Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS202400/0/323630323a666161383a3230333a3a2f34382d3438203d3e203534323836.roa
File:                     323630323a666161383a3230333a3a2f34382d3438203d3e203534323836.roa (raw, json)
Hash identifier:          bA5p2qEyXQTWTivvljXNXSXHItaIxKJwHXecT1tsmaA=
Subject key identifier:   A8:34:38:4C:5D:E2:97:A3:3E:B7:AC:08:A0:DA:3B:0C:F5:9B:14:F1
Certificate issuer:       /CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
Certificate serial:       12BC6FDDCAFA0C6EAD50D2392315305D1A4104D5
Authority key identifier: B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
Subject info access:      rsync://rpki.co/repo/AS202400/0/323630323a666161383a3230333a3a2f34382d3438203d3e203534323836.roa
Signing time:             Mon 12 Feb 2024 12:59:44 +0000
ROA not before:           Mon 12 Feb 2024 12:54:44 +0000
ROA not after:            Mon 10 Feb 2025 12:59:44 +0000
asID:                     54286
IP address blocks:        2602:faa8:203::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 23 Mar 2024 11:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:bc:6f:dd:ca:fa:0c:6e:ad:50:d2:39:23:15:30:5d:1a:41:04:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
        Validity
            Not Before: Feb 12 12:54:44 2024 GMT
            Not After : Feb 10 12:59:44 2025 GMT
        Subject: CN=A834384C5DE297A33EB7AC08A0DA3B0CF59B14F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f5:f1:18:aa:bb:45:dd:74:be:ac:28:47:67:
                    49:ff:cd:eb:e7:b8:97:e4:9f:12:47:44:ea:63:4a:
                    ca:20:d2:0b:1a:5c:69:44:5c:10:1f:81:ee:b0:c6:
                    dc:fb:70:a4:ca:a7:2a:19:b5:de:d1:5e:b0:bf:91:
                    80:5e:f3:b6:e4:ce:8a:95:7b:4e:e1:e7:b4:2d:ff:
                    c1:61:9f:c2:e9:2b:44:0f:9a:fe:02:cc:5b:02:02:
                    89:8d:8d:8b:8a:5f:37:4d:b6:f7:62:c1:d8:54:cc:
                    14:25:61:1e:9f:79:c8:45:c2:25:67:59:61:3d:0c:
                    d1:47:a8:1a:5f:87:d5:b9:54:d1:fe:19:87:88:fb:
                    d7:05:47:78:1b:ec:1e:5e:51:67:88:e0:6a:b6:01:
                    f3:d5:18:09:47:bf:94:d5:2a:f1:52:3a:4f:92:80:
                    33:42:56:8d:b1:53:f9:b6:8d:d7:f3:1c:91:23:c7:
                    25:2d:8d:a7:60:6a:b8:18:1c:5f:ad:67:8f:ab:39:
                    2b:d2:f7:0e:dd:67:98:97:6b:1f:f2:07:ef:22:31:
                    be:20:a9:bd:96:a5:c9:7f:fb:c1:3c:07:28:d7:54:
                    e0:f8:70:1c:78:71:a6:be:b8:c8:59:51:5d:36:53:
                    7c:0e:8c:47:57:d3:c5:80:da:63:e2:3e:4f:a2:37:
                    d9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:34:38:4C:5D:E2:97:A3:3E:B7:AC:08:A0:DA:3B:0C:F5:9B:14:F1
            X509v3 Authority Key Identifier:
                keyid:B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS202400/0/323630323a666161383a3230333a3a2f34382d3438203d3e203534323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8:203::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:b7:74:c3:d5:0f:17:98:91:66:26:dd:30:8a:c5:70:86:0f:
         63:14:13:cb:d0:30:53:ae:28:7f:f7:97:22:96:e0:9a:d0:37:
         66:7e:79:f6:b7:76:0e:f6:bc:a7:6d:aa:cb:a3:95:36:3e:db:
         27:ee:9e:ea:4e:d3:68:0f:ca:64:28:da:ca:19:3a:6f:81:a3:
         ab:85:ce:98:e2:3d:6c:23:d0:ee:90:af:81:11:b8:42:80:ea:
         03:59:f7:0c:d3:86:58:b7:cf:13:fd:52:2d:47:6c:33:4c:d7:
         ad:4c:40:f6:d9:c8:f0:76:f8:df:3b:ae:21:a7:68:82:5c:99:
         a6:92:3e:67:a9:fa:9d:f0:59:97:12:f4:7c:2e:89:38:68:eb:
         10:72:3e:72:e2:31:a3:7d:7c:16:88:10:02:9e:2e:33:a4:dc:
         20:89:b5:70:52:d6:1e:57:59:72:4d:82:97:64:42:ef:2e:8c:
         b8:cc:9a:e7:8c:a7:b3:b4:ac:e2:8d:09:53:9a:48:b2:3d:2c:
         4c:fc:4c:18:f7:38:84:69:c8:e3:9f:09:7d:60:e5:19:93:8a:
         af:9d:83:49:39:60:5a:7f:8f:ca:d1:fc:83:06:86:89:d0:dc:
         a7:c8:51:d5:40:36:08:9e:0a:49:b1:26:50:a5:2d:03:3d:b6:
         90:bf:28:5a
-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgIUErxv3cr6DG6tUNI5IxUwXRpBBNUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMmE1YWY3NGRiYjlkNGQ0MzdjZjNhYzEzMjA2MDY3Y2Fh
MTFiMTc5ODMxOTYyM2YyMWYwHhcNMjQwMjEyMTI1NDQ0WhcNMjUwMjEwMTI1OTQ0
WjAzMTEwLwYDVQQDEyhBODM0Mzg0QzVERTI5N0EzM0VCN0FDMDhBMