Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a39333a3a2f34382d3438203d3e203136393039.roa
File:                     323630323a663738613a39333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          Q1oQuqPrL9rlWVc9U2wE34+JJKQtnJp+Dt5O6gNkoXE=
Subject key identifier:   6A:CE:48:53:C5:2D:F5:79:95:53:B8:9C:3C:55:37:C0:A4:A8:8C:82
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       1B773A83A3FAFE6627090A39CCC0A5EF1FE8E9E0
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a39333a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 19 Dec 2024 14:16:36 +0000
ROA not before:           Thu 19 Dec 2024 14:11:36 +0000
ROA not after:            Thu 18 Dec 2025 14:16:36 +0000
asID:                     16909
IP address blocks:        2602:f78a:93::/48 maxlen: 48
Validation:               Failed, certificate revoked on Sat 01 Feb 2025 22:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:77:3a:83:a3:fa:fe:66:27:09:0a:39:cc:c0:a5:ef:1f:e8:e9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Dec 19 14:11:36 2024 GMT
            Not After : Dec 18 14:16:36 2025 GMT
        Subject: CN=6ACE4853C52DF5799553B89C3C5537C0A4A88C82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:99:20:99:38:64:0e:6d:cd:d7:8b:25:96:8b:
                    2d:69:b1:63:57:ed:88:65:0d:bc:70:61:9e:f8:dc:
                    1d:7d:db:65:99:ee:2f:63:68:29:b3:d3:17:ec:7b:
                    45:9a:51:68:aa:50:cc:00:4a:e2:2d:da:65:da:73:
                    5a:6f:62:bb:20:1f:e2:ed:a5:6b:df:21:f6:a8:81:
                    8e:47:e1:da:80:4e:f0:0b:22:8c:23:db:f2:c4:bb:
                    d1:81:bf:4b:c6:31:94:39:f3:01:6b:58:f8:db:74:
                    c3:d0:cd:ac:14:cc:0e:94:9b:b2:86:63:69:8d:2a:
                    26:13:fc:44:5c:77:e0:45:54:8c:e0:12:97:38:6d:
                    cb:53:62:b7:0b:cb:ef:cf:63:f6:04:a7:46:68:0d:
                    1a:ba:8d:60:f3:ec:db:f9:bd:6d:51:18:fa:bd:a2:
                    ce:2f:6e:b1:cd:3c:d4:ab:44:2f:a7:69:80:ef:bf:
                    f3:99:75:91:41:a9:c1:67:3f:83:bd:7a:36:ac:24:
                    4e:82:e0:db:bb:fd:1a:ec:79:d4:60:bc:4a:04:37:
                    bf:18:bc:11:eb:38:8f:88:94:90:5c:db:55:36:6d:
                    a6:3d:a9:9e:f5:f2:d8:de:e6:0e:fa:75:6f:de:26:
                    4f:6a:b1:99:06:b0:88:c6:ab:6f:e6:71:6c:45:9c:
                    b0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CE:48:53:C5:2D:F5:79:95:53:B8:9C:3C:55:37:C0:A4:A8:8C:82
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a39333a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a:93::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:df:b8:e0:09:64:70:90:5c:8d:68:6e:d3:ee:06:d0:f6:98:
         78:b0:cc:de:4c:45:85:5c:7b:ad:70:9b:00:12:09:0e:21:2d:
         7f:05:88:a0:fa:e0:37:41:8b:d0:bb:02:a6:59:02:40:d5:be:
         4f:82:13:c4:00:a9:ad:22:06:96:c2:60:2b:31:f5:f9:17:4b:
         33:c1:66:bc:fd:4c:1c:45:fb:20:3a:11:62:74:c2:09:74:c6:
         54:ef:00:50:7b:29:8a:b4:b1:52:ae:5b:dd:fc:b2:0e:a2:ab:
         14:dd:16:65:a6:98:d5:7c:16:37:84:d1:9c:6c:b8:96:f6:3f:
         0b:24:6b:49:a8:7b:b0:d4:52:e2:7e:a0:9b:11:76:db:03:1d:
         cc:89:0c:d4:4d:28:39:5a:78:27:08:d7:99:2c:d9:74:11:b1:
         37:9f:59:7d:dd:0b:1a:ec:19:f3:2c:49:70:68:01:ed:9d:6a:
         96:6c:0d:fe:12:d3:71:42:62:0c:7a:ff:4f:b4:f8:f4:1c:54:
         bd:82:ee:83:13:4f:05:59:ff:76:29:ad:84:c6:e8:1d:d6:08:
         a3:33:d5:08:67:fb:d4:78:da:b5:86:52:0e:7f:07:64:78:26:
         6d:39:b5:92:f8:01:8c:d9:92:fc:18:4d:50:ab:2d:f4:f6:d7:
         07:ba:ae:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----