Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430343a3a2f33322d3438203d3e20343031313131.roa
File:                     323630313a316430343a3a2f33322d3438203d3e20343031313131.roa (raw, json)
Hash identifier:          x6A4iuG7Ajtc7VKrwbUEVlsO6Br2Pzwm01vVaH3KEY8=
Subject key identifier:   79:DE:C8:70:11:89:90:6A:0E:EE:C0:D9:CD:87:A7:4D:5C:21:CC:A9
Certificate issuer:       /CN=cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf
Certificate serial:       3AEDD3179E9AE4FEB75325152C185319E505E097
Authority key identifier: 9A:51:D6:D7:D4:84:FA:0F:C8:55:68:FB:6B:86:E9:1D:8D:F6:F4:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430343a3a2f33322d3438203d3e20343031313131.roa
Signing time:             Thu 20 Jun 2024 05:23:43 +0000
ROA not before:           Thu 20 Jun 2024 05:18:43 +0000
ROA not after:            Thu 19 Jun 2025 05:23:43 +0000
asID:                     401111
IP address blocks:        2601:1d04::/32 maxlen: 48

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 19:23:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ed:d3:17:9e:9a:e4:fe:b7:53:25:15:2c:18:53:19:e5:05:e0:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf
        Validity
            Not Before: Jun 20 05:18:43 2024 GMT
            Not After : Jun 19 05:23:43 2025 GMT
        Subject: CN=79DEC8701189906A0EEEC0D9CD87A74D5C21CCA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2b:07:e8:55:7f:9d:00:bc:1a:c0:12:b7:9f:
                    77:18:72:c7:d2:c3:d5:51:7b:1a:33:c0:90:41:07:
                    74:2b:37:33:11:b0:ad:cf:7c:16:5f:d0:2a:39:68:
                    3e:c5:4e:de:8f:f2:8b:ff:5a:70:46:3b:03:85:9a:
                    dd:2d:43:90:7b:d3:15:53:fe:87:dc:71:6b:ab:97:
                    e1:68:ba:89:0a:97:f1:15:e0:4c:41:94:02:c5:14:
                    4f:09:c1:94:43:d5:76:a5:c6:89:a2:d7:3c:0b:13:
                    c7:88:fb:d3:af:12:99:ea:62:e6:25:56:b1:4b:93:
                    73:aa:35:3e:19:c4:cd:e9:f7:e1:04:2f:34:77:c8:
                    25:f8:5c:b7:fd:6d:c8:30:c2:fd:29:ee:24:00:e0:
                    ae:0c:4f:d1:c0:8a:e9:f0:88:e0:ef:05:12:48:5d:
                    1c:ba:37:ae:c0:50:eb:bb:b6:a8:06:20:2d:6e:d9:
                    cc:87:5f:51:f0:1b:4b:21:72:82:33:ae:cc:f4:fb:
                    66:ea:4c:ed:39:44:d2:dc:28:cd:ba:82:62:bb:cc:
                    62:4f:d5:8c:bd:b3:d7:53:21:cb:69:2d:bc:9e:fa:
                    f3:05:60:e3:f3:df:7c:90:37:0f:d4:f6:ef:46:e6:
                    bb:f0:8e:a8:5c:58:7b:51:1d:2d:55:7f:88:b8:ad:
                    26:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:DE:C8:70:11:89:90:6A:0E:EE:C0:D9:CD:87:A7:4D:5C:21:CC:A9
            X509v3 Authority Key Identifier:
                keyid:9A:51:D6:D7:D4:84:FA:0F:C8:55:68:FB:6B:86:E9:1D:8D:F6:F4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/9A51D6D7D484FA0FC85568FB6B86E91D8DF6F4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430343a3a2f33322d3438203d3e20343031313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d04::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:4d:f8:59:51:82:58:4f:04:0e:46:72:79:e4:b5:d1:bb:aa:
         7d:d5:1a:b1:82:26:8b:c5:cf:15:a3:5d:6a:a0:dd:28:df:0b:
         26:85:c1:63:42:be:1e:e8:d8:d6:0d:c7:55:5f:5f:5a:03:aa:
         39:81:ac:31:cb:79:16:5e:18:3f:b3:b1:53:94:76:52:6b:3c:
         4e:c2:3b:c6:43:9e:9c:ce:b5:e1:b3:ed:cc:eb:5d:56:5f:b7:
         d4:16:da:b2:50:a5:38:bf:f7:47:e1:37:d6:40:1e:95:2f:02:
         72:c7:c0:02:11:0d:f1:c3:2e:a0:d8:29:a5:07:3a:06:f9:66:
         ed:11:ea:35:41:b5:76:29:cd:a1:a7:a8:49:c4:84:56:71:21:
         24:6c:2e:38:ea:03:26:82:5a:02:d7:60:ef:90:ad:7e:2b:85:
         74:d8:1a:18:db:90:a0:9e:d5:22:b2:96:76:d7:a6:54:7e:34:
         1f:fd:12:bb:98:26:be:2b:c3:b9:8a:e6:1e:cd:a9:49:15:94:
         cd:72:5d:11:96:96:40:ff:d6:92:df:b1:dc:e8:ec:a5:0a:31:
         8f:52:eb:ae:23:08:68:47:0d:34:de:39:9d:df:8d:4e:45:ef:
         5d:4c:e5:b7:16:00:dd:d4:5b:80:26:73:18:a4:87:29:7b:19:
         6d:59:be:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----