Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383136313a3a2f34382d3438203d3e20323032343132.roa
File:                     326131323a646434373a383136313a3a2f34382d3438203d3e20323032343132.roa (raw, json)
Hash identifier:          GSzzq+lfpFcGebAbLvcrucaoi+Gs4FBsigvekCPHVJE=
Subject key identifier:   8A:36:20:45:78:9F:39:64:C4:DF:23:D8:60:35:8B:59:65:71:DC:18
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       53C6D342DFF813798D590CF73158556F54E5616B
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383136313a3a2f34382d3438203d3e20323032343132.roa
Signing time:             Thu 20 Jun 2024 05:23:21 +0000
ROA not before:           Thu 20 Jun 2024 05:18:21 +0000
ROA not after:            Thu 19 Jun 2025 05:23:21 +0000
asID:                     202412
IP address blocks:        2a12:dd47:8161::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 21:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c6:d3:42:df:f8:13:79:8d:59:0c:f7:31:58:55:6f:54:e5:61:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:21 2024 GMT
            Not After : Jun 19 05:23:21 2025 GMT
        Subject: CN=8A362045789F3964C4DF23D860358B596571DC18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bf:f5:7f:c8:ae:11:1a:13:b6:1f:f7:66:83:
                    ac:64:73:06:42:c0:4c:2e:8b:82:79:4d:2c:9b:47:
                    69:81:9a:9d:44:d0:b5:e6:f5:d6:ff:ce:35:86:03:
                    00:9c:92:59:ab:bf:8b:e8:57:2d:01:78:11:ab:bf:
                    4b:21:51:00:e2:25:32:1d:de:78:e9:a4:ae:b2:4d:
                    60:8e:9d:d7:cc:5a:1e:89:45:73:ac:cd:ec:88:41:
                    7e:b6:2a:2d:e1:89:f5:b9:21:9a:e1:9d:69:be:3a:
                    73:82:c9:a5:1b:5b:64:81:68:46:3d:96:0a:3c:c5:
                    d9:e2:d3:55:81:38:4d:54:d9:23:cb:c3:c0:24:98:
                    fa:b4:04:72:62:62:96:eb:22:d8:86:92:b6:d7:62:
                    4e:c7:ce:8a:6e:59:cd:5c:3a:3f:a8:d3:4c:5d:2f:
                    7b:8c:52:53:8e:8f:2c:0f:58:c8:3b:bb:98:ca:06:
                    96:12:71:d2:db:f4:1f:85:c3:38:61:b8:d7:a4:fe:
                    34:9d:ed:27:8d:5d:9a:72:92:4d:97:ba:0e:64:9d:
                    77:97:11:35:ba:3f:58:08:93:96:28:e2:97:19:8b:
                    77:14:75:8f:d0:43:38:18:f6:7c:f9:32:32:9c:1a:
                    c8:28:2d:8b:de:74:0e:30:c2:75:d2:30:29:bf:19:
                    a3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:36:20:45:78:9F:39:64:C4:DF:23:D8:60:35:8B:59:65:71:DC:18
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383136313a3a2f34382d3438203d3e20323032343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8161::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:78:0f:9d:3b:5d:b4:a7:44:96:4f:11:8e:05:e1:76:d1:6b:
         fc:5b:e8:8e:7b:31:1e:96:51:c6:cc:1e:8e:5c:6f:d7:0e:d8:
         11:7b:30:09:68:53:7e:8e:fa:5e:fd:63:d9:03:1e:8d:d1:e1:
         fd:a3:2b:69:6a:f2:86:c7:d5:59:f3:64:6a:80:95:ac:fe:a2:
         55:68:5e:38:b3:e2:66:52:2a:66:79:af:d7:91:63:4c:36:63:
         68:c1:d8:42:ca:ee:4d:a5:ab:62:e8:8a:8a:d7:14:86:59:f9:
         74:49:a6:e6:b2:bf:d5:c9:9a:cd:2d:a9:d1:01:4f:d9:cd:ac:
         27:82:60:12:0c:5a:61:a4:30:96:aa:22:24:e4:78:63:07:ac:
         63:1c:43:bd:59:74:67:f2:fb:cd:72:98:57:74:54:4a:51:95:
         c6:41:d6:b0:92:1b:2b:49:7d:03:1a:c6:36:b8:dc:8c:15:ae:
         50:41:95:6a:a3:f0:2c:eb:96:07:cd:ca:73:37:b9:f0:d1:d6:
         9e:49:5e:3f:e8:7b:6a:5b:ec:1a:b6:ad:11:47:c7:bc:3a:8c:
         a5:75:e2:ed:68:0b:12:a6:7f:d0:98:94:ed:1f:4c:40:16:5a:
         8e:fe:92:e1:a8:c4:f0:18:00:f9:d9:66:fd:fd:55:e4:4b:b6:
         e8:bc:05:02
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUU8bTQt/4E3mNWQz3MVhVb1TlYWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZG
NEM4NTBDMTAeFw0yNDA2MjAwNTE4MjFaFw0yNTA2MTkwNTIzMjFaMDMxMTAvBgNV
BAMTKDhBMzYyMDQ1Nzg5RjM5NjRDNERGMjNEODYwMzU4QjU5NjU3MURDMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvv/V/yK4RGhO2H/dmg6xkcwZC
wEwui4J5TSybR2mBmp1E0LXm9db/zjWGAwCcklmrv4voVy0BeBGrv0shUQDiJTId
3njppK6yTWCOndfMWh6JRXOszeyIQX62Ki3hifW5IZrhnWm+OnOCyaUbW2SBaEY9
lgo8xdni01WBOE1U2SPLw8AkmPq0BHJiYpbrItiGkrbXYk7HzopuWc1cOj+o00xd
L3uMUlOOjywPWMg7u5jKBpYScdLb9B+FwzhhuNek/jSd7SeNXZpykk2Xug5knXeX
ETW6P1gIk5Yo4pcZi3cUdY/QQzgY9nz5MjKcGsgoLYvedA4wwnXSMCm/GaOrAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUijYgRXifOWTE3yPYYDWLWWVx3BgwHwYDVR0j
BBgwFoAUdluLN+VTa+SaC/PWDvZntvTIUMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvMS83NjVCOEIzN0U1
NTM2QkU0OUEwQkYzRDYwRUY2NjdCNkY0Qzg1MEMxLmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzUvNzY1
QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZGNEM4NTBDMS5jZXIwgawGCCsG
AQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC8xLzMyNjEzMTMyM2E2NDY0MzQzNzNhMzgzMTM2MzEzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMjMwMzIzNDMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqEt1HgWEwDQYJKoZIhvcN
AQELBQADggEBAIt4D507XbSnRJZPEY4F4XbRa/xb6I57MR6WUcbMHo5cb9cO2BF7
MAloU36O+l79Y9kDHo3R4f2jK2lq8obH1VnzZGqAlaz+olVoXjiz4mZSKmZ5r9eR
Y0w2Y2jB2ELK7k2lq2LoiorXFIZZ+XRJpuayv9XJms0tqdEBT9nNrCeCYBIMWmGk
MJaqIiTkeGMHrGMcQ71ZdGfy+81ymFd0VEpRlcZB1rCSGytJfQMaxja43IwVrlBB
lWqj8CzrlgfNynM3ufDR1p5JXj/oe2pb7Bq2rRFHx7w6jKV14u1oCxKmf9CYlO0f
TEAWWo7+kuGoxPAYAPnZZv39VeRLtui8BQI=
-----END CERTIFICATE-----