Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a34323a3a2f34382d3438203d3e203136393039.roa
File:                     323630323a663738613a34323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          yyfLEFcg+CJPFfNZYL7jBXlEPPXJYmel/5JTulQ6ZdY=
Subject key identifier:   D9:91:4D:B1:11:2D:77:6F:66:1A:2C:27:A3:D1:5C:15:D4:B4:89:2F
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       41E8F780D51DC66CD4E9E38DB056D190AB9340B0
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a34323a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 19 Dec 2024 14:15:56 +0000
ROA not before:           Thu 19 Dec 2024 14:10:56 +0000
ROA not after:            Thu 18 Dec 2025 14:15:56 +0000
asID:                     16909
IP address blocks:        2602:f78a:42::/48 maxlen: 48
Validation:               Failed, certificate revoked on Sat 01 Feb 2025 22:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e8:f7:80:d5:1d:c6:6c:d4:e9:e3:8d:b0:56:d1:90:ab:93:40:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Dec 19 14:10:56 2024 GMT
            Not After : Dec 18 14:15:56 2025 GMT
        Subject: CN=D9914DB1112D776F661A2C27A3D15C15D4B4892F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:74:de:67:b4:6f:8c:27:a7:b7:ed:7a:c1:f5:
                    85:c8:0a:f1:9b:2f:b3:67:f5:fb:23:69:cb:e7:3b:
                    db:fa:65:3e:f2:42:7e:42:65:d5:98:c3:1f:98:cb:
                    0d:fd:c8:65:bb:d9:08:44:b3:fb:72:53:9e:f4:19:
                    a8:a3:b2:da:e9:84:69:74:04:cf:f2:f6:3c:38:94:
                    5c:67:83:b3:f0:89:a1:a2:4a:f9:6f:8b:7d:5e:d3:
                    91:c7:de:d1:ac:43:f6:57:97:d4:8e:62:3e:2d:3d:
                    b0:0d:5e:6a:0c:d7:9a:3e:d7:1f:e6:f6:27:81:a8:
                    cd:25:69:24:6a:90:c8:e3:13:66:03:ce:6c:df:fe:
                    e9:69:a4:ca:cd:c6:26:9b:da:14:02:d0:10:51:ec:
                    08:08:52:cf:cf:51:86:a1:ae:31:81:97:e5:d9:73:
                    8b:76:66:17:4c:d0:6b:b0:ce:31:06:2b:f5:3c:8d:
                    8b:f7:56:e9:ac:21:f1:ce:07:a7:e6:7b:07:01:a3:
                    b9:d2:36:72:d7:9a:37:b3:23:89:62:8b:81:d1:9e:
                    82:12:ea:be:62:2d:37:f5:1c:7d:4a:da:e2:95:88:
                    88:47:47:4e:b1:24:4b:5e:7c:91:d6:47:a7:d0:6e:
                    4e:d6:e4:c4:ef:fe:85:f5:76:bc:2a:35:fb:e1:9a:
                    82:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:91:4D:B1:11:2D:77:6F:66:1A:2C:27:A3:D1:5C:15:D4:B4:89:2F
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a34323a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a:42::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:f6:5f:d0:0e:04:09:5c:a7:75:e2:ac:17:b3:5e:3e:5e:ac:
         09:e0:4c:5a:c8:17:22:a4:a6:6e:12:d5:57:4c:e0:1e:89:72:
         e1:59:38:e5:f3:d8:93:55:31:35:45:5b:77:8d:34:5f:6a:4b:
         63:13:f0:d3:c2:a1:02:1e:06:3a:b0:76:d3:68:58:8b:da:58:
         af:81:b4:ba:eb:3f:13:5e:e4:42:f9:c5:1b:dc:e5:f7:09:4e:
         7e:8e:0b:95:da:64:0e:53:be:76:e4:dd:d6:51:67:2a:50:93:
         51:de:53:e0:87:f5:70:98:1c:44:06:a9:fd:a6:da:e0:a7:ea:
         27:34:53:13:e7:1f:4a:d0:35:f8:0a:f7:a3:70:c5:83:f2:37:
         7f:92:a8:ff:11:a4:ec:d2:9b:7a:54:37:4c:56:0c:83:2f:7d:
         fa:dc:b7:79:cf:43:47:d4:ec:9f:68:50:e8:86:42:07:71:0c:
         2e:0a:db:f4:72:72:96:90:5c:55:75:83:ad:8c:3b:ca:e1:0f:
         a2:53:c5:68:e1:a9:fa:6e:e3:2b:b6:6c:f3:17:96:8e:14:b8:
         0a:90:69:b2:6f:03:89:1e:bb:bd:df:e1:6a:6f:8b:2a:3b:d3:
         68:e4:40:7c:85:3a:26:05:69:2b:af:f7:70:c9:11:55:86:3a:
         04:1e:2c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----