Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a613030303a3a2f34302d3438203d3e203437343439.roa
File:                     323630313a316430383a613030303a3a2f34302d3438203d3e203437343439.roa (raw, json)
Hash identifier:          yt1+omTn8FnZPsFED/gDbx8YgvA4hDHD2Y3dpoMfcQI=
Subject key identifier:   4B:E9:FA:24:5F:1D:DD:11:FD:BB:6C:87:65:50:D2:07:55:9F:CD:AC
Certificate issuer:       /CN=cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf
Certificate serial:       448068F57D80C329BAD5FEDF89C2EB02F84A2ACC
Authority key identifier: 9A:51:D6:D7:D4:84:FA:0F:C8:55:68:FB:6B:86:E9:1D:8D:F6:F4:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a613030303a3a2f34302d3438203d3e203437343439.roa
Signing time:             Thu 20 Jun 2024 05:23:41 +0000
ROA not before:           Thu 20 Jun 2024 05:18:41 +0000
ROA not after:            Thu 19 Jun 2025 05:23:41 +0000
asID:                     47449
IP address blocks:        2601:1d08:a000::/40 maxlen: 48

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 19:42:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:80:68:f5:7d:80:c3:29:ba:d5:fe:df:89:c2:eb:02:f8:4a:2a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf
        Validity
            Not Before: Jun 20 05:18:41 2024 GMT
            Not After : Jun 19 05:23:41 2025 GMT
        Subject: CN=4BE9FA245F1DDD11FDBB6C876550D207559FCDAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:65:7d:5a:c9:95:21:ac:f4:4e:bb:33:76:f3:
                    54:12:34:de:98:a1:1c:f8:b8:50:1a:2a:e8:4a:22:
                    64:b5:72:32:b8:ee:11:b3:12:56:5f:ba:bd:97:e5:
                    78:1f:23:7b:a4:1a:3d:1e:4f:8c:53:3d:cb:96:cd:
                    b1:81:12:44:57:5f:20:82:ea:e1:e7:03:47:c4:51:
                    41:56:ec:13:72:6e:bd:d4:ef:8b:c3:02:71:e8:01:
                    04:3d:a0:ad:16:6e:f2:cf:fb:30:c9:94:a3:c4:24:
                    fe:24:03:5f:bb:62:6f:12:8f:5d:3d:31:6b:d8:ba:
                    52:73:aa:fa:63:54:4a:53:90:86:84:c6:5f:58:f0:
                    04:9f:bb:60:46:81:1a:64:65:b8:78:3a:3e:fb:0d:
                    26:74:2f:9b:59:df:68:5c:8b:e7:bc:b5:f6:36:6c:
                    e9:0a:1a:fe:c7:0a:4b:f4:a5:82:e8:14:b7:6f:4a:
                    6f:08:da:28:41:85:1d:86:5a:7e:44:14:fc:c3:d5:
                    cd:a9:6a:a1:04:fe:93:ed:e4:e0:8a:20:b3:9b:3c:
                    5a:54:44:2f:ea:46:9d:e5:f4:9b:c4:23:b2:51:8f:
                    6a:e9:d7:e4:26:b7:ac:b7:5b:13:04:4f:ab:6b:c6:
                    32:42:84:f9:3c:0f:37:28:fe:81:21:d8:72:85:81:
                    03:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E9:FA:24:5F:1D:DD:11:FD:BB:6C:87:65:50:D2:07:55:9F:CD:AC
            X509v3 Authority Key Identifier:
                keyid:9A:51:D6:D7:D4:84:FA:0F:C8:55:68:FB:6B:86:E9:1D:8D:F6:F4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/9A51D6D7D484FA0FC85568FB6B86E91D8DF6F4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a613030303a3a2f34302d3438203d3e203437343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d08:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b3:e1:30:37:88:19:e4:c3:0c:ff:24:82:e1:f9:99:90:43:c5:
         a9:34:b6:21:94:2a:cf:d5:18:ee:57:cf:62:ba:fb:85:bc:a7:
         32:3c:d1:e8:b7:ae:65:ff:cc:b8:de:fb:17:0a:ec:93:23:55:
         64:74:4e:c4:cb:f0:f9:78:d8:7c:2b:18:d2:d1:fa:3f:a9:a1:
         6b:19:be:70:33:bb:52:e7:75:06:0b:e3:33:77:a2:ba:79:a4:
         3b:4b:de:00:3a:df:7c:81:7c:e0:c7:65:4f:cc:8a:d3:dd:c6:
         44:7b:96:b3:2b:13:0f:3a:e7:65:de:ac:40:fc:7f:80:89:88:
         71:e7:ce:f3:bb:59:83:47:b8:f8:f6:7e:f7:e0:47:65:3d:61:
         9f:4b:5b:a5:36:ab:83:15:8d:fe:df:bb:9a:cd:12:6b:6b:51:
         98:a6:c1:4f:55:7e:98:30:25:db:f5:05:30:da:b3:13:b5:07:
         38:d3:5d:5b:90:b6:46:74:1f:2e:8e:eb:5e:64:5b:9c:2b:05:
         f3:cc:04:2d:1d:62:0a:a9:32:de:a4:2a:0a:3a:ca:b6:12:37:
         84:dd:13:1d:35:75:6a:3a:d4:87:51:be:c4:7a:9e:cd:2a:98:
         27:1a:fa:41:24:8f:45:f4:7c:2c:c9:10:aa:b1:53:db:16:c0:
         aa:2c:27:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----