Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a37323a3a2f34382d3438203d3e203136393039.roa
File:                     323630323a663738613a37323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          fdNLhsewB5g4TTwxe3HIYAPnkq8Q/dugPfLGEFoFnRY=
Subject key identifier:   5C:09:A3:06:9B:06:49:5A:E3:42:C5:36:A1:37:D6:ED:0F:2F:CB:7C
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       2BA6D0A1114BE11DBDECC5FB4BF98B4FF8D9DED2
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a37323a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 19 Dec 2024 14:57:59 +0000
ROA not before:           Thu 19 Dec 2024 14:52:59 +0000
ROA not after:            Thu 18 Dec 2025 14:57:59 +0000
asID:                     16909
IP address blocks:        2602:f78a:72::/48 maxlen: 48
Validation:               Failed, certificate revoked on Sat 01 Feb 2025 22:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a6:d0:a1:11:4b:e1:1d:bd:ec:c5:fb:4b:f9:8b:4f:f8:d9:de:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Dec 19 14:52:59 2024 GMT
            Not After : Dec 18 14:57:59 2025 GMT
        Subject: CN=5C09A3069B06495AE342C536A137D6ED0F2FCB7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5b:64:48:64:e3:68:35:68:7f:67:5a:58:76:
                    cf:16:82:a9:d4:43:c2:cd:0c:1a:ef:d8:7d:3b:fe:
                    89:9e:ed:47:a3:f9:49:2d:a1:db:4a:dd:8f:c8:d9:
                    cd:01:78:24:d1:fe:04:5d:80:ee:85:3e:d3:f8:35:
                    6a:72:85:24:8f:12:3d:4b:eb:59:e9:f1:19:bb:ce:
                    84:1c:a4:6a:80:7b:da:6d:31:8d:e9:4c:17:57:7a:
                    44:e1:3a:20:c8:34:1d:69:60:c4:1a:97:01:c5:04:
                    96:c1:99:15:bc:34:91:cb:48:e1:6f:d4:44:cd:67:
                    1b:e1:3b:c5:3e:22:83:f1:05:51:43:6b:b3:5b:7f:
                    f3:af:83:21:c2:8e:7a:7d:8d:71:7a:4a:38:2d:54:
                    c0:3d:92:a8:b4:a5:34:ec:74:0d:06:4c:66:af:86:
                    15:89:a7:dc:49:9a:50:4c:77:7e:ca:4b:08:eb:dd:
                    54:03:91:ea:ae:29:58:98:4f:6f:72:37:20:49:6d:
                    60:a1:29:ff:b0:5f:66:0c:84:4a:02:21:b5:72:06:
                    e9:f9:f4:8f:f4:f7:92:9f:fb:46:f3:9a:88:85:64:
                    67:c7:5f:a7:3b:f1:11:13:fd:9d:c0:a5:6f:e1:2c:
                    a5:ca:ff:e1:6d:df:d4:62:ce:80:7d:f8:8c:c3:a3:
                    3e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:09:A3:06:9B:06:49:5A:E3:42:C5:36:A1:37:D6:ED:0F:2F:CB:7C
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a37323a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a:72::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:90:1f:cf:8d:e4:9c:ce:d3:2b:b4:47:9f:0b:5d:49:8f:56:
         a9:44:be:d2:40:07:e2:4e:71:af:46:9d:f0:e6:07:c8:96:9f:
         5f:05:9d:22:bb:99:a0:2a:bd:54:23:ba:5a:ce:3c:47:66:cf:
         7a:c9:49:76:64:ad:d1:47:75:1e:a0:bc:5e:52:53:d7:4e:eb:
         68:fa:27:37:63:89:5e:28:5e:8b:f5:c9:29:3b:68:03:9c:66:
         35:5d:59:3c:a6:06:df:f5:37:44:30:94:97:83:a6:2f:da:fe:
         cf:74:c1:0a:00:9a:be:1c:ae:46:2d:5f:09:68:3b:a6:d9:3f:
         51:3b:c1:4e:01:ea:cf:6c:4e:ec:24:e5:50:a3:e4:dd:eb:66:
         1e:50:c7:57:22:b1:a9:28:24:f9:9c:0e:9c:92:c0:07:24:fd:
         f8:36:55:45:7d:da:00:af:5e:b1:c7:49:02:a3:d4:58:90:6f:
         34:8d:15:87:de:af:86:91:02:37:f1:ee:f9:6b:ab:89:55:84:
         78:bc:fe:5b:b0:78:88:29:36:d3:b8:48:bf:e6:df:af:ff:1d:
         2e:1a:f0:07:c7:58:45:10:da:6f:bd:5c:d1:8c:a0:69:0a:22:
         03:89:8e:0e:1e:69:35:3f:48:60:92:7f:ab:72:e9:6e:e8:72:
         da:c4:5b:15
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUK6bQoRFL4R297MX7S/mLT/jZ3tIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA2YmUxNWUxOTk2MDVlNzU2MDI4MTM3MDkyMDM2Mjk4
YTc0NmJjZGZlMjQyMjdlNzIwHhcNMjQxMjE5MTQ1MjU5WhcNMjUxMjE4MTQ1NzU5
WjAzMTEwLwYDVQQDEyg1QzA5QTMwNjlCMDY0OTVBRTM0MkM1MzZBMTM3RDZFRDBG
MkZDQjdDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVtkSGTjaDVo
f2daWHbPFoKp1EPCzQwa79h9O/6Jnu1Ho/lJLaHbSt2PyNnNAXgk0f4EXYDuhT7T
+DVqcoUkjxI9S+tZ6fEZu86EHKRqgHvabTGN6UwXV3pE4TogyDQdaWDEGpcBxQSW
wZkVvDSRy0jhb9REzWcb4TvFPiKD8QVRQ2uzW3/zr4Mhwo56fY1xeko4LVTAPZKo
tKU07HQNBkxmr4YViafcSZpQTHd+yksI691UA5HqrilYmE9vcjcgSW1goSn/sF9m
DIRKAiG1cgbp+fSP9PeSn/tG85qIhWRnx1+nO/ERE/2dwKVv4Sylyv/hbd/UYs6A
ffiMw6M+jQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFFwJowabBkla40LFNqE31u0P
L8t8MB8GA1UdIwQYMBaAFBXgJDcag1uwDqu6+0T2jw+K6/j3MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZGY0NWEwZWE2Njg3LzAv
MTVFMDI0MzcxQTgzNUJCMDBFQUJCQUZCNDRGNjhGMEY4QUVCRjhGNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1L2Y5MTRhYzFhLWIwMTctNGNmNC05YzNkLTM0OWRkMTkwMDBkMy81MDZi
ZTE1ZTE5OTYwNWU3NTYwMjgxMzcwOTIwMzYyOThhNzQ2YmNkZmUyNDIyN2U3Mi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Rm
NDVhMGVhNjY4Ny8wLzMyMzYzMDMyM2E2NjM3Mzg2MTNhMzczMjNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMxMzYzOTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAveKAHIwDQYJKoZI
hvcNAQELBQADggEBAJ2QH8+N5JzO0yu0R58LXUmPVqlEvtJAB+JOca9GnfDmB8iW
n18FnSK7maAqvVQjulrOPEdmz3rJSXZkrdFHdR6gvF5SU9dO62j6JzdjiV4oXov1
ySk7aAOcZjVdWTymBt/1N0QwlJeDpi/a/s90wQoAmr4crkYtXwloO6bZP1E7wU4B
6s9sTuwk5VCj5N3rZh5Qx1cisakoJPmcDpySwAck/fg2VUV92gCvXrHHSQKj1FiQ
bzSNFYfer4aRAjfx7vlrq4lVhHi8/luweIgpNtO4SL/m36//HS4a8AfHWEUQ2m+9
XNGMoGkKIgOJjg4eaTU/SGCSf6ty6W7octrEWxU=
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:58:05 2025 by rpki-client