Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a663830303a3a2f34302d3438203d3e20323032353733.roa
File:                     326131323a646434373a663830303a3a2f34302d3438203d3e20323032353733.roa (raw, json)
Hash identifier:          SExzYK11ImgU88f72C2jELSr175UVzf3Lh0jwQAqV+8=
Subject key identifier:   B5:B0:46:9B:C0:EE:29:99:E2:D3:41:23:13:CF:C5:08:D1:1D:CF:08
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       595CFF971CFDC7211990759334A549B4BD1A6BC2
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a663830303a3a2f34302d3438203d3e20323032353733.roa
Signing time:             Thu 20 Jun 2024 05:23:31 +0000
ROA not before:           Thu 20 Jun 2024 05:18:31 +0000
ROA not after:            Thu 19 Jun 2025 05:23:31 +0000
asID:                     202573
IP address blocks:        2a12:dd47:f800::/40 maxlen: 48

Validation:               Failed, certificate revoked on Thu 05 Sep 2024 01:38:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5c:ff:97:1c:fd:c7:21:19:90:75:93:34:a5:49:b4:bd:1a:6b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:31 2024 GMT
            Not After : Jun 19 05:23:31 2025 GMT
        Subject: CN=B5B0469BC0EE2999E2D3412313CFC508D11DCF08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0b:1a:46:de:6f:37:f2:f5:a7:ea:94:1d:d9:
                    eb:95:09:61:a3:e2:27:bc:70:b1:09:cc:eb:89:23:
                    43:92:75:64:8c:8e:26:62:91:c1:49:bf:42:bc:f9:
                    e6:fc:30:f9:1c:83:5e:9c:17:21:6b:b0:b7:86:4c:
                    76:e9:dd:04:32:87:f6:f6:d7:26:01:f9:e0:17:c9:
                    25:df:46:11:8c:3c:98:05:36:87:f0:31:c0:d4:48:
                    f4:d3:e3:18:8f:97:25:5c:9e:9c:5b:1d:15:9c:45:
                    1f:da:95:57:40:35:6d:63:03:c4:e8:d7:c1:6f:9b:
                    06:23:1f:ab:ea:b7:00:4e:b8:a0:84:15:99:34:e3:
                    c9:94:04:2d:53:a1:73:37:ed:87:4e:fc:59:53:73:
                    9e:1a:69:af:8e:39:d2:6d:32:e8:11:63:64:c5:54:
                    cf:f9:67:eb:08:ed:cc:1c:83:1f:de:c4:bc:16:d5:
                    14:78:67:88:95:cb:6b:7a:67:3f:8e:90:e0:33:b0:
                    9e:af:d9:7f:ad:05:3d:06:e6:b4:bb:ad:ba:c0:16:
                    01:2a:98:7e:68:24:ed:95:c4:a9:e0:6e:91:b9:a3:
                    1f:df:f0:61:a6:c5:c6:66:57:64:a1:72:21:0f:34:
                    01:91:49:c3:09:e3:10:6d:2d:f2:ab:24:31:83:c0:
                    a2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B0:46:9B:C0:EE:29:99:E2:D3:41:23:13:CF:C5:08:D1:1D:CF:08
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a663830303a3a2f34302d3438203d3e20323032353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:f800::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:98:51:38:37:1b:47:db:47:65:4e:ca:07:30:dc:77:02:aa:
