Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a63343a3a2f34382d3438203d3e20323135353336.roa
File:                     323630323a663962613a63343a3a2f34382d3438203d3e20323135353336.roa (raw, json)
Hash identifier:          DDpI8pi4gApB7MXh0JX4gjJhcZ4jxpSup7D3USbqx1M=
Subject key identifier:   A8:03:F5:27:60:C0:A8:AA:AD:3F:3B:59:D6:BA:FB:AD:2D:8B:21:63
Certificate issuer:       /CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
Certificate serial:       54F1ABE9D8FFE2855F7CB4CB7F9D9D365B1FACA1
Authority key identifier: C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a63343a3a2f34382d3438203d3e20323135353336.roa
Signing time:             Mon 26 Aug 2024 19:22:30 +0000
ROA not before:           Mon 26 Aug 2024 19:17:30 +0000
ROA not after:            Mon 25 Aug 2025 19:22:30 +0000
asID:                     215536
IP address blocks:        2602:f9ba:c4::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 30 Oct 2024 12:58:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f1:ab:e9:d8:ff:e2:85:5f:7c:b4:cb:7f:9d:9d:36:5b:1f:ac:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
        Validity
            Not Before: Aug 26 19:17:30 2024 GMT
            Not After : Aug 25 19:22:30 2025 GMT
        Subject: CN=A803F52760C0A8AAAD3F3B59D6BAFBAD2D8B2163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:80:0a:2d:f9:de:aa:be:9b:a8:19:ad:e4:a5:
                    8b:ca:ff:af:b2:eb:8d:a2:bf:6d:9c:78:15:c8:f4:
                    a5:0d:bc:23:66:71:e0:66:3a:07:d1:08:e6:82:44:
                    58:f5:d3:97:6b:f0:9c:85:dd:88:b0:de:69:50:63:
                    11:99:cd:97:15:af:06:52:7d:40:d0:06:50:ee:92:
                    82:c7:34:db:6a:d3:73:b6:d1:7c:2c:b7:f4:f3:64:
                    9c:a4:44:ad:fa:90:36:4d:6c:51:00:ae:dc:b7:0f:
                    6f:70:59:ed:1d:2c:e3:77:9b:ad:9f:13:1d:15:a2:
                    dd:0e:50:1d:b0:35:b3:b7:13:bd:69:15:38:cc:c5:
                    84:25:15:b2:b9:4d:1c:f3:3e:a6:cf:cc:0f:8d:a4:
                    4f:bd:79:c8:1b:5e:45:16:27:2e:9a:83:f4:52:28:
                    cd:a1:84:64:7d:d1:ac:ad:90:d7:45:1c:8b:c8:3d:
                    43:5b:2a:ea:7a:7b:9f:ae:a0:1c:c4:74:9e:b7:d2:
                    bb:9a:da:a5:d6:73:b0:8c:2a:02:2d:3b:7d:bd:e0:
                    b8:27:ca:8a:28:9b:c9:d5:b9:ab:82:16:97:5a:6b:
                    d2:87:2f:88:b1:ef:c0:63:64:1b:69:14:60:41:b5:
                    ea:33:6d:e7:48:41:5c:45:84:fe:23:fd:31:cb:b9:
                    5c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:03:F5:27:60:C0:A8:AA:AD:3F:3B:59:D6:BA:FB:AD:2D:8B:21:63
            X509v3 Authority Key Identifier:
                keyid:C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a63343a3a2f34382d3438203d3e20323135353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:c4::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:cb:f7:19:a8:0a:27:95:9c:27:ed:d3:05:3d:af:b9:cb:a0:
