Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a33343a3a2f34382d3438203d3e20343031353037.roa
File:                     323630323a663738613a33343a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          WRjKik5gFvJW3xe+W+lUkvhWgTs3snuLvOvRaazfLQk=
Subject key identifier:   D9:FE:7A:36:12:27:6B:F5:D9:DF:34:AC:4C:29:1F:AE:96:72:0A:49
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       5D684E21BCDFA24E96B4D6387E72B2FFCDC6755F
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a33343a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Thu 19 Dec 2024 14:17:04 +0000
ROA not before:           Thu 19 Dec 2024 14:12:04 +0000
ROA not after:            Thu 18 Dec 2025 14:17:04 +0000
asID:                     401507
IP address blocks:        2602:f78a:34::/48 maxlen: 48
Validation:               Failed, certificate revoked on Sat 01 Feb 2025 22:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:68:4e:21:bc:df:a2:4e:96:b4:d6:38:7e:72:b2:ff:cd:c6:75:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Dec 19 14:12:04 2024 GMT
            Not After : Dec 18 14:17:04 2025 GMT
        Subject: CN=D9FE7A3612276BF5D9DF34AC4C291FAE96720A49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:08:6b:28:dc:b3:7f:8d:07:9e:33:95:90:e9:
                    47:00:a8:ae:56:c8:3c:d8:c2:96:d0:8a:72:37:41:
                    e8:0b:a9:4a:8c:3f:0f:dc:6b:3a:72:18:24:63:a0:
                    32:b6:96:18:fc:0c:68:2b:71:9f:18:5a:71:af:d8:
                    22:04:88:2f:81:83:ab:b6:e3:b6:84:e8:e8:b6:be:
                    b9:86:f1:db:90:90:0d:e6:a0:01:48:ca:8a:93:11:
                    81:7a:4d:d8:dd:14:29:b4:10:44:db:e6:ab:74:07:
                    44:a2:83:85:78:f8:c4:63:45:e0:bf:22:c1:db:d3:
                    23:25:ca:e9:24:fe:69:7c:7e:89:ca:20:18:34:8f:
                    78:97:2a:a4:5b:40:6c:fb:7f:64:ac:28:23:e5:eb:
                    33:d7:7d:3f:86:5e:f3:68:a9:54:43:14:8c:16:88:
                    ba:40:a9:9b:29:a5:56:66:1b:ff:7a:35:36:48:d8:
                    eb:7d:63:f1:8f:83:52:96:05:ea:a7:55:27:a2:db:
                    78:5c:35:de:f7:47:ef:1b:9f:7a:f4:d9:d5:9b:da:
                    b5:90:40:84:ce:77:16:2b:f9:08:90:71:91:0f:0d:
                    68:d5:00:8b:80:78:e6:36:13:85:1c:3d:6c:47:f0:
                    da:16:01:90:04:9f:5d:3d:b6:8c:b0:cd:d2:96:d5:
                    82:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FE:7A:36:12:27:6B:F5:D9:DF:34:AC:4C:29:1F:AE:96:72:0A:49
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a33343a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a:34::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:e8:93:55:c7:f9:42:a4:ca:4a:48:8e:e7:c7:f5:c8:b5:17:
         a0:5f:19:5a:e2:f8:5c:91:d3:ae:78:c3:be:17:15:91:3f:e1:
         f8:93:e3:61:53:e6:fc:72:d7:f9:4c:30:2f:6b:f9:eb:22:38:
         68:c3:29:4c:8e:1c:0a:1f:d8:91:1a:2e:d9:ed:e5:87:2c:16:
         1b:d8:f4:04:12:cb:e0:de:47:f4:c7:ac:0c:7e:f4:db:31:68:
         02:e4:c3:3c:22:49:e1:85:c0:65:52:f6:3e:93:d2:da:34:49:
         64:8b:5e:7c:50:a5:4f:b7:b2:4b:a0:a2:99:77:a1:8d:60:c8:
         3c:da:bb:2a:4c:35:78:9a:06:87:6c:e0:1f:a0:3d:11:55:4f:
         d4:b2:7f:74:d4:44:42:63:e6:24:3a:a1:db:66:d4:01:61:04:
         00:18:da:61:e1:7d:14:d0:e8:5a:bd:dc:21:39:62:c7:5b:49:
         fc:12:84:ec:ce:de:aa:30:a2:dd:d2:6d:e1:43:e5:c7:59:6f:
         ad:7a:d3:28:7e:11:14:81:fb:a7:6c:75:10:ad:7b:57:06:e0:
         01:05:ec:ae:cb:97:0e:5e:07:91:c9:ff:ec:d7:e8:38:6e:bf:
         83:b5:69:a6:6f:c2:31:a1:2a:35:fa:85:c3:c6:ac:67:4b:c6:
         d5:fb:42:88
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUXWhOIbzfok6WtNY4fnKy/83GdV8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA2YmUxNWUxOTk2MDVlNzU2MDI4MTM3MDkyMDM2Mjk4
YTc0NmJjZGZlMjQyMjdlNzIwHhcNMjQxMjE5MTQxMjA0WhcNMjUxMjE4MTQxNzA0
WjAzMTEwLwYDVQQDEyhEOUZFN0EzNjEyMjc2QkY1RDlERjM0QUM0QzI5MUZBRTk2
NzIwQTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQhrKNyzf40H
njOVkOlHAKiuVsg82MKW0IpyN0HoC6lKjD8P3Gs6chgkY6AytpYY/AxoK3GfGFpx
r9giBIgvgYOrtuO2hOjotr65hvHbkJAN5qABSMqKkxGBek3Y3RQptBBE2+ardAdE
ooOFePjEY0XgvyLB29MjJcrpJP5pfH6JyiAYNI94lyqkW0Bs+39krCgj5esz130/
hl7zaKlUQxSMFoi6QKmbKaVWZhv/ejU2SNjrfWPxj4NSlgXqp1Unott4XDXe90fv
G5969NnVm9q1kECEzncWK/kIkHGRDw1o1QCLgHjmNhOFHD1sR/DaFgGQBJ9dPbaM
sM3SltWCUwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFNn+ejYSJ2v12d80rEwpH66W
cgpJMB8GA1UdIwQYMBaAFBXgJDcag1uwDqu6+0T2jw+K6/j3MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZGY0NWEwZWE2Njg3LzAv
MTVFMDI0MzcxQTgzNUJCMDBFQUJCQUZCNDRGNjhGMEY4QUVCRjhGNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1L2Y5MTRhYzFhLWIwMTctNGNmNC05YzNkLTM0OWRkMTkwMDBkMy81MDZi
ZTE1ZTE5OTYwNWU3NTYwMjgxMzcwOTIwMzYyOThhNzQ2YmNkZmUyNDIyN2U3Mi5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Rm
NDVhMGVhNjY4Ny8wLzMyMzYzMDMyM2E2NjM3Mzg2MTNhMzMzNDNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDM0MzAzMTM1MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC94oANDANBgkq
hkiG9w0BAQsFAAOCAQEAGOiTVcf5QqTKSkiO58f1yLUXoF8ZWuL4XJHTrnjDvhcV
kT/h+JPjYVPm/HLX+UwwL2v56yI4aMMpTI4cCh/YkRou2e3lhywWG9j0BBLL4N5H
9MesDH702zFoAuTDPCJJ4YXAZVL2PpPS2jRJZItefFClT7eyS6CimXehjWDIPNq7
Kkw1eJoGh2zgH6A9EVVP1LJ/dNREQmPmJDqh22bUAWEEABjaYeF9FNDoWr3cITli
x1tJ/BKE7M7eqjCi3dJt4UPlx1lvrXrTKH4RFIH7p2x1EK17VwbgAQXsrsuXDl4H
kcn/7NfoOG6/g7Vppm/CMaEqNfqFw8asZ0vG1ftCiA==
-----END CERTIFICATE-----