67:d1:39:5d:90:b8:c2:94:0b:c9:1d:e5:3e:d0:
                    3b:41:40:d9:09:ab:96:04:51:0e:b4:be:3a:00:d5:
                    0f:e0:03:0b:96:02:a3:9b:ee:89:3f:dc:4c:ca:ad:
                    ef:30:af:fd:6b:15:84:e7:60:15:c0:f9:c0:18:ce:
                    c5:96:55:7c:7d:be:9c:00:9c:66:c9:4b:20:aa:4e:
                    3f:31:c0:e1:a8:65:8e:c2:c4:53:b6:bc:56:df:12:
                    fd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C1:F1:AE:66:37:33:D4:33:46:AC:0B:64:1F:F4:31:2D:F0:25:0B
            X509v3 Authority Key Identifier:
                keyid:47:9F:29:66:0F:9E:05:B3:E7:2E:0C:85:B1:58:C5:87:0A:E0:E9:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/479F29660F9E05B3E72E0C85B158C5870AE0E95B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac78a3704dabe69d74570cb11566afd1b7dbdd388a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a66663a3a2f34382d3438203d3e203131333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f97e:ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:b9:da:c4:1d:aa:63:cd:15:f0:c6:34:bd:d4:59:aa:8f:0d:
         8e:31:b1:87:9b:1d:17:c0:ac:82:77:7e:72:36:16:5a:91:97:
         bf:49:3b:62:51:87:f2:3e:ae:a8:fc:17:40:b1:60:d3:a0:b1:
         d8:36:f3:92:2d:bc:3a:95:8f:e8:18:4b:d3:71:78:b5:b9:32:
         e8:cc:d3:2b:0c:51:d7:be:9d:bf:1d:8b:13:fb:12:f4:cd:de:
         3f:cf:64:e5:c0:93:61:80:b4:13:fe:a9:c0:64:d1:45:97:5f:
         6e:05:82:93:dd:0e:9d:9f:60:ff:08:74:60:ad:04:b7:c5:18:
         c2:30:c0:c1:02:a8:b1:54:73:37:dc:b5:7c:58:72:12:24:d5:
         c6:69:20:fd:b9:28:2f:85:ff:ac:71:54:6e:54:22:55:9a:49:
         54:d6:91:6a:cc:3c:51:1e:0b:23:35:f0:af:ae:8f:c8:a4:81:
         0a:32:54:18:24:cf:cf:49:c4:e1:22:f7:b1:99:12:be:cf:ba:
         bf:21:ac:5b:b8:b5:d9:02:83:0c:b4:de:6c:7d:07:cd:4a:62:
         dd:3f:c1:97:1d:e2:71:17:8e:50:4c:b2:97:3f:b3:3f:fa:f7:
         ae:c2:ec:6a:92:c3:48:f2:68:67:67:5c:eb:bb:e0:e8:7a:78:
         d1:e0:0c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----