Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a61313a3a2f34382d3438203d3e20313938303537.roa
File:                     323630323a663962613a61313a3a2f34382d3438203d3e20313938303537.roa (raw, json)
Hash identifier:          Wy4PjIW/7qWc7B3jstLrpywPhqzbd6eL76NwpJvnZbg=
Subject key identifier:   B4:23:01:23:AF:24:E2:AE:B4:51:09:56:CF:38:E0:43:E9:F4:D7:18
Certificate issuer:       /CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
Certificate serial:       096707208974004A6E6CCFE72C4D84E2ACD22B48
Authority key identifier: C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a61313a3a2f34382d3438203d3e20313938303537.roa
Signing time:             Mon 26 Aug 2024 19:24:16 +0000
ROA not before:           Mon 26 Aug 2024 19:19:16 +0000
ROA not after:            Mon 25 Aug 2025 19:24:16 +0000
asID:                     198057
IP address blocks:        2602:f9ba:a1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 26 Aug 2024 23:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:67:07:20:89:74:00:4a:6e:6c:cf:e7:2c:4d:84:e2:ac:d2:2b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
        Validity
            Not Before: Aug 26 19:19:16 2024 GMT
            Not After : Aug 25 19:24:16 2025 GMT
        Subject: CN=B4230123AF24E2AEB4510956CF38E043E9F4D718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bd:4d:d8:8f:5b:fc:78:a5:45:92:0d:54:8d:
                    c4:ed:71:b6:4a:a7:dd:ea:90:5b:b0:f0:70:bd:04:
                    6d:9b:ca:6e:1b:03:bc:66:4b:c9:fa:6e:2a:76:d8:
                    19:1e:21:4f:b2:15:e3:59:5c:78:88:c2:ca:21:c5:
                    54:91:d2:53:21:4d:ed:04:25:00:92:ba:62:e2:44:
                    13:4b:55:e5:24:42:2e:79:69:f9:d9:fe:28:01:9b:
                    a6:a4:3e:b5:98:8d:1d:60:53:e9:40:ca:1e:10:6f:
                    08:2c:d5:79:5d:20:1d:d8:df:43:60:ad:d0:2f:1c:
                    ff:8b:93:3b:12:91:b6:e5:dd:43:c7:6e:ef:48:ed:
                    04:70:74:a6:11:c8:d2:ab:9f:cf:24:62:12:47:f6:
                    43:a8:82:03:50:50:de:f1:30:55:39:23:e8:2b:f0:
                    6e:73:11:a0:b7:20:1d:0f:e1:07:7d:47:d6:b9:05:
                    6d:09:18:00:38:62:8a:06:a2:28:66:e0:c2:ce:7d:
                    c8:12:7c:e9:16:46:ec:49:3c:5a:b2:a5:cd:79:cf:
                    8e:d3:49:91:21:ac:e7:21:31:b5:4b:e7:f0:70:f8:
                    4b:67:79:df:56:6a:88:46:cb:77:96:bb:a4:81:20:
                    fe:f0:dc:b1:18:5a:07:86:cb:e5:8c:e1:ca:39:97:
                    e9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:23:01:23:AF:24:E2:AE:B4:51:09:56:CF:38:E0:43:E9:F4:D7:18
            X509v3 Authority Key Identifier:
                keyid:C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a61313a3a2f34382d3438203d3e20313938303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:a1::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:e5:b0:b0:a7:ef:4f:cc:a6:d7:c2:aa:24:88:22:f7:ba:0e:
         13:25:3c:29:90:4b:30:73:2d:d3:0b:f1:33:c4:97:84:3c:b6:
         93:b9:c4:09:5f:76:1d:80:63:4b:dc:79:ec:f2:c5:a2:c6:f4:
         76:57:16:4f:34:10:09:ea:42:d9:a4:fe:8a:61:68:47:9c:4b:
         67:5b:cb:01:70:4b:e0:e2:3c:04:7f:f5:8a:2e:fb:6a:e7:a0:
         71:87:56:a4:67:21:01:ef:25:cf:96:b5:5c:11:be:b3:c4:27:
         57:77:8c:98:ac:b7:50:76:74:02:f8:9e:9a:d4:ad:63:f1:f8:
         4c:3f:c4:c7:11:b0:40:17:5a:a3:10:a8:db:5e:a6:87:1c:20:
         7b:e2:89:f8:72:14:58:6f:c3:12:cd:2f:67:a4:cb:b7:fb:22:
         bc:76:14:8a:a6:d4:f9:12:e5:e8:d8:a4:58:47:61:24:19:f0:
         f6:2e:79:a7:92:5d:50:34:b3:7c:9d:09:25:4e:d2:f0:0f:13:
         b6:86:84:ff:40:cb:81:40:dd:a9:12:bb:fc:9d:42:49:fc:cb:
         7d:2d:37:11:a5:6a:70:00:4d:58:b4:fe:4b:5a:96:d8:3a:85:
         fc:ca:ce:f2:89:c2:fd:1e:17:26:eb:9c:98:51:cc:f0:ff:0a:
         d2:3c:16:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----