Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a33303a3a2f34382d3438203d3e20343031353037.roa
File:                     323630323a663738613a33303a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          iKhVhtom+FZdJ0+A9H8EaTfew9b8pGF4RJHzoIu/Ym8=
Subject key identifier:   45:B0:59:0B:40:9F:47:C7:0C:E6:FB:DA:A5:C9:FB:D4:0C:3A:14:17
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       3097A206243AEC3A4AF9B3FCEAA643B1ED401EE4
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a33303a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Thu 19 Dec 2024 14:16:49 +0000
ROA not before:           Thu 19 Dec 2024 14:11:49 +0000
ROA not after:            Thu 18 Dec 2025 14:16:49 +0000
asID:                     401507
IP address blocks:        2602:f78a:30::/48 maxlen: 48
Validation:               Failed, certificate revoked on Sat 01 Feb 2025 22:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:97:a2:06:24:3a:ec:3a:4a:f9:b3:fc:ea:a6:43:b1:ed:40:1e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Dec 19 14:11:49 2024 GMT
            Not After : Dec 18 14:16:49 2025 GMT
        Subject: CN=45B0590B409F47C70CE6FBDAA5C9FBD40C3A1417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8a:c0:73:72:b3:64:80:bf:1b:26:30:d6:3b:
                    27:cd:ab:8c:7e:84:4a:90:0a:3d:9b:c0:3f:e5:a9:
                    ec:f6:60:4f:c6:79:1a:ad:d9:20:34:e8:9f:d9:60:
                    a4:c6:96:8d:ae:52:c2:d5:3a:3b:7e:e2:0a:8e:7c:
                    af:26:64:f3:bd:99:9d:0c:54:f4:29:6b:95:53:c9:
                    9f:e8:36:61:db:3e:8a:8b:83:ee:44:6a:63:ad:c0:
                    eb:89:9b:8b:c7:a3:82:d6:22:ab:7e:cb:09:4c:fd:
                    d5:4c:89:83:d5:3f:8b:cd:49:43:2c:68:1b:a0:42:
                    2a:27:de:e6:19:af:fc:b5:c6:98:5b:56:75:77:fa:
                    8a:83:43:42:de:64:22:e3:73:e9:c5:b4:7d:3c:ba:
                    ba:af:6e:c5:b5:6d:a2:ef:41:96:48:4b:6e:ad:6b:
                    6f:49:e9:9f:c8:b6:fd:91:09:79:db:d6:c1:ee:c3:
                    54:7e:26:1e:8b:6f:2c:64:f2:d2:c6:df:35:90:0a:
                    72:d9:5e:c6:cb:82:52:4b:cc:1c:b7:09:1f:4e:4c:
                    e2:27:11:9b:22:48:67:98:ae:4b:62:a3:d3:80:b3:
                    78:c8:87:b4:dc:ad:99:80:11:f5:a0:ba:3c:70:e4:
                    ce:4d:bf:a1:74:bc:93:35:49:4d:0a:6c:82:1e:d1:
                    d3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B0:59:0B:40:9F:47:C7:0C:E6:FB:DA:A5:C9:FB:D4:0C:3A:14:17
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a33303a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a:30::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:75:3f:41:24:df:fc:af:3a:e9:03:ac:0a:f4:06:cf:78:e6:
         5b:1b:60:8a:bb:c2:c5:f9:a4:90:55:21:de:83:39:e0:29:2c:
         de:4b:5b:b5:ee:38:2c:ee:1d:44:94:62:d7:eb:c9:35:44:e2:
         10:95:15:5a:eb:77:92:41:fc:ad:f3:b1:15:43:94:36:49:fa:
         5d:bb:6c:09:06:46:bd:f1:44:54:fe:9a:02:d6:04:fe:83:0b:
         43:71:75:03:91:af:89:e6:97:3e:3f:54:92:2b:01:6d:5a:b1:
         05:8a:d2:1c:94:13:62:e4:b0:ef:e3:9f:18:ee:44:0a:c5:a4:
         a7:b5:df:83:8b:59:b2:37:1d:ee:6e:cf:45:e5:3e:05:92:65:
         64:bf:c9:9b:da:ad:8f:0c:ae:f4:f1:eb:03:7a:6b:f0:cd:df:
         02:e5:f9:e1:2e:fd:09:32:42:63:a4:97:ea:2d:01:81:14:01:
         a2:20:05:6d:2f:00:01:98:42:b1:db:a4:94:68:9b:9c:27:8d:
         48:80:c8:bb:b6:b0:87:68:ba:d1:6a:f4:3a:ef:f3:3c:b0:76:
         f5:d5:6d:2e:c5:6e:b2:24:bd:12:15:4e:5a:f7:c8:30:d0:30:
         8c:53:bb:b9:ca:e2:3e:f5:ff:be:c8:2f:93:46:5c:54:1a:fa:
         67:49:8c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----