Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/323630323a3239313a62623a3a2f34382d3438203d3e20323131333830.roa
File:                     323630323a3239313a62623a3a2f34382d3438203d3e20323131333830.roa (raw, json)
Hash identifier:          RJIFbJKhk1dZtIpJf+nxkZrWV998UCujN7nDbJi7hUI=
Subject key identifier:   BE:30:31:CC:A2:E5:88:EE:69:74:ED:1A:DF:E8:59:EE:7C:5A:81:20
Certificate issuer:       /CN=0735111c25f6578195eb9729a303b6d74402d1d835d4389ed1
Certificate serial:       12AFA3A68D476C690B3BCD622E698BC7944BFEDC
Authority key identifier: E1:C2:F9:B8:BC:DE:6D:9C:27:61:54:58:33:55:B2:45:89:F4:9B:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f6578195eb9729a303b6d74402d1d835d4389ed1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/323630323a3239313a62623a3a2f34382d3438203d3e20323131333830.roa
Signing time:             Mon 26 Aug 2024 22:28:25 +0000
ROA not before:           Mon 26 Aug 2024 22:23:25 +0000
ROA not after:            Mon 25 Aug 2025 22:28:25 +0000
asID:                     211380
IP address blocks:        2602:291:bb::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 30 Oct 2024 13:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:af:a3:a6:8d:47:6c:69:0b:3b:cd:62:2e:69:8b:c7:94:4b:fe:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735111c25f6578195eb9729a303b6d74402d1d835d4389ed1
        Validity
            Not Before: Aug 26 22:23:25 2024 GMT
            Not After : Aug 25 22:28:25 2025 GMT
        Subject: CN=BE3031CCA2E588EE6974ED1ADFE859EE7C5A8120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d5:b4:b1:af:c0:fd:24:d7:07:be:2b:96:2b:
                    ac:8d:68:69:df:f0:37:5a:1b:f4:86:a4:2f:6b:de:
                    33:47:48:54:22:9d:10:ca:99:c5:37:d1:52:09:ea:
                    ad:be:51:96:6a:21:7c:ad:90:40:34:8f:2b:3d:41:
                    e5:2b:a5:b6:99:e1:49:8a:2b:b7:62:26:ff:da:91:
                    da:b5:d2:98:33:0f:01:05:1b:e7:3d:f0:4f:86:24:
                    5b:d1:d0:11:74:54:e2:4b:1e:de:91:46:20:8e:0f:
                    4f:b5:8d:53:24:ce:0e:71:ff:2c:47:f1:72:7e:75:
                    e9:81:6d:e1:8f:1d:33:da:91:12:ae:05:4c:7c:85:
                    10:95:53:75:30:f8:68:68:d2:76:cf:80:5c:b9:d2:
                    db:43:b3:0a:5d:e5:b5:e9:54:95:d1:94:7c:54:7a:
                    ed:fc:43:62:b3:84:66:81:e9:ac:dd:0f:f8:6d:db:
                    51:57:14:c3:24:5b:1c:cd:ef:6a:c0:80:81:3b:43:
                    31:f4:1a:25:10:d2:70:a7:1c:10:35:29:b5:89:6f:
                    41:2e:1e:e0:cb:2b:37:c8:58:45:41:d5:c2:68:44:
                    02:21:67:c6:ce:41:e8:0e:a2:bb:5b:c3:9b:1e:f9:
                    06:ed:e2:69:b6:c1:b4:a5:ad:54:f7:cb:bf:8d:0e:
                    2f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:30:31:CC:A2:E5:88:EE:69:74:ED:1A:DF:E8:59:EE:7C:5A:81:20
            X509v3 Authority Key Identifier:
                keyid:E1:C2:F9:B8:BC:DE:6D:9C:27:61:54:58:33:55:B2:45:89:F4:9B:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/E1C2F9B8BCDE6D9C276154583355B24589F49BC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f6578195eb9729a303b6d74402d1d835d4389ed1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/323630323a3239313a62623a3a2f34382d3438203d3e20323131333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:291:bb::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:50:95:db:38:5a:ce:b9:d5:99:36:61:1c:0a:88:5c:94:82:
         c1:50:f7:21:e7:c9:1a:78:f4:47:48:b5:d9:54:63:a4:47:43:
         e3:a0:3b:69:14:34:2f:04:fc:d9:61:be:0e:cb:f6:f3:d1:9d:
         3d:68:fc:fb:12:e8:22:22:49:0d:b1:87:cf:5a:fb:b2:9d:6e:
         4c:16:82:31:7e:32:46:e9:e2:6b:ef:db:d1:07:a7:d3:50:23:
         27:1c:3d:59:d1:a4:7d:5d:a7:3b:60:f2:76:24:7e:96:4b:30:
         a8:21:b4:d0:8a:41:33:3d:c3:4c:2e:39:1c:ea:de:47:c4:4c:
         da:c7:ce:53:bb:64:ba:f5:fb:38:bb:2f:b3:4e:7d:1c:7e:87:
         12:46:96:cf:22:5a:39:a5:23:33:9f:73:c5:76:5d:33:00:ae:
         c7:99:75:00:35:f5:d7:81:4a:2c:8c:73:04:46:7a:5c:b2:57:
         92:06:b2:fb:84:dd:06:67:c2:f7:0f:ad:c0:43:38:d6:f1:15:
         db:32:c0:98:e3:b2:4a:22:0a:7c:d8:76:15:d9:45:db:2d:dc:
         e7:69:f5:39:e6:50:f0:f4:0f:50:f5:fa:53:30:ea:15:45:ef:
         7d:de:dc:ad:22:b6:e5:38:30:03:3e:14:0b:b2:62:f6:8d:58:
         d9:8d:b4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----