         57:18:d2:1a:b2:d3:a2:e0:64:8e:42:8c:ea:ab:bb:a0:81:e5:
         a8:c2:48:05:21:6a:e8:ae:e3:90:70:cb:d7:bf:5e:92:2f:ec:
         43:6d:54:4b:e5:9a:a5:fa:3c:ba:8f:2f:0c:85:6d:73:44:40:
         1a:00:0d:a0:5c:d0:4b:42:64:d9:8a:d6:5b:ce:7f:dd:54:15:
         e9:b9:15:05:d4:58:bb:aa:55:58:f9:e7:25:10:4e:b3:2a:9e:
         f7:0a:b0:df:cf:7f:7e:6f:47:c7:29:07:31:b1:11:c6:0f:95:
         ce:9f:c8:42:8b:dc:f3:9d:78:51:e6:90:7c:5a:dd:11:f6:b4:
         56:19:88:2d:50:a2:7e:78:30:ab:20:1c:c0:f9:ea:8d:de:1f:
         2c:9b:e4:d3:d2:94:bd:81:b0:b2:dd:b5:77:3a:f9:e9:02:84:
         38:c7:5b:49:e2:5d:81:a6:9c:3a:02:91:b6:90:7e:5b:91:81:
         db:8f:eb:2f:c0:b4:a7:41:2e:1f:57:bb:15:7e:35:aa:3d:72:
         83:56:56:08:38:8a:84:fd:3a:b6:1b:83:24:a7:f9:b1:41:ac:
         0d:bd:1e:0c:58:68:c1:f8:c0:0a:4d:48:25:18:44:65:d3:47:
         e4:99:13:98
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUWVz/lxz9xyEZkHWTNKVJtL0aa8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZG
NEM4NTBDMTAeFw0yNDA2MjAwNTE4MzFaFw0yNTA2MTkwNTIzMzFaMDMxMTAvBgNV
BAMTKEI1QjA0NjlCQzBFRTI5OTlFMkQzNDEyMzEzQ0ZDNTA4RDExRENGMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdCxpG3m838vWn6pQd2euVCWGj
4ie8cLEJzOuJI0OSdWSMjiZikcFJv0K8+eb8MPkcg16cFyFrsLeGTHbp3QQyh/b2
1yYB+eAXySXfRhGMPJgFNofwMcDUSPTT4xiPlyVcnpxbHRWcRR/alVdANW1jA8To
18FvmwYjH6vqtwBOuKCEFZk048mUBC1ToXM37YdO/FlTc54aaa+OOdJtMugRY2TF
VM/5Z+sI7cwcgx/exLwW1RR4Z4iVy2t6Zz+OkOAzsJ6v2X+tBT0G5rS7rbrAFgEq
mH5oJO2VxKngbpG5ox/f8GGmxcZmV2ShciEPNAGRScMJ4xBtLfKrJDGDwKIDAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUtbBGm8DuKZni00EjE8/FCNEdzwgwHwYDVR0j
BBgwFoAUdluLN+VTa+SaC/PWDvZntvTIUMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvMS83NjVCOEIzN0U1
NTM2QkU0OUEwQkYzRDYwRUY2NjdCNkY0Qzg1MEMxLmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzUvNzY1
QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZGNEM4NTBDMS5jZXIwgawGCCsG
AQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC8xLzMyNjEzMTMyM2E2NDY0MzQzNzNhNjYzODMwMzAzYTNhMmYzNDMwMmQzNDM4
MjAzZDNlMjAzMjMwMzIzNTM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqEt1H+DANBgkqhkiG9w0B
AQsFAAOCAQEAiphRODcbR9tHZU7KBzDcdwKqVxjSGrLTouBkjkKM6qu7oIHlqMJI
BSFq6K7jkHDL179eki/sQ21US+Wapfo8uo8vDIVtc0RAGgANoFzQS0Jk2YrWW85/
3VQV6bkVBdRYu6pVWPnnJRBOsyqe9wqw389/fm9HxykHMbERxg+Vzp/IQovc8514
UeaQfFrdEfa0VhmILVCifngwqyAcwPnqjd4fLJvk09KUvYGwst21dzr56QKEOMdb
SeJdgaacOgKRtpB+W5GB24/rL8C0p0EuH1e7FX41qj1yg1ZWCDiKhP06thuDJKf5
sUGsDb0eDFhowfjACk1IJRhEZdNH5JkTmA==
-----END CERTIFICATE-----