Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a35303a3a2f34382d3438203d3e203136393039.roa
File:                     323630323a663738613a35303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          9Lq0ui2dfiQvy/Hm2YTIOTfOA0be5ZlvVkExgVIdhEM=
Subject key identifier:   C7:42:4F:01:9C:C7:19:06:11:61:51:28:6E:94:8B:D8:A5:F1:FE:80
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       453A22117708D4CF8EF76020859FC9E8D389DD41
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a35303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 19 Dec 2024 17:22:27 +0000
ROA not before:           Thu 19 Dec 2024 17:17:27 +0000
ROA not after:            Thu 18 Dec 2025 17:22:27 +0000
asID:                     16909
IP address blocks:        2602:f78a:50::/48 maxlen: 48
Validation:               Failed, certificate revoked on Sat 01 Feb 2025 22:05:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3a:22:11:77:08:d4:cf:8e:f7:60:20:85:9f:c9:e8:d3:89:dd:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Dec 19 17:17:27 2024 GMT
            Not After : Dec 18 17:22:27 2025 GMT
        Subject: CN=C7424F019CC71906116151286E948BD8A5F1FE80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:27:9d:8c:ad:61:26:62:9b:b8:00:50:ab:
                    0b:99:7d:21:76:43:49:34:a3:07:41:26:f4:3d:15:
                    b3:8b:1d:2a:29:8e:be:b4:c7:c5:cd:0c:44:f0:f7:
                    f5:b9:6a:b7:13:b5:38:3d:86:7f:4c:10:b9:24:a1:
                    f6:de:3a:41:f9:f7:e7:85:a5:6d:17:1f:00:d4:39:
                    04:1d:9b:4a:7b:37:43:65:05:37:48:86:70:b0:88:
                    bd:a3:e6:50:e5:4d:45:53:f6:4b:78:8d:f4:36:fe:
                    67:50:84:8f:e5:dd:06:9c:42:4a:9c:16:96:0e:25:
                    5b:85:b1:d4:27:4d:33:b4:d0:04:aa:16:0c:c2:a7:
                    b5:c6:1a:93:39:d7:d0:1c:8f:fa:12:5b:a7:9f:a1:
                    b3:a8:2b:b9:04:30:27:93:3d:f6:ae:ce:a2:bf:4c:
                    6d:04:b4:9f:26:64:27:2a:72:00:25:69:73:27:2c:
                    e1:72:b7:6d:1e:5d:7e:c9:d3:48:fd:83:88:bd:2c:
                    03:0d:a0:26:37:2f:b1:ba:fa:1a:ef:9f:0e:07:fb:
                    bc:49:ba:95:8b:da:50:48:47:9b:42:88:1f:e8:5c:
                    50:69:80:79:f0:14:76:99:5b:98:cd:f5:0b:e3:e0:
                    f9:16:76:9f:b7:9a:c2:1e:59:99:92:c9:64:13:15:
                    d8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:42:4F:01:9C:C7:19:06:11:61:51:28:6E:94:8B:D8:A5:F1:FE:80
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a35303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a:50::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:38:23:11:90:7e:bb:3e:88:b3:15:6b:f5:ef:29:3c:c1:05:
         a9:2b:39:eb:7e:dd:93:1a:51:be:26:72:38:db:aa:27:03:4e:
         ff:2a:14:99:e6:7b:23:75:b8:ea:76:f8:7a:db:cf:e1:69:e1:
         b6:7e:be:a0:45:64:89:76:03:d9:58:1f:31:72:6a:ce:a1:5d:
         6d:b7:9f:d1:a7:d5:ce:a7:62:a4:9c:be:80:44:b0:de:7b:0b:
         0f:35:91:a6:1e:2b:65:6a:fd:b8:8d:65:0e:46:f8:e6:25:a3:
         de:45:16:ab:39:9c:00:32:44:3a:ef:88:c1:b5:30:0f:20:f2:
         6c:28:2b:a9:06:1e:54:db:35:06:d3:2a:1d:c3:0b:72:53:3c:
         25:0b:6f:66:4f:97:37:d4:eb:39:88:be:70:a5:5c:d2:7e:27:
         8e:b7:b1:87:c5:d5:33:11:2c:e7:d9:9f:51:36:1f:c8:82:9f:
         53:68:3f:3f:fe:ae:fd:0a:bc:8e:dd:29:86:f5:9d:f6:f6:c3:
         7e:b6:98:18:bf:8a:52:ce:b6:3f:e8:72:46:d6:29:cb:00:b3:
         a0:0d:17:cc:5b:f2:ae:2c:f2:c6:7a:3b:76:85:07:35:59:ca:
         d7:dd:3d:ff:6a:75:5b:c2:5c:1c:3f:88:9b:c4:6b:90:a4:05:
         53:9a:fb:da
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIURToiEXcI1M+O92AghZ/J6NOJ3UEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA2YmUxNWUxOTk2MDVlNzU2MDI4MTM3MDkyMDM2Mjk4
YTc0NmJjZGZlMjQyMjdlNzIwHhcNMjQxMjE5MTcxNzI3WhcNMjUxMjE4MTcyMjI3
WjAzMTEwLwYDVQQDEyhDNzQyNEYwMTlDQzcxOTA2MTE2MTUxMjg2RTk0OEJEOEE1
RjFGRTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2InnYytYSZi
m7gAUKsLmX0hdkNJNKMHQSb0PRWzix0qKY6+tMfFzQxE8Pf1uWq3E7U4PYZ/TBC5
JKH23jpB+ffnhaVtFx8A1DkEHZtKezdDZQU3SIZwsIi9o+ZQ5U1FU/ZLeI30Nv5n
UISP5d0GnEJKnBaWDiVbhbHUJ00ztNAEqhYMwqe1xhqTOdfQHI/6Elunn6GzqCu5
BDAnkz32rs6iv0xtBLSfJmQnKnIAJWlzJyzhcrdtHl1+ydNI/YOIvSwDDaAmNy+x
uvoa758OB/u8SbqVi9pQSEebQogf6FxQaYB58BR2mVuYzfUL4+D5Fnaft5rCHlmZ
kslkExXY7QIDAQABo4ICuTCCArUwHQYDVR0OBBYEFMdCTwGcxxkGEWFRKG6Ui9il
8f6AMB8GA1UdIwQYMBaAFBXgJDcag1uwDqu6+0T2jw+K6/j3MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZGY0NWEwZWE2Njg3LzAv
MTVFMDI0MzcxQTgzNUJCMDBFQUJCQUZCNDRGNjhGMEY4QUVCRjhGNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1L2Y5MTRhYzFhLWIwMTctNGNmNC05YzNkLTM0OWRkMTkwMDBkMy81MDZi
ZTE1ZTE5OTYwNWU3NTYwMjgxMzcwOTIwMzYyOThhNzQ2YmNkZmUyNDIyN2U3Mi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Rm
NDVhMGVhNjY4Ny8wLzMyMzYzMDMyM2E2NjM3Mzg2MTNhMzUzMDNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMxMzYzOTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAveKAFAwDQYJKoZI
hvcNAQELBQADggEBAGc4IxGQfrs+iLMVa/XvKTzBBakrOet+3ZMaUb4mcjjbqicD
Tv8qFJnmeyN1uOp2+Hrbz+Fp4bZ+vqBFZIl2A9lYHzFyas6hXW23n9Gn1c6nYqSc
voBEsN57Cw81kaYeK2Vq/biNZQ5G+OYlo95FFqs5nAAyRDrviMG1MA8g8mwoK6kG
HlTbNQbTKh3DC3JTPCULb2ZPlzfU6zmIvnClXNJ+J463sYfF1TMRLOfZn1E2H8iC
n1NoPz/+rv0KvI7dKYb1nfb2w362mBi/ilLOtj/ockbWKcsAs6ANF8xb8q4s8sZ6
O3aFBzVZytfdPf9qdVvCXBw/iJvEa5CkBVOa+9o=
-----END CERTIFICATE-----