Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a39303a3a2f34382d3438203d3e203136393039.roa
File:                     323630323a663738613a39303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          7FsozEPG85RMqnqozYJl4NZ+0+93GZfED2g2jewEtXI=
Subject key identifier:   41:BC:50:EC:51:22:5A:7A:26:2C:67:DE:B4:57:8D:F6:D9:D9:32:09
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       0737620586A718769D4471AFC480A82A6964B0F6
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a39303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 19 Dec 2024 14:16:30 +0000
ROA not before:           Thu 19 Dec 2024 14:11:30 +0000
ROA not after:            Thu 18 Dec 2025 14:16:30 +0000
asID:                     16909
IP address blocks:        2602:f78a:90::/48 maxlen: 48
Validation:               Failed, certificate revoked on Sat 01 Feb 2025 22:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:37:62:05:86:a7:18:76:9d:44:71:af:c4:80:a8:2a:69:64:b0:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Dec 19 14:11:30 2024 GMT
            Not After : Dec 18 14:16:30 2025 GMT
        Subject: CN=41BC50EC51225A7A262C67DEB4578DF6D9D93209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4c:5a:29:65:3c:23:ed:79:90:df:81:4b:61:
                    90:4f:69:2e:53:f2:e2:da:73:9a:b7:5d:ff:6f:c6:
                    fe:88:7e:44:31:b8:07:e5:cd:00:bc:ad:19:db:7f:
                    2f:fd:90:b9:42:74:a5:0e:9f:65:da:36:10:29:65:
                    4e:2b:2e:06:ed:fc:22:39:c2:ea:77:ba:12:3f:93:
                    21:69:1e:4f:53:77:56:ae:19:71:8b:2e:2b:97:4a:
                    d6:b5:42:b0:bd:27:2a:82:97:25:a3:d7:5a:8a:1e:
                    9a:04:1f:af:f8:27:78:75:6d:e1:de:70:f3:a5:c0:
                    dd:24:7e:f6:31:dc:1b:45:e3:08:61:f3:94:7c:c8:
                    92:8d:31:41:96:03:29:1e:1f:9b:fc:69:03:da:00:
                    23:e4:18:67:d1:19:9c:6d:9f:c1:5b:8d:65:16:16:
                    1d:b6:27:1a:b3:69:22:16:fe:8c:d4:b9:46:8f:6c:
                    81:ed:d6:17:07:b9:56:9a:41:02:ce:71:09:93:ba:
                    a5:40:b5:77:5d:9b:10:7f:b7:5f:81:d8:0d:1e:9f:
                    87:17:4e:7e:5c:3f:44:58:bf:da:07:f0:5e:01:c4:
                    97:77:97:66:38:b2:8b:80:c3:79:a8:df:86:97:30:
                    c4:ba:69:cd:d9:18:e8:63:f7:66:17:07:43:89:31:
                    af:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:BC:50:EC:51:22:5A:7A:26:2C:67:DE:B4:57:8D:F6:D9:D9:32:09
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a39303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a:90::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:0e:71:fd:66:e9:12:51:1e:7b:5b:a8:a4:f9:e9:c0:8f:d4:
         c0:d7:a9:59:13:57:b8:27:af:09:58:86:64:bf:04:f3:d7:59:
         a2:a1:ab:21:5e:2e:49:c4:43:14:b5:50:5a:35:e2:d1:74:b7:
         c3:22:2e:d4:39:82:e4:5d:94:66:e2:a4:85:6c:ed:fa:13:e0:
         15:a5:4f:73:fb:54:fd:a6:43:ba:6f:f7:76:ed:54:ac:ae:1a:
         a0:95:d7:02:41:74:7e:0f:ce:b3:3b:f3:4e:00:e6:bd:a9:09:
         32:6e:58:8e:14:2a:f8:4b:66:4c:1b:b3:46:e0:ef:a4:7c:b4:
         c4:19:a1:f2:4a:55:2e:ab:91:84:4f:41:dc:38:3d:dd:00:03:
         f3:6c:9f:b7:2d:4d:5d:3f:74:19:ff:87:cd:6f:05:9e:63:ff:
         8e:46:70:6f:d8:ce:6b:9f:8d:c1:0a:aa:aa:b1:df:99:29:75:
         38:c0:e2:bf:48:96:1f:fc:2a:4e:04:9d:c1:19:cb:c7:36:a4:
         30:e7:e4:3e:f7:94:16:4f:2e:17:ed:18:a6:93:d7:64:ac:bd:
         8d:8b:56:05:c0:f1:ae:6e:d6:34:d5:36:65:6e:a0:3c:d3:43:
         8e:39:e4:3b:de:d1:96:1a:64:40:2f:fb:79:56:21:37:6b:5b:
         de:16:e8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:47:13 2025 by rpki-client