Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383037623a3a2f34382d3438203d3e20323032323138.roa
File:                     326131323a646434373a383037623a3a2f34382d3438203d3e20323032323138.roa (raw, json)
Hash identifier:          7In2h+vtIUcDsISUXiSyuQswMZpVmeDVoJqOcIWURZM=
Subject key identifier:   99:D5:E7:AE:0D:BC:83:A6:94:4D:DE:F9:7A:07:81:49:67:9E:E7:5F
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       56FBBAECE29F21F72FB9CF6A39E28760F0284E2F
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383037623a3a2f34382d3438203d3e20323032323138.roa
Signing time:             Thu 20 Jun 2024 05:23:40 +0000
ROA not before:           Thu 20 Jun 2024 05:18:40 +0000
ROA not after:            Thu 19 Jun 2025 05:23:40 +0000
asID:                     202218
IP address blocks:        2a12:dd47:807b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 03 Oct 2024 20:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:fb:ba:ec:e2:9f:21:f7:2f:b9:cf:6a:39:e2:87:60:f0:28:4e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:40 2024 GMT
            Not After : Jun 19 05:23:40 2025 GMT
        Subject: CN=99D5E7AE0DBC83A6944DDEF97A078149679EE75F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:73:89:89:b9:8f:38:82:8b:dd:ea:0f:cd:29:
                    02:04:b8:55:7b:6f:7d:c8:eb:ee:cd:ec:c7:33:da:
                    8b:04:1a:0a:ec:fc:cd:1b:b2:aa:54:92:f9:33:0b:
                    cd:1c:fb:3a:f7:a3:b6:90:4c:3f:40:83:64:bc:71:
                    ff:43:8b:07:6d:c3:08:61:ff:65:98:d6:60:4e:f1:
                    ae:01:fa:02:67:2f:56:71:34:00:e1:d8:a3:02:43:
                    15:f5:94:ad:7f:08:c1:07:fe:07:5e:b3:95:40:5f:
                    50:6e:f8:1f:94:99:4d:9d:0c:20:2c:b4:68:60:33:
                    bf:3e:78:95:42:68:77:3d:05:bc:e3:16:59:03:e2:
                    0e:fe:94:df:04:9b:df:b7:89:46:00:13:7a:c3:c0:
                    14:9d:0d:d9:8c:cc:07:c8:ae:29:e6:87:29:eb:b9:
                    94:f9:10:e4:4d:f9:19:c8:ac:33:b2:43:8d:7a:36:
                    21:a9:3e:46:eb:16:0b:60:3c:c0:c8:65:a6:1f:0d:
                    10:cf:84:15:0a:8c:48:aa:9c:b4:40:f2:2d:ec:d5:
                    f9:01:4d:17:1e:98:9f:a7:44:93:17:23:cc:df:78:
                    fb:02:2c:ef:01:5f:b8:6b:13:b5:5e:ee:6d:a3:c0:
                    c3:b1:02:19:50:78:8f:60:a1:bf:ec:c6:20:22:2a:
                    e1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D5:E7:AE:0D:BC:83:A6:94:4D:DE:F9:7A:07:81:49:67:9E:E7:5F
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383037623a3a2f34382d3438203d3e20323032323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:807b::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:12:ff:cb:f7:7e:6f:29:a1:00:5e:c2:c9:51:fa:b7:cd:12:
         f5:a4:26:89:ab:e9:1d:86:77:f8:72:b6:e6:dc:16:8e:62:b7:
         f4:8e:a8:b4:32:3c:70:14:79:e3:5b:19:58:a4:11:f7:f5:db:
         c5:ed:3b:a5:8a:61:84:43:0a:3f:d8:9e:21:b2:a9:8c:68:35:
         19:7e:de:60:da:f5:6c:2f:a5:59:02:ff:2e:d4:8a:3c:16:9b:
         3a:93:92:49:42:f3:c5:b3:12:4e:94:82:a7:77:b3:9e:e8:11:
         58:81:61:49:35:e2:3f:dd:a7:b4:3d:19:10:75:41:c4:40:0d:
         9c:fe:bc:4f:45:c4:be:6c:fd:a9:3b:f4:92:b1:3a:3b:db:50:
         68:3d:ee:12:e7:18:63:39:f9:70:a9:0b:29:a7:69:6f:14:31:
         6c:9e:23:fa:b1:76:82:6c:89:10:a9:17:45:f8:d0:e1:b5:f4:
         9a:fe:73:12:0d:c0:82:0f:c6:ea:6f:6a:f7:1c:08:f4:54:b4:
         06:0b:0f:f4:75:c3:2f:e6:ac:39:08:27:cb:5d:c8:49:f4:02:
         83:18:6b:92:2c:8e:a3:fe:c8:26:bf:c9:48:29:40:7b:5a:4f:
         a5:f9:6f:0f:f2:bc:01:6a:e3:5f:4f:83:a3:2e:0d:1a:df:38:
         1d:3b:64:d6
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUVvu67OKfIfcvuc9qOeKHYPAoTi8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZG
NEM4NTBDMTAeFw0yNDA2MjAwNTE4NDBaFw0yNTA2MTkwNTIzNDBaMDMxMTAvBgNV
BAMTKDk5RDVFN0FFMERCQzgzQTY5NDREREVGOTdBMDc4MTQ5Njc5RUU3NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuc4mJuY84govd6g/NKQIEuFV7
b33I6+7N7Mcz2osEGgrs/M0bsqpUkvkzC80c+zr3o7aQTD9Ag2S8cf9Diwdtwwhh
/2WY1mBO8a4B+gJnL1ZxNADh2KMCQxX1lK1/CMEH/gdes5VAX1Bu+B+UmU2dDCAs
tGhgM78+eJVCaHc9BbzjFlkD4g7+lN8Em9+3iUYAE3rDwBSdDdmMzAfIrinmhynr
uZT5EORN+RnIrDOyQ416NiGpPkbrFgtgPMDIZaYfDRDPhBUKjEiqnLRA8i3s1fkB
TRcemJ+nRJMXI8zfePsCLO8BX7hrE7Ve7m2jwMOxAhlQeI9gob/sxiAiKuFnAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUmdXnrg28g6aUTd75egeBSWee518wHwYDVR0j
BBgwFoAUdluLN+VTa+SaC/PWDvZntvTIUMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvMS83NjVCOEIzN0U1
NTM2QkU0OUEwQkYzRDYwRUY2NjdCNkY0Qzg1MEMxLmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzUvNzY1
QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZGNEM4NTBDMS5jZXIwgawGCCsG
AQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC8xLzMyNjEzMTMyM2E2NDY0MzQzNzNhMzgzMDM3NjIzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMjMwMzIzMjMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqEt1HgHswDQYJKoZIhvcN
AQELBQADggEBAF0S/8v3fm8poQBewslR+rfNEvWkJomr6R2Gd/hytubcFo5it/SO
qLQyPHAUeeNbGVikEff128XtO6WKYYRDCj/YniGyqYxoNRl+3mDa9WwvpVkC/y7U
ijwWmzqTkklC88WzEk6Ugqd3s57oEViBYUk14j/dp7Q9GRB1QcRADZz+vE9FxL5s
/ak79JKxOjvbUGg97hLnGGM5+XCpCymnaW8UMWyeI/qxdoJsiRCpF0X40OG19Jr+
cxINwIIPxupvavccCPRUtAYLD/R1wy/mrDkIJ8tdyEn0AoMYa5IsjqP+yCa/yUgp
QHtaT6X5bw/yvAFq419Pg6MuDRrfOB07ZNY=
-----END CERTIFICATE-----