         31:41:01:08:71:68:5d:22:97:49:47:d4:28:f4:72:f0:0a:ea:
         ea:a5:f9:dc:2f:0d:8e:81:7e:b2:3d:cf:42:8e:3a:b2:cb:6e:
         32:a5:31:d1:10:dc:49:83:91:5f:b1:30:89:ee:22:50:be:3f:
         06:08:58:2f:41:b1:cb:16:da:a3:54:2b:e9:cc:e6:91:dd:f0:
         e6:21:c2:22:e7:1b:da:e5:b8:8e:1c:45:18:ec:4b:ca:67:ef:
         0b:32:90:18:5b:85:f5:01:f3:d4:05:84:80:5b:d6:bd:42:ca:
         95:0b:5d:b5:ef:25:89:e8:31:03:5a:e7:31:4e:e9:3c:d5:e1:
         86:66:46:a5:79:2c:8e:a5:7e:3f:c9:d7:aa:25:4d:a9:34:01:
         0f:03:6d:d3:f1:0a:6c:bf:c8:3a:cb:fb:9a:96:fc:98:92:c0:
         63:72:29:6f:41:a8:55:5b:a3:d9:c9:45:c4:cc:cc:64:16:96:
         39:70:1e:d5:50:e4:81:91:f8:89:56:75:7d:69:a8:f3:a8:a0:
         be:50:db:04:62:4e:bf:4d:8b:ad:fe:fd:8a:60:36:1f:01:74:
         c2:80:af:b4:06:3b:e7:39:a0:11:e7:fa:3b:01:59:9d:3e:3a:
         66:d5:ca:ff
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUVPGr6dj/4oVffLTLf52dNlsfrKEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOGQ4YTY3MmRkNzlhNzQxYjI5ZTVmZjZmYTUyMzFmNzc5
NDg4ZTcwN2IyOTBmMmYyNDcwHhcNMjQwODI2MTkxNzMwWhcNMjUwODI1MTkyMjMw
WjAzMTEwLwYDVQQDEyhBODAzRjUyNzYwQzBBOEFBQUQzRjNCNTlENkJBRkJBRDJE
OEIyMTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoAKLfneqr6b
qBmt5KWLyv+vsuuNor9tnHgVyPSlDbwjZnHgZjoH0QjmgkRY9dOXa/Cchd2IsN5p
UGMRmc2XFa8GUn1A0AZQ7pKCxzTbatNzttF8LLf082ScpESt+pA2TWxRAK7ctw9v
cFntHSzjd5utnxMdFaLdDlAdsDWztxO9aRU4zMWEJRWyuU0c8z6mz8wPjaRPvXnI
G15FFicumoP0UijNoYRkfdGsrZDXRRyLyD1DWyrqenufrqAcxHSet9K7mtql1nOw
jCoCLTt9veC4J8qKKJvJ1bmrghaXWmvShy+Ise/AY2QbaRRgQbXqM23nSEFcRYT+
I/0xy7lc3wIDAQABo4ICuzCCArcwHQYDVR0OBBYEFKgD9SdgwKiqrT87Wda6+60t
iyFjMB8GA1UdIwQYMBaAFMGadEeFX3rFJw2VwW4TRVoqXbMqMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTE1Y2IwYTQwMTkxOTAyMmVmMDcxZWZlLzAv
QzE5QTc0NDc4NTVGN0FDNTI3MEQ5NUMxNkUxMzQ1NUEyQTVEQjMyQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzhkMzdhMDcyLTE1YWUtNDkwNS04MTBlLTk5MWZjNjIwMWI0NS84ZDhh
NjcyZGQ3OWE3NDFiMjllNWZmNmZhNTIzMWY3Nzk0ODhlNzA3YjI5MGYyZjI0Ny5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkxNWNiMGE0MDE5MTkw
MjJlZjA3MWVmZS8wLzMyMzYzMDMyM2E2NjM5NjI2MTNhNjMzNDNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMyMzEzNTM1MzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC+boAxDANBgkq
hkiG9w0BAQsFAAOCAQEAfMv3GagKJ5WcJ+3TBT2vucugMUEBCHFoXSKXSUfUKPRy
8Arq6qX53C8NjoF+sj3PQo46sstuMqUx0RDcSYORX7Ewie4iUL4/BghYL0Gxyxba
o1Qr6czmkd3w5iHCIucb2uW4jhxFGOxLymfvCzKQGFuF9QHz1AWEgFvWvULKlQtd
te8liegxA1rnMU7pPNXhhmZGpXksjqV+P8nXqiVNqTQBDwNt0/EKbL/IOsv7mpb8
mJLAY3Ipb0GoVVuj2clFxMzMZBaWOXAe1VDkgZH4iVZ1fWmo86igvlDbBGJOv02L
rf79imA2HwF0woCvtAY75zmgEef6OwFZnT46ZtXK/w==
-----END CERTIFICATE-----