Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a3a2f34382d3438203d3e20393435.roa
File:                     323630313a316430383a3a2f34382d3438203d3e20393435.roa (raw, json)
Hash identifier:          bejN04AMB4mrwzUGeoEGEQOL9ZunXA7fbEy1t9keSOA=
Subject key identifier:   8E:C4:D6:F8:C4:9D:2F:D6:7F:E1:3A:FB:37:B2:29:E3:C7:62:E6:7E
Certificate issuer:       /CN=cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf
Certificate serial:       284276EBFC47FC5F33B95F0236FDE778B29B1BF5
Authority key identifier: 9A:51:D6:D7:D4:84:FA:0F:C8:55:68:FB:6B:86:E9:1D:8D:F6:F4:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a3a2f34382d3438203d3e20393435.roa
Signing time:             Sat 03 Aug 2024 09:44:08 +0000
ROA not before:           Sat 03 Aug 2024 09:39:08 +0000
ROA not after:            Sat 02 Aug 2025 09:44:08 +0000
asID:                     945
IP address blocks:        2601:1d08::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 08 Sep 2024 04:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:42:76:eb:fc:47:fc:5f:33:b9:5f:02:36:fd:e7:78:b2:9b:1b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf
        Validity
            Not Before: Aug  3 09:39:08 2024 GMT
            Not After : Aug  2 09:44:08 2025 GMT
        Subject: CN=8EC4D6F8C49D2FD67FE13AFB37B229E3C762E67E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c7:42:07:aa:07:21:ac:c7:05:b7:bc:de:a1:
                    a4:78:e1:40:3e:ab:73:15:6f:46:af:c7:0a:ba:41:
                    92:d1:c6:ee:15:d4:3a:11:e7:98:cb:10:dd:93:58:
                    55:e4:42:ce:77:31:66:aa:f4:c5:46:26:8a:ed:77:
                    5a:e1:82:b7:bc:be:e9:28:b3:1e:63:97:a7:68:18:
                    9c:95:1d:a5:2c:1e:c8:f4:3d:0a:c2:e2:23:f3:1a:
                    0c:e2:7a:3b:e2:e6:5b:6a:5c:76:b2:1d:9f:10:67:
                    69:16:a5:0b:c1:3e:55:e9:11:c2:03:80:08:65:19:
                    e7:bb:46:ed:e8:03:50:54:e3:1e:7a:51:13:29:85:
                    35:8e:b9:a2:66:85:1a:6d:26:dc:64:04:a3:5b:0a:
                    cc:67:22:fe:d9:1f:da:75:9e:3f:5a:1c:66:25:1e:
                    61:47:2e:5d:60:22:93:09:25:70:d1:98:d9:78:8b:
                    99:9e:73:22:d8:3c:76:8d:b0:3d:4a:8b:3a:56:b2:
                    e4:8b:55:b5:a7:54:7b:f9:01:46:97:51:cf:a0:90:
                    55:1c:dd:e2:0c:bb:d8:50:08:d8:2c:f1:49:68:7e:
                    51:f7:ec:12:4e:d7:65:8e:6c:13:3d:4e:f3:d1:95:
                    b4:fd:21:f1:11:3d:11:15:7c:7f:b0:48:05:60:f7:
                    59:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C4:D6:F8:C4:9D:2F:D6:7F:E1:3A:FB:37:B2:29:E3:C7:62:E6:7E
            X509v3 Authority Key Identifier:
                keyid:9A:51:D6:D7:D4:84:FA:0F:C8:55:68:FB:6B:86:E9:1D:8D:F6:F4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/9A51D6D7D484FA0FC85568FB6B86E91D8DF6F4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a3a2f34382d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d08::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:c1:e9:ce:ac:69:bb:fb:e8:e0:9b:d2:61:7e:c3:99:aa:ad:
         14:8d:23:98:2b:85:05:75:81:96:ec:75:31:2e:7e:da:87:b9:
         d7:6e:2e:93:6f:c7:3b:33:ff:c9:ed:e0:cc:dc:d4:70:57:62:
         9d:74:72:53:6b:5e:61:45:31:bb:61:79:e2:ff:02:24:00:d9:
         52:53:66:6a:db:fa:70:62:b4:41:10:9f:a0:c3:ed:c1:64:59:
         b3:e9:47:98:70:84:ab:25:fc:d3:9b:9a:38:1e:75:e9:97:23:
         4d:8f:e7:19:c0:d6:ac:24:de:84:9a:b0:b8:4d:98:05:81:ba:
         83:3e:d1:6a:48:9e:6c:bf:10:b0:d5:25:d8:db:4f:2d:76:94:
         11:ea:78:ca:b2:b8:3b:f9:91:ca:4e:5e:e6:50:03:28:82:e3:
         b0:0c:0c:b1:25:67:5a:4e:3f:52:2a:79:04:f6:87:2a:8a:50:
         05:de:a4:d3:3d:8e:7b:f5:d2:18:46:af:f1:fc:76:92:a2:82:
         20:ea:42:3a:80:31:0c:c2:37:a2:10:73:f4:4f:f4:70:21:3f:
         06:17:27:cf:84:27:36:39:94:a0:4b:ae:b0:b3:fe:f0:6a:38:
         83:d5:c3:a9:a6:14:92:0a:57:0f:f2:f0:8a:9d:57:af:49:fb:
         14:64:ea:ac
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUKEJ26/xH/F8zuV8CNv3neLKbG/UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyY2YyYzQ4MzAwZjg0MWRmMzJiYmU5MjU2MDMzMjE5M2U0
MTNmMDViZjQyODJkYzU4Y2YwHhcNMjQwODAzMDkzOTA4WhcNMjUwODAyMDk0NDA4
WjAzMTEwLwYDVQQDEyg4RUM0RDZGOEM0OUQyRkQ2N0ZFMTNBRkIzN0IyMjlFM0M3
NjJFNjdFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18dCB6oHIazH
Bbe83qGkeOFAPqtzFW9Gr8cKukGS0cbuFdQ6EeeYyxDdk1hV5ELOdzFmqvTFRiaK
7Xda4YK3vL7pKLMeY5enaBiclR2lLB7I9D0KwuIj8xoM4no74uZbalx2sh2fEGdp
FqULwT5V6RHCA4AIZRnnu0bt6ANQVOMeelETKYU1jrmiZoUabSbcZASjWwrMZyL+
2R/adZ4/WhxmJR5hRy5dYCKTCSVw0ZjZeIuZnnMi2Dx2jbA9Sos6VrLki1W1p1R7
+QFGl1HPoJBVHN3iDLvYUAjYLPFJaH5R9+wSTtdljmwTPU7z0ZW0/SHxET0RFXx/
sEgFYPdZOQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFI7E1vjEnS/Wf+E6+zeyKePH
YuZ+MB8GA1UdIwQYMBaAFJpR1tfUhPoPyFVo+2uG6R2N9vSoMA4GA1UdDwEB/wQE
AwIHgDCBhgYDVR0fBH8wfTB7oHmgd4Z1cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMzNkYmRlY2M0ZmE0LzE4
LzlBNTFENkQ3RDQ4NEZBMEZDODU1NjhGQjZCODZFOTFEOERGNkY0QTguY3JsMIHz
BggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJp
bi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNl
LWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJk
MmE4MzM3ZC9jOWFiMjdhNi03NjIyLTQ4ZWMtOWUzMy0xNTJiYWIyYjRhMmIvY2Yy
YzQ4MzAwZjg0MWRmMzJiYmU5MjU2MDMzMjE5M2U0MTNmMDViZjQyODJkYzU4Y2Yu
Y2VyMIGcBggrBgEFBQcBCwSBjzCBjDCBiQYIKwYBBQUHMAuGfXJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMz
ZGJkZWNjNGZhNC8xOC8zMjM2MzAzMTNhMzE2NDMwMzgzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzOTM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAR0IAAAwDQYJKoZIhvcNAQELBQAD
ggEBADbB6c6sabv76OCb0mF+w5mqrRSNI5grhQV1gZbsdTEuftqHudduLpNvxzsz
/8nt4Mzc1HBXYp10clNrXmFFMbtheeL/AiQA2VJTZmrb+nBitEEQn6DD7cFkWbPp
R5hwhKsl/NObmjgedemXI02P5xnA1qwk3oSasLhNmAWBuoM+0WpInmy/ELDVJdjb
Ty12lBHqeMqyuDv5kcpOXuZQAyiC47AMDLElZ1pOP1IqeQT2hyqKUAXepNM9jnv1
0hhGr/H8dpKigiDqQjqAMQzCN6IQc/RP9HAhPwYXJ8+EJzY5lKBLrrCz/vBqOIPV
w6mmFJIKVw/y8IqdV69J+xRk6qw=
-----END CERTIFICATE-----