Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a3a2f34382d3438203d3e20343031313131.roa
File:                     323630313a316430383a3a2f34382d3438203d3e20343031313131.roa (raw, json)
Hash identifier:          wbu5sXHLcd2ce917sF/aHAT58FuvmXWXMV1B5OLHLjc=
Subject key identifier:   F0:55:B1:F1:41:43:7B:D6:FD:6F:6A:D9:06:BB:10:F5:B3:20:53:DC
Certificate issuer:       /CN=cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf
Certificate serial:       38061716ED174A67E4F174ADFE15D1ECF8BBE7B4
Authority key identifier: 9A:51:D6:D7:D4:84:FA:0F:C8:55:68:FB:6B:86:E9:1D:8D:F6:F4:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a3a2f34382d3438203d3e20343031313131.roa
Signing time:             Sat 03 Aug 2024 10:35:24 +0000
ROA not before:           Sat 03 Aug 2024 10:30:24 +0000
ROA not after:            Sat 02 Aug 2025 10:35:24 +0000
asID:                     401111
IP address blocks:        2601:1d08::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 19:15:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:06:17:16:ed:17:4a:67:e4:f1:74:ad:fe:15:d1:ec:f8:bb:e7:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf
        Validity
            Not Before: Aug  3 10:30:24 2024 GMT
            Not After : Aug  2 10:35:24 2025 GMT
        Subject: CN=F055B1F141437BD6FD6F6AD906BB10F5B32053DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9f:5a:0b:32:2c:34:e0:49:2f:cf:d6:4b:59:
                    f6:61:7d:16:56:f4:2d:f6:9d:06:bc:e3:ba:49:c0:
                    84:89:49:98:97:25:e6:5c:2b:a7:92:24:51:4c:50:
                    a4:91:33:eb:9f:89:d3:15:72:9d:99:b2:c5:bd:24:
                    33:95:9b:07:9a:61:ce:3c:44:83:d2:d2:28:1b:7a:
                    82:d5:16:60:64:fb:5b:a7:c9:a1:24:3d:74:29:26:
                    b0:d9:45:5f:22:f8:c8:e2:03:c4:cd:24:f0:36:f3:
                    e7:a0:1a:83:ee:8c:4a:0c:b9:6e:0b:92:98:60:19:
                    e6:ae:14:7d:7c:e2:bc:22:8f:b4:a6:fa:74:95:91:
                    97:dc:96:f7:97:ee:13:82:82:3c:4b:82:57:e3:45:
                    5a:f2:5c:ee:ea:a4:c1:b4:7e:22:e4:e4:72:a8:f7:
                    f4:56:0a:9d:e0:34:1f:2c:31:7f:1a:ad:6b:7d:4b:
                    18:5a:2b:ec:1f:4c:8b:6f:85:30:f8:11:71:0e:3b:
                    b9:25:4d:0c:2f:62:31:4a:f4:09:8c:38:6e:db:3f:
                    97:8a:62:57:64:8b:50:c2:14:dd:19:db:86:40:19:
                    72:f8:4a:61:46:52:66:ab:a9:c6:73:2e:99:2a:18:
                    bc:9f:18:cb:3b:f3:85:77:f5:93:fc:5a:10:bc:03:
                    9d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:55:B1:F1:41:43:7B:D6:FD:6F:6A:D9:06:BB:10:F5:B3:20:53:DC
            X509v3 Authority Key Identifier:
                keyid:9A:51:D6:D7:D4:84:FA:0F:C8:55:68:FB:6B:86:E9:1D:8D:F6:F4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/9A51D6D7D484FA0FC85568FB6B86E91D8DF6F4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a3a2f34382d3438203d3e20343031313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d08::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:78:c1:92:76:91:a7:a5:89:5c:19:b4:9b:17:13:18:42:0c:
         4c:37:49:b4:8d:6f:36:47:52:9d:9a:e0:e7:0c:2e:2f:a9:1a:
         6b:a3:8e:f5:54:10:50:55:8d:d8:f8:52:fc:5e:09:26:02:c7:
         53:93:77:c2:ae:98:3f:a3:24:32:dd:c2:b8:e7:fc:a7:ab:4c:
         27:de:fb:60:45:a4:f2:11:62:9c:00:e0:08:20:d5:84:be:12:
         e5:bf:5c:c5:92:ad:d4:ce:b0:96:8a:1d:cc:06:16:0f:f4:e3:
         f7:82:83:f0:c5:6f:65:a9:bb:8e:50:4f:3c:b1:39:1a:8c:86:
         44:84:bd:fa:d5:76:12:48:ca:75:a3:69:f8:52:0c:04:7a:a5:
         5b:b0:02:3c:62:f1:2a:21:5f:c4:50:9e:92:0f:33:4a:91:36:
         a8:d1:2d:ab:ae:a0:b8:54:63:af:7b:bd:c8:bc:2b:26:52:d6:
         06:be:84:e1:7f:e6:b5:60:9a:f8:40:7a:d5:d5:b2:4c:ba:93:
         ed:8b:57:a5:cc:9c:22:14:7a:22:bf:df:54:5b:bc:a6:da:92:
         1f:84:2a:89:48:ef:e4:27:14:77:86:f1:69:8a:4d:d3:f8:90:
         c2:d9:c4:e5:39:63:3e:f7:33:77:b7:f7:ea:dc:86:73:cc:0a:
         89:84:4b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----