Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a383030303a3a2f34302d3438203d3e203530303538.roa
File:                     323630313a316430383a383030303a3a2f34302d3438203d3e203530303538.roa (raw, json)
Hash identifier:          1qpsRIf7luCnik7U1Qu2e5ucbx/4Ce18D9dYnrSzQrE=
Subject key identifier:   36:5D:70:35:87:46:20:C1:94:85:04:05:E4:26:49:06:55:74:C3:EC
Certificate issuer:       /CN=cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf
Certificate serial:       7F72A03BE6091254C9F8D9DB410EFC417A896D57
Authority key identifier: 9A:51:D6:D7:D4:84:FA:0F:C8:55:68:FB:6B:86:E9:1D:8D:F6:F4:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a383030303a3a2f34302d3438203d3e203530303538.roa
Signing time:             Thu 20 Jun 2024 05:23:42 +0000
ROA not before:           Thu 20 Jun 2024 05:18:42 +0000
ROA not after:            Thu 19 Jun 2025 05:23:42 +0000
asID:                     50058
IP address blocks:        2601:1d08:8000::/40 maxlen: 48

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 19:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:72:a0:3b:e6:09:12:54:c9:f8:d9:db:41:0e:fc:41:7a:89:6d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf
        Validity
            Not Before: Jun 20 05:18:42 2024 GMT
            Not After : Jun 19 05:23:42 2025 GMT
        Subject: CN=365D7035874620C194850405E42649065574C3EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d7:56:27:1d:ed:3d:11:a8:8b:22:82:8e:77:
                    97:e7:13:d1:94:f2:84:59:ef:22:0e:df:db:38:77:
                    99:50:80:c1:f5:31:f2:e1:4f:bb:77:0d:03:64:cf:
                    c6:19:18:ba:4e:cd:3b:bc:51:24:4a:f4:26:51:12:
                    ed:f2:27:bb:6d:66:29:83:61:65:33:b0:08:33:95:
                    9f:d6:1f:dd:51:93:38:35:15:3e:8d:60:38:46:e2:
                    47:cf:40:f1:49:6a:56:bf:f0:a6:95:a7:81:6b:36:
                    b0:14:cd:6f:5d:5e:38:9e:60:17:ed:64:d5:3e:69:
                    fb:92:8b:27:a1:38:ac:7c:02:00:80:08:e7:9b:df:
                    c8:bc:06:e5:66:ef:6c:ea:19:69:6d:ca:52:94:8b:
                    47:49:bf:2e:86:81:26:a4:fc:a3:e2:fc:4f:06:98:
                    43:8c:29:8a:ca:91:ae:b0:3b:f2:e1:c1:63:11:f4:
                    73:2d:88:6e:87:db:df:cd:b2:ca:86:53:51:99:06:
                    76:52:d4:d1:1a:3d:11:ce:b7:c0:1b:ef:77:6f:cf:
                    fb:f6:f8:31:47:cb:30:eb:1b:c7:b6:3e:42:1e:24:
                    b3:83:c4:42:19:04:8c:cd:0c:2a:fe:0b:45:b4:c8:
                    f6:7b:d9:f4:57:d1:ab:57:c8:26:80:e2:e7:2c:2c:
                    2c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5D:70:35:87:46:20:C1:94:85:04:05:E4:26:49:06:55:74:C3:EC
            X509v3 Authority Key Identifier:
                keyid:9A:51:D6:D7:D4:84:FA:0F:C8:55:68:FB:6B:86:E9:1D:8D:F6:F4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/9A51D6D7D484FA0FC85568FB6B86E91D8DF6F4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a383030303a3a2f34302d3438203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d08:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b2:ab:31:8d:5f:b7:30:d1:e2:00:bf:3d:4c:f8:2b:61:f2:ff:
         96:d4:c2:6d:49:bc:08:00:41:d6:f3:89:35:e3:42:62:a8:ca:
         a1:2c:45:d7:3c:be:90:c3:30:6b:20:92:fc:a6:8d:79:2c:04:
         d0:fe:c8:fe:3a:31:d7:83:08:c2:6c:ea:95:3d:69:c6:ae:de:
         f3:84:f3:5a:81:1f:36:1c:9b:83:80:ef:96:9a:70:b3:00:12:
         46:6c:e7:1f:d7:50:7f:fa:6d:71:17:da:9e:5c:e2:96:b1:de:
         7e:de:0a:6f:d4:75:b8:f4:60:48:f4:61:6b:88:ca:ed:c6:35:
         ac:d5:05:6e:cd:2c:cc:05:f6:4e:6c:49:59:60:38:03:e0:49:
         0a:78:ed:b6:63:69:95:b1:e6:05:f0:45:bc:55:bb:e7:4a:25:
         2f:27:ea:aa:cd:c3:fd:0c:c1:6e:93:83:0a:50:a6:c8:7c:90:
         55:b5:84:9a:33:50:1b:9e:43:88:9c:ad:4d:d7:02:f4:8a:a3:
         f0:12:8e:86:a3:9d:bb:4b:65:a3:cc:ba:24:d9:95:14:e6:98:
         71:4f:03:41:42:33:93:5b:96:5d:09:e3:3f:b3:3f:c1:f6:78:
         34:6d:f7:97:c9:e0:0b:6a:71:04:95:80:fc:ed:61:18:6e:28:
         9d:d1:ad:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----