Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/14/326130353a646663363a393430303a3a2f34302d3438203d3e20323135313635.roa
File:                     326130353a646663363a393430303a3a2f34302d3438203d3e20323135313635.roa (raw, json)
Hash identifier:          8XzCfmjGftvb3/9VnaveFOg/8k6oTsIbwN4wh12IJms=
Subject key identifier:   E0:C7:1E:3E:95:09:9B:BB:68:DE:0E:19:30:AA:D0:C4:B6:C1:77:32
Certificate issuer:       /CN=83A7D195284957F50D83CDF37583C8652095A716
Certificate serial:       0ED191C575EBF16B6C5E94E100C399981710DEA4
Authority key identifier: 83:A7:D1:95:28:49:57:F5:0D:83:CD:F3:75:83:C8:65:20:95:A7:16
Authority info access:    rsync://dev.tw/rpki/August/13/83A7D195284957F50D83CDF37583C8652095A716.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/14/326130353a646663363a393430303a3a2f34302d3438203d3e20323135313635.roa
Signing time:             Thu 20 Jun 2024 05:23:06 +0000
ROA not before:           Thu 20 Jun 2024 05:18:06 +0000
ROA not after:            Thu 19 Jun 2025 05:23:06 +0000
asID:                     215165
IP address blocks:        2a05:dfc6:9400::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 21:31:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d1:91:c5:75:eb:f1:6b:6c:5e:94:e1:00:c3:99:98:17:10:de:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83A7D195284957F50D83CDF37583C8652095A716
        Validity
            Not Before: Jun 20 05:18:06 2024 GMT
            Not After : Jun 19 05:23:06 2025 GMT
        Subject: CN=E0C71E3E95099BBB68DE0E1930AAD0C4B6C17732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e7:cc:02:3f:88:5f:8f:b2:e1:c5:81:2b:04:
                    5c:ff:66:b3:04:5d:59:c5:e9:4a:89:dd:e3:54:7f:
                    14:21:77:0f:7f:7e:be:ca:0a:a9:26:a3:91:62:76:
                    32:34:47:04:0c:08:12:7b:65:4f:ba:11:47:05:78:
                    0b:08:fa:fd:f8:b1:18:e9:75:96:67:d4:f7:e1:5b:
                    2e:8a:df:28:12:40:9e:20:b9:10:9a:a8:6e:63:82:
                    dc:cd:58:f4:20:3b:43:18:f3:e9:42:1d:16:a8:dc:
                    43:2f:40:17:e6:7d:26:a9:3a:b2:1c:b1:36:c8:c9:
                    93:14:8a:2b:16:9c:5d:40:c4:77:3f:8b:f6:59:51:
                    39:8b:99:b6:85:f8:88:49:c4:5a:78:b2:1c:95:f2:
                    15:e0:c1:62:c1:bc:2b:5f:53:49:06:6b:0f:82:83:
                    2a:9b:5d:69:28:7d:25:fb:f7:d4:0d:1f:fd:db:2a:
                    05:dc:77:3d:5e:20:cf:ad:a8:52:db:b6:3c:22:36:
                    0c:35:b1:90:74:97:2b:51:09:87:e2:27:77:d7:59:
                    96:3c:28:59:d6:ab:12:86:1c:3d:c2:6f:f7:0a:18:
                    70:cd:bd:6a:4c:ec:ef:84:1a:a3:c8:d3:80:35:44:
                    07:a7:95:5f:bd:ad:93:b1:18:71:9c:9a:b4:bd:56:
                    2d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C7:1E:3E:95:09:9B:BB:68:DE:0E:19:30:AA:D0:C4:B6:C1:77:32
            X509v3 Authority Key Identifier:
                keyid:83:A7:D1:95:28:49:57:F5:0D:83:CD:F3:75:83:C8:65:20:95:A7:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/14/83A7D195284957F50D83CDF37583C8652095A716.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/13/83A7D195284957F50D83CDF37583C8652095A716.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/14/326130353a646663363a393430303a3a2f34302d3438203d3e20323135313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc6:9400::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:c2:bb:50:c5:d9:50:f7:2b:09:d9:02:f7:05:2b:d3:a0:d0:
         cc:da:27:00:41:7b:55:7c:9b:2e:f8:92:0e:b3:ff:60:60:dc:
         96:16:b2:c6:fa:95:1c:df:97:0e:49:ca:1a:99:81:90:ed:0a:
         ca:ea:0d:a5:99:e3:3f:b6:78:a9:1a:57:a9:b2:ff:4f:5b:dd:
         40:f1:2b:82:03:f8:40:ca:26:89:20:39:f2:02:65:fb:95:be:
         34:c2:0a:73:e5:af:16:80:40:6f:ce:35:c5:21:e0:8e:92:90:
         1e:ca:d3:1b:14:3d:76:80:65:39:51:3c:4a:6f:7f:3d:c8:d8:
         cc:14:ae:cd:2a:53:37:ed:81:2a:88:30:43:1c:4e:ab:48:c1:
         68:07:b9:f9:31:40:47:3c:e8:ca:73:a1:6f:7a:a2:09:22:2d:
         7b:e4:23:80:f2:5d:fe:3f:a2:7c:64:0e:e3:aa:bb:af:cd:ac:
         30:9f:43:33:f4:2e:8d:65:e4:a4:7b:7d:4f:f4:38:f3:12:98:
         86:aa:4c:59:c8:c4:21:d0:b8:62:a0:b4:da:c0:7c:04:22:68:
         01:83:b8:9e:01:36:6c:81:df:76:21:bb:ad:68:d9:6d:07:43:
         c7:32:36:37:66:02:30:44:d5:dd:e9:c2:78:89:c5:ab:31:b6:
         74:bf:a9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----