Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a363030303a3a2f34342d3438203d3e2031303132.roa
File:                     323630313a316430383a363030303a3a2f34342d3438203d3e2031303132.roa (raw, json)
Hash identifier:          w2vI12DQU3tFWzEvVthnIaCszFjKKdFJ9ITWqYau3pA=
Subject key identifier:   6D:3B:C1:25:FC:A5:3A:DC:26:D5:03:90:A1:5A:CB:D4:BA:87:B6:21
Certificate issuer:       /CN=cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf
Certificate serial:       7F599EC5983F498ADE63BD2B5AAAFBA087E1B70B
Authority key identifier: 9A:51:D6:D7:D4:84:FA:0F:C8:55:68:FB:6B:86:E9:1D:8D:F6:F4:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a363030303a3a2f34342d3438203d3e2031303132.roa
Signing time:             Thu 20 Jun 2024 05:23:41 +0000
ROA not before:           Thu 20 Jun 2024 05:18:41 +0000
ROA not after:            Thu 19 Jun 2025 05:23:41 +0000
asID:                     1012
IP address blocks:        2601:1d08:6000::/44 maxlen: 48

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 19:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:59:9e:c5:98:3f:49:8a:de:63:bd:2b:5a:aa:fb:a0:87:e1:b7:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf
        Validity
            Not Before: Jun 20 05:18:41 2024 GMT
            Not After : Jun 19 05:23:41 2025 GMT
        Subject: CN=6D3BC125FCA53ADC26D50390A15ACBD4BA87B621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b2:d6:4d:4a:97:7f:a6:65:0c:a1:d4:5b:9d:
                    ae:00:7a:31:5b:cb:2b:2f:08:60:44:7d:24:20:8f:
                    54:d2:1f:c0:0a:01:67:41:d8:ec:46:f8:92:2d:07:
                    50:b6:2c:08:63:6b:33:9b:25:28:0c:21:96:b1:00:
                    52:ce:db:72:8c:8a:ac:15:ba:a9:38:04:c5:dc:49:
                    10:67:c2:f2:cd:cc:18:d9:77:62:27:09:d9:f6:9b:
                    b6:86:f0:40:70:9e:08:69:79:7b:ab:10:94:bb:d4:
                    13:3d:c6:33:f9:b3:cd:aa:dd:28:04:64:39:7c:a4:
                    1f:86:2a:a7:1d:d8:73:a4:12:10:7e:2f:cc:b8:19:
                    3a:00:57:40:f3:ec:47:4c:90:02:1f:8d:61:8c:40:
                    f3:28:f2:40:11:6b:7b:b3:dc:a1:7a:56:b0:0e:7b:
                    83:4f:13:a7:6c:11:1e:8d:45:bb:08:70:d0:77:3e:
                    d6:2a:85:3d:09:f2:b4:f2:67:2d:3c:50:bd:b2:96:
                    46:7f:50:9c:d5:54:24:79:7e:ad:6a:6f:08:6f:27:
                    9e:2a:94:dc:b0:81:fb:75:2d:72:de:ce:ec:17:6f:
                    ee:32:cf:af:63:4d:6e:f6:46:c9:85:cf:34:db:ce:
                    38:cb:40:15:8c:15:c0:33:09:6c:8e:7f:76:24:38:
                    51:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3B:C1:25:FC:A5:3A:DC:26:D5:03:90:A1:5A:CB:D4:BA:87:B6:21
            X509v3 Authority Key Identifier:
                keyid:9A:51:D6:D7:D4:84:FA:0F:C8:55:68:FB:6B:86:E9:1D:8D:F6:F4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/9A51D6D7D484FA0FC85568FB6B86E91D8DF6F4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a363030303a3a2f34342d3438203d3e2031303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d08:6000::/44

    Signature Algorithm: sha256WithRSAEncryption
         a3:bb:2f:fa:42:7a:33:f3:a6:e5:56:12:cc:84:12:bc:b8:41:
         8f:93:88:ff:64:09:3b:45:5e:49:ea:87:5c:01:f2:0d:15:a9:
         8a:d5:6e:bf:70:3c:88:d2:a7:b5:fe:8b:9a:d9:81:a6:97:1f:
         3b:52:13:7a:e5:85:46:a4:e5:fd:26:58:78:9c:26:9c:9d:f4:
         27:cc:76:84:09:a6:ac:d8:a2:9c:f7:d7:f4:f5:9a:c8:fb:a1:
         c8:e9:78:95:97:e6:fe:4b:19:3b:4e:d6:6a:f4:da:8b:3c:d7:
         01:f2:73:98:d6:09:d6:c8:9f:f4:15:d0:17:52:3b:18:aa:a8:
         05:15:b6:cf:0f:36:e1:ba:a2:39:c0:d6:e9:e5:97:5e:0e:38:
         8c:42:54:97:f6:69:01:5c:fc:34:70:5b:34:e4:74:24:14:de:
         f8:f6:6b:18:f5:66:aa:4f:59:4f:98:c3:f7:f3:73:de:53:de:
         d1:db:b1:9b:88:a2:28:db:5c:c7:6d:af:79:d3:13:c2:5d:6b:
         0f:f9:b3:fe:d4:fd:35:be:88:a9:15:88:d3:c2:c3:97:d7:80:
         34:12:21:9d:a8:55:32:6a:89:0f:db:5c:45:26:7e:60:10:23:
         e9:6f:51:46:d8:4e:9f:81:1b:13:84:23:9f:12:aa:91:5f:e9:
         78:7d:28:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----