Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a34313a3a2f34382d3438203d3e203136393039.roa
File:                     323630323a663738613a34313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          nU0BM8iNPdJExCaKcqS5+k9GGq2PibobQm9J3D3XURA=
Subject key identifier:   DD:29:78:AE:7F:73:3D:04:1F:3B:82:58:AE:63:3A:F3:5E:A6:47:CE
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       11346055408270E74B86FCFF7575491B49614070
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a34313a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 20 Dec 2024 16:39:21 +0000
ROA not before:           Fri 20 Dec 2024 16:34:21 +0000
ROA not after:            Fri 19 Dec 2025 16:39:21 +0000
asID:                     16909
IP address blocks:        2602:f78a:41::/48 maxlen: 48
Validation:               Failed, certificate revoked on Sat 21 Dec 2024 20:25:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:34:60:55:40:82:70:e7:4b:86:fc:ff:75:75:49:1b:49:61:40:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Dec 20 16:34:21 2024 GMT
            Not After : Dec 19 16:39:21 2025 GMT
        Subject: CN=DD2978AE7F733D041F3B8258AE633AF35EA647CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6a:8a:34:62:b6:6c:31:58:a9:8e:8a:ec:17:
                    07:0e:3d:21:76:86:42:56:cc:c4:5d:20:c5:2d:28:
                    18:b4:91:ab:9a:bc:dd:3f:3c:9b:a0:2a:55:f2:03:
                    f5:41:e6:57:d6:ba:18:a3:6a:f6:11:20:db:15:ec:
                    16:87:d5:fc:a7:cf:76:31:c3:e4:e1:fc:86:07:7a:
                    8a:53:00:a7:45:31:3c:40:be:41:a5:05:68:0c:b4:
                    3c:4e:13:76:bb:3c:8b:13:d3:55:ae:68:2e:de:5a:
                    e5:6f:9d:c1:14:ba:82:e8:f0:ae:eb:d4:29:2c:5b:
                    30:1e:b8:c8:80:4a:a7:a6:29:6e:2c:0c:26:93:5d:
                    8b:8e:d3:b3:0f:b4:48:15:ed:7f:0d:22:c3:39:d4:
                    8e:ae:81:fd:09:c5:0c:b1:0e:77:88:8d:41:d2:f0:
                    4b:8f:94:79:2a:5d:5c:4c:73:7f:70:9f:37:84:98:
                    df:d4:3e:44:ee:9c:d4:a8:e0:0d:c8:34:ff:0d:49:
                    a2:58:b5:b9:e8:44:14:29:ea:7e:c2:d9:11:a6:2a:
                    29:cd:5a:0a:73:b2:b8:6b:58:eb:c6:e1:fc:85:c7:
                    28:c3:54:47:87:95:98:af:64:0b:4a:fc:be:50:88:
                    0e:1e:96:10:8e:44:1b:d4:18:cd:4c:98:c2:f3:f5:
                    88:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:29:78:AE:7F:73:3D:04:1F:3B:82:58:AE:63:3A:F3:5E:A6:47:CE
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a34313a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a:41::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:4e:01:0a:ae:99:78:6a:1b:b2:32:45:5b:f7:04:81:01:be:
         42:fc:32:a8:08:70:dd:58:b5:be:17:30:d8:53:fc:0f:44:1d:
         0d:76:59:a6:f0:e9:1b:29:d4:3e:b7:55:6e:31:5e:2f:3d:10:
         52:94:55:db:23:76:3f:f4:a8:b6:da:c2:95:c1:3a:af:ac:80:
         92:50:a8:c7:80:5b:7b:80:74:84:7f:29:f6:e0:dc:d5:e1:17:
         04:f9:23:7a:c4:12:b0:04:4b:0f:16:58:d9:d2:2c:1d:e3:d6:
         b8:52:b9:f3:52:ff:81:2b:c1:42:31:1d:5a:02:1a:22:5a:77:
         d6:fc:ce:8d:d5:61:4a:eb:3e:52:ff:97:05:ad:e4:f3:4c:0a:
         34:0d:93:08:a6:5a:65:83:4c:0c:65:7f:ec:ef:93:2d:de:25:
         c2:c3:57:6e:f8:d1:27:fb:61:a7:88:62:11:46:9d:83:15:b7:
         d0:a5:fa:ab:d0:65:6b:37:c1:41:e0:b2:25:bf:6c:df:95:a7:
         58:53:d2:98:a8:04:16:5e:d9:75:c2:05:93:16:2e:4e:04:03:
         59:cd:d6:d7:c2:5e:0d:fe:31:2e:e4:04:03:0a:72:9d:00:c9:
         85:f2:cd:c1:11:bd:c5:f4:87:9d:c1:8b:fb:91:3e:1c:a8:19:
         99:8f:d4:a5
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUETRgVUCCcOdLhvz/dXVJG0lhQHAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA2YmUxNWUxOTk2MDVlNzU2MDI4MTM3MDkyMDM2Mjk4
YTc0NmJjZGZlMjQyMjdlNzIwHhcNMjQxMjIwMTYzNDIxWhcNMjUxMjE5MTYzOTIx
WjAzMTEwLwYDVQQDEyhERDI5NzhBRTdGNzMzRDA0MUYzQjgyNThBRTYzM0FGMzVF
QTY0N0NFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmqKNGK2bDFY
qY6K7BcHDj0hdoZCVszEXSDFLSgYtJGrmrzdPzyboCpV8gP1QeZX1roYo2r2ESDb
FewWh9X8p892McPk4fyGB3qKUwCnRTE8QL5BpQVoDLQ8ThN2uzyLE9NVrmgu3lrl
b53BFLqC6PCu69QpLFswHrjIgEqnpiluLAwmk12LjtOzD7RIFe1/DSLDOdSOroH9
CcUMsQ53iI1B0vBLj5R5Kl1cTHN/cJ83hJjf1D5E7pzUqOANyDT/DUmiWLW56EQU
Kep+wtkRpiopzVoKc7K4a1jrxuH8hccow1RHh5WYr2QLSvy+UIgOHpYQjkQb1BjN
TJjC8/WIjQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFN0peK5/cz0EHzuCWK5jOvNe
pkfOMB8GA1UdIwQYMBaAFBXgJDcag1uwDqu6+0T2jw+K6/j3MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZGY0NWEwZWE2Njg3LzAv
MTVFMDI0MzcxQTgzNUJCMDBFQUJCQUZCNDRGNjhGMEY4QUVCRjhGNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1L2Y5MTRhYzFhLWIwMTctNGNmNC05YzNkLTM0OWRkMTkwMDBkMy81MDZi
ZTE1ZTE5OTYwNWU3NTYwMjgxMzcwOTIwMzYyOThhNzQ2YmNkZmUyNDIyN2U3Mi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Rm
NDVhMGVhNjY4Ny8wLzMyMzYzMDMyM2E2NjM3Mzg2MTNhMzQzMTNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMxMzYzOTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAveKAEEwDQYJKoZI
hvcNAQELBQADggEBAHFOAQqumXhqG7IyRVv3BIEBvkL8MqgIcN1Ytb4XMNhT/A9E
HQ12Wabw6Rsp1D63VW4xXi89EFKUVdsjdj/0qLbawpXBOq+sgJJQqMeAW3uAdIR/
Kfbg3NXhFwT5I3rEErAESw8WWNnSLB3j1rhSufNS/4ErwUIxHVoCGiJad9b8zo3V
YUrrPlL/lwWt5PNMCjQNkwimWmWDTAxlf+zvky3eJcLDV2740Sf7YaeIYhFGnYMV
t9Cl+qvQZWs3wUHgsiW/bN+Vp1hT0pioBBZe2XXCBZMWLk4EA1nN1tfCXg3+MS7k
BAMKcp0AyYXyzcERvcX0h53Bi/uRPhyoGZmP1KU=
-----END CERTIFICATE-----