Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/14/326130353a646663363a393430303a3a2f34302d3438203d3e20323135313635.roa
File:                     326130353a646663363a393430303a3a2f34302d3438203d3e20323135313635.roa (raw, json)
Hash identifier:          7WIiY5dbftlq2bSOEr7ZZH3moFRL5dr7AE+TPJFjkhA=
Subject key identifier:   9D:31:2A:CF:25:40:49:57:E9:BB:0F:F9:33:00:57:F0:EF:BC:23:2F
Certificate issuer:       /CN=83A7D195284957F50D83CDF37583C8652095A716
Certificate serial:       668FA10F4F67E541DE2FAD372BAA09EE04939D72
Authority key identifier: 83:A7:D1:95:28:49:57:F5:0D:83:CD:F3:75:83:C8:65:20:95:A7:16
Authority info access:    rsync://dev.tw/rpki/August/13/83A7D195284957F50D83CDF37583C8652095A716.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/14/326130353a646663363a393430303a3a2f34302d3438203d3e20323135313635.roa
Signing time:             Tue 24 Sep 2024 01:46:30 +0000
ROA not before:           Tue 24 Sep 2024 01:41:30 +0000
ROA not after:            Tue 23 Sep 2025 01:46:30 +0000
asID:                     215165
IP address blocks:        2a05:dfc6:9400::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 11 Oct 2024 07:26:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8f:a1:0f:4f:67:e5:41:de:2f:ad:37:2b:aa:09:ee:04:93:9d:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83A7D195284957F50D83CDF37583C8652095A716
        Validity
            Not Before: Sep 24 01:41:30 2024 GMT
            Not After : Sep 23 01:46:30 2025 GMT
        Subject: CN=9D312ACF25404957E9BB0FF9330057F0EFBC232F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f4:b4:d9:f9:ec:45:21:29:74:bd:87:f0:7a:
                    a4:90:ef:a1:7b:9d:a6:f0:9b:a6:fa:fb:6b:e9:72:
                    f6:ae:95:05:97:17:33:a9:a2:e5:5d:1f:34:38:a3:
                    51:5c:df:a7:b5:99:0b:cb:f3:b5:23:62:0d:1f:90:
                    ff:19:e5:81:d9:01:a3:24:05:00:e9:18:f2:02:0f:
                    b6:56:5d:c2:7e:17:f7:5d:de:ab:48:8e:1d:16:f5:
                    59:6a:94:8b:fd:eb:89:76:24:f4:f8:4a:ea:16:2f:
                    09:f5:71:c2:94:02:73:83:b4:51:f7:5e:47:68:85:
                    2b:2d:7d:00:60:74:3a:4e:02:cb:c3:95:4d:35:a4:
                    19:3f:54:1c:a1:84:71:1d:c5:76:2e:b1:d4:65:7f:
                    a9:1b:f8:cc:43:d6:a9:de:e0:d1:ce:4a:95:41:e4:
                    a0:8a:cb:c2:c1:b3:9b:c0:8f:13:bc:e6:de:fd:c9:
                    f8:24:39:93:c4:e1:da:80:23:95:92:db:d9:bb:a7:
                    eb:14:2d:8f:99:aa:ff:07:45:c0:96:3c:18:eb:a7:
                    da:31:b9:05:0f:c7:18:02:a7:19:23:0f:7a:ec:92:
                    94:55:77:55:ed:78:1f:c3:4d:5a:33:47:3b:ba:f9:
                    ea:f5:92:1e:98:8d:3a:66:87:e6:7e:0f:19:27:83:
                    a5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:31:2A:CF:25:40:49:57:E9:BB:0F:F9:33:00:57:F0:EF:BC:23:2F
            X509v3 Authority Key Identifier:
                keyid:83:A7:D1:95:28:49:57:F5:0D:83:CD:F3:75:83:C8:65:20:95:A7:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/14/83A7D195284957F50D83CDF37583C8652095A716.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/13/83A7D195284957F50D83CDF37583C8652095A716.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/14/326130353a646663363a393430303a3a2f34302d3438203d3e20323135313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc6:9400::/40

    Signature Algorithm: sha256WithRSAEncryption
         be:43:4c:4b:70:06:34:ab:c7:1a:ac:c1:bb:0b:4f:95:bf:3a:
         61:a3:97:c7:c3:f7:ba:05:40:d6:b6:41:a2:4e:86:ac:3c:50:
         66:4b:c4:00:37:ae:26:bd:15:02:a5:36:f4:59:d4:a2:dd:44:
         39:fc:19:c7:b0:cb:4c:96:4e:33:55:a3:71:66:56:32:1d:bb:
         ae:de:f5:68:76:a9:75:4d:89:b5:de:81:8c:34:8b:2d:c2:2c:
         f9:c8:b4:f0:43:4f:e9:2e:8d:27:74:92:a3:91:d1:74:05:b9:
         23:81:33:ac:4a:8d:fd:4d:5f:53:a0:22:1e:8e:d4:c4:33:67:
         a1:cd:39:d1:d0:a3:50:3a:28:44:72:4d:7f:cd:e5:56:ab:e7:
         b6:82:51:e4:a4:e0:13:31:88:d9:e5:62:c9:fd:aa:f6:a3:79:
         2c:e0:8d:bc:89:8b:5b:c5:86:83:f8:22:ef:79:13:0a:e7:80:
         99:99:6d:6a:d8:14:0c:b3:93:17:b7:3d:be:34:8d:f2:ec:42:
         76:cf:8b:2d:e8:39:bc:ef:25:3a:39:27:cf:47:ff:27:a0:44:
         ac:eb:2e:78:97:01:66:87:a9:fc:1e:ac:9a:31:48:3c:e4:5d:
         0f:a0:2b:6b:14:c0:92:2a:72:25:a7:0b:1e:44:e5:31:71:d8:
         c5:a5:98:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----