Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a323a3a2f34382d3438203d3e20343031353037.roa
File:                     323630323a663738613a323a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          V0NMgQJBZY8whjU/q5KW5AZMHmKxt18+3ZjYWoeKusU=
Subject key identifier:   2E:46:01:EE:A1:C2:42:6B:80:1A:92:02:37:32:21:3B:C3:98:BE:68
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       7A403232624E8D7B27C35B571C56855E515A1126
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a323a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Thu 19 Dec 2024 14:16:43 +0000
ROA not before:           Thu 19 Dec 2024 14:11:43 +0000
ROA not after:            Thu 18 Dec 2025 14:16:43 +0000
asID:                     401507
IP address blocks:        2602:f78a:2::/48 maxlen: 48
Validation:               Failed, certificate revoked on Sat 01 Feb 2025 22:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:40:32:32:62:4e:8d:7b:27:c3:5b:57:1c:56:85:5e:51:5a:11:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Dec 19 14:11:43 2024 GMT
            Not After : Dec 18 14:16:43 2025 GMT
        Subject: CN=2E4601EEA1C2426B801A92023732213BC398BE68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:61:48:78:87:67:7b:2b:84:e5:d3:89:4f:fd:
                    a3:75:4a:ca:7b:bc:1e:3e:88:55:7e:29:31:b0:c5:
                    2e:c7:dd:bd:d3:23:a5:6c:5b:6d:35:34:72:79:0b:
                    dc:67:56:75:03:9e:aa:d9:e4:7a:b7:0c:e0:d2:4a:
                    81:55:d3:e6:ae:0d:5d:92:0b:03:79:aa:2d:9d:eb:
                    12:dc:9f:4d:7f:78:31:6f:8e:18:c5:af:28:85:85:
                    9a:12:94:34:d2:fb:9e:1f:2e:7f:3b:69:9b:ab:10:
                    b3:13:1f:bf:4a:a7:72:0b:d8:41:ca:86:e2:b3:50:
                    96:a1:2e:7f:7c:72:f5:d3:49:ec:3b:14:76:b4:e6:
                    f5:3c:81:ff:63:22:9f:e7:4f:ee:59:8a:23:a8:19:
                    82:50:c4:56:9b:f7:fd:27:ac:b0:a2:5a:49:60:43:
                    86:0b:3a:a6:6d:ee:3f:ad:31:44:23:20:b9:25:86:
                    22:f3:0e:d0:d9:37:36:20:2c:a0:cb:67:dd:41:44:
                    1e:d0:d2:53:b0:f0:2d:2c:7b:d7:0c:ca:c9:ea:cc:
                    cb:d8:27:f4:0b:48:af:19:8b:e4:5d:9d:ae:40:a4:
                    e5:9d:82:ce:74:4e:e5:bb:88:a3:27:ea:7f:82:66:
                    5b:b8:ac:5d:cd:c0:f9:08:f4:77:57:56:12:b7:c4:
                    44:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:46:01:EE:A1:C2:42:6B:80:1A:92:02:37:32:21:3B:C3:98:BE:68
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a323a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:09:f1:fe:0a:e0:4f:04:48:61:9c:e2:99:a9:cd:4f:13:55:
         9c:5a:bf:56:a2:31:6b:9d:40:c1:80:f6:91:3d:f0:4c:e2:0b:
         ff:5f:c9:9f:a6:e6:15:1f:ba:ca:b4:de:56:a8:24:5c:c4:f6:
         90:da:b7:bf:dd:01:5c:44:81:36:c8:a3:8c:a1:e0:f0:87:e0:
         df:56:18:7c:eb:3f:52:63:06:30:2b:52:07:88:47:e7:48:54:
         12:06:c8:1c:73:e4:54:15:d3:b4:54:60:54:c3:5b:a4:6c:83:
         f2:de:9b:97:45:26:11:70:56:52:17:f8:be:36:6b:d3:2c:1e:
         0e:3b:36:61:e8:f8:44:f6:88:89:de:9b:01:2a:9e:4d:8a:b2:
         5f:b1:60:96:e2:f7:b7:b3:3f:17:82:fe:c3:98:d4:fb:02:e7:
         6d:b2:3c:5d:d6:4f:4d:d1:47:3a:69:ce:87:db:3f:67:45:ee:
         4b:a0:3d:02:48:97:e6:00:42:b8:ec:0b:33:32:94:69:80:a8:
         ef:07:92:3d:f6:13:44:63:6e:72:52:f2:54:d6:f7:7f:9f:27:
         f5:70:ed:72:11:84:56:e5:ff:73:44:62:00:60:d9:d8:b7:4c:
         df:6c:ea:41:27:bd:a4:be:b3:af:8a:25:20:e2:f7:0c:8a:eb:
         08:5d:bb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:50:58 2025 by rpki-client