Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a35343a3a2f34382d3438203d3e203136393039.roa
File:                     323630323a663738613a35343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          RyjqFy4pLuZUMBirLXm0rYGgSDJXhSd+HO+doGWzG1w=
Subject key identifier:   55:55:C0:66:38:A5:5C:9A:65:A4:22:48:6B:2A:9A:B9:25:1E:66:70
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       477D0B5E8CEAA2D22A1070172866EB89FBE76EE2
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a35343a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 19 Dec 2024 17:22:48 +0000
ROA not before:           Thu 19 Dec 2024 17:17:48 +0000
ROA not after:            Thu 18 Dec 2025 17:22:48 +0000
asID:                     16909
IP address blocks:        2602:f78a:54::/48 maxlen: 48
Validation:               Failed, certificate revoked on Sat 01 Feb 2025 22:05:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:7d:0b:5e:8c:ea:a2:d2:2a:10:70:17:28:66:eb:89:fb:e7:6e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Dec 19 17:17:48 2024 GMT
            Not After : Dec 18 17:22:48 2025 GMT
        Subject: CN=5555C06638A55C9A65A422486B2A9AB9251E6670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e3:da:77:a0:dc:7c:31:c6:1b:cc:0e:6c:89:
                    9d:15:f1:2b:fa:68:15:3a:bd:21:ac:ef:bb:3a:61:
                    05:f0:f2:88:df:74:a6:55:0c:d1:45:69:be:d8:9e:
                    0a:40:c6:91:06:a8:fc:2c:bb:8e:42:5f:ef:cc:19:
                    1d:c6:a7:ae:b3:0b:27:3f:de:d0:45:dd:7e:5c:63:
                    29:72:31:96:23:a7:40:c4:ab:62:d6:98:5c:6e:58:
                    23:ca:44:e2:3a:07:0a:e2:cf:0a:2f:b5:5e:07:e0:
                    ca:59:17:4e:df:f3:ba:57:09:35:c9:a2:d8:28:42:
                    4a:c8:97:2e:49:94:14:9b:db:47:b2:ce:0b:f4:d6:
                    53:c0:6d:07:ae:19:14:50:5f:62:17:98:77:83:1c:
                    99:c1:bc:66:0d:b5:70:4d:13:b2:12:4c:a2:61:b8:
                    51:31:44:c3:a9:cb:f4:08:76:0d:c9:33:41:fe:17:
                    de:7f:c6:15:da:19:6e:3f:37:8f:18:26:58:ba:5d:
                    47:9c:36:20:de:81:c5:17:73:6a:79:c9:41:74:27:
                    70:71:a2:65:3c:cc:b9:f2:40:ac:57:93:48:f3:df:
                    2b:6c:3b:77:33:d2:c2:05:0f:d3:45:5e:9e:db:0c:
                    77:6f:3e:6c:d5:2c:87:7f:f3:08:04:57:00:0f:01:
                    08:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:55:C0:66:38:A5:5C:9A:65:A4:22:48:6B:2A:9A:B9:25:1E:66:70
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a35343a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a:54::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:15:87:86:d3:aa:97:c2:2e:06:98:54:71:dd:62:23:48:a2:
         bc:3d:db:b1:70:9e:53:8a:87:b4:37:f5:da:88:e5:fe:d3:ac:
         ea:54:78:e5:2d:3e:2e:fc:71:06:2f:9e:6c:15:8d:e0:41:5c:
         35:b0:c8:1f:83:ea:fa:ed:d7:65:44:d4:a7:ff:fd:08:b2:a8:
         ca:3c:98:f8:03:7a:85:9c:51:ed:8f:6e:5d:a3:9b:70:ec:dd:
         03:37:f2:74:b3:39:2a:fe:db:42:d9:87:4b:0b:44:71:89:49:
         b0:a2:f6:83:1c:92:4c:a6:00:e1:3d:ef:ff:50:af:97:e8:8c:
         be:df:fa:77:0e:05:81:08:bc:55:39:62:fb:94:4c:a5:f6:72:
         8f:6e:f8:8e:f7:4d:1a:3d:12:7d:c7:b9:27:e9:b4:5c:c7:c8:
         a8:e2:0a:93:b8:db:31:6b:24:95:72:37:a1:04:73:ea:9c:21:
         33:dd:fd:79:36:d3:3d:32:68:b3:55:2e:ae:e6:1f:7c:32:7a:
         17:c0:9b:eb:24:32:65:08:35:27:74:60:5f:49:96:d5:0c:c2:
         78:78:9d:6f:d1:2f:dc:6f:34:29:c8:f3:0c:59:5f:33:00:06:
         e9:a3:c7:14:da:bd:3b:5a:ce:bf:55:cc:41:7a:f0:f6:29:a4:
         4c:6e:da:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:42:02 2025 by rpki-client