Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a39313a3a2f34382d3438203d3e203136393039.roa
File:                     323630323a663738613a39313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          c/5JE3miK5+2Nih7PuE1KJkOvHD9yqayM8gdHWSo+3g=
Subject key identifier:   32:03:1B:7D:9C:7B:1F:74:D8:6D:49:C9:7E:68:7D:28:5C:2F:05:DB
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       26FEA48BA039CCADE6A2BB1968977DC781194E54
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a39313a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 19 Dec 2024 14:16:32 +0000
ROA not before:           Thu 19 Dec 2024 14:11:32 +0000
ROA not after:            Thu 18 Dec 2025 14:16:32 +0000
asID:                     16909
IP address blocks:        2602:f78a:91::/48 maxlen: 48
Validation:               Failed, certificate revoked on Sat 01 Feb 2025 22:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:fe:a4:8b:a0:39:cc:ad:e6:a2:bb:19:68:97:7d:c7:81:19:4e:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Dec 19 14:11:32 2024 GMT
            Not After : Dec 18 14:16:32 2025 GMT
        Subject: CN=32031B7D9C7B1F74D86D49C97E687D285C2F05DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:05:4e:46:52:0b:c1:ec:97:0d:8e:13:34:db:
                    b8:bc:b7:30:5d:79:70:88:ea:f8:4c:93:43:cb:44:
                    c3:0d:fa:95:9a:c9:3e:03:7e:e0:36:2e:27:7d:79:
                    14:cd:8a:d4:1c:d3:17:ed:d3:0f:12:a8:35:c5:65:
                    44:24:50:16:57:e6:ad:db:28:25:51:0f:3f:e5:09:
                    23:d0:d6:08:0d:ea:49:1d:66:5b:4a:7c:c3:61:cc:
                    52:17:1c:6a:ab:c0:19:0d:c2:8f:27:d4:9f:24:a8:
                    50:7b:17:97:02:ba:77:49:9d:c6:30:e6:09:b3:75:
                    e1:1a:59:2c:ff:a9:b3:b1:92:f2:0c:3d:20:c5:3c:
                    9a:e5:ab:21:b0:fa:20:e8:cf:9a:b4:76:46:e5:5e:
                    e6:a1:2c:8b:e9:d8:f4:34:e0:58:c5:e2:1f:a8:f8:
                    ff:e7:52:49:30:07:b3:fa:e9:79:0d:b8:37:1e:e4:
                    ed:cd:a1:f1:cd:3c:17:45:ae:b1:ef:2d:5d:49:40:
                    a0:74:8f:40:07:8b:e2:ba:36:38:0e:38:c2:5f:f7:
                    98:05:78:34:ec:b3:0c:28:47:5b:9f:24:00:cc:9b:
                    47:e0:4a:44:0e:f1:37:63:db:bb:fd:d9:d0:f9:aa:
                    ac:99:97:5d:86:72:a5:62:08:7b:53:01:fc:f7:99:
                    ca:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:03:1B:7D:9C:7B:1F:74:D8:6D:49:C9:7E:68:7D:28:5C:2F:05:DB
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a39313a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a:91::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:44:22:3d:39:22:f7:33:74:88:22:6e:fe:04:2a:5f:bb:74:
         ed:c7:01:9e:5e:74:73:39:06:ff:6d:6e:95:9c:9f:9f:66:cd:
         1d:e3:06:42:06:20:b8:e4:56:3c:43:77:f4:93:e9:40:8c:1d:
         fe:37:9c:da:82:56:10:dc:a4:ba:e9:b8:c1:e2:a0:fc:8b:48:
         c9:f9:99:2b:52:f9:79:f8:af:15:9e:a5:cf:09:4f:5a:d1:2a:
         e9:85:ff:af:a7:11:65:67:2c:ca:f1:f9:06:04:b1:a0:9a:fa:
         98:0c:f4:52:01:59:2c:39:58:e1:a2:4b:56:41:d9:d7:b9:98:
         cc:25:9a:23:2e:4b:62:90:8b:63:b1:0a:91:3e:0b:44:af:61:
         8c:b8:6b:94:63:79:73:6f:f1:a5:1d:79:4d:a2:05:a4:7d:15:
         8b:eb:d8:e9:f7:9a:f4:6b:97:b2:18:e3:ec:70:bd:41:ac:41:
         9a:5c:55:e0:7c:11:17:a4:98:b8:9b:50:a7:01:fc:55:9d:43:
         fc:4b:58:3f:81:5b:60:e8:e5:2b:98:fa:b3:bf:e3:c7:f5:d4:
         92:a4:ab:ab:9d:7e:d8:dd:22:7c:b2:6f:59:ff:6e:b3:da:cb:
         9a:d0:17:1b:ed:b1:06:ea:1f:1b:09:8b:3b:79:a9:60:42:6a:
         b0:54:2d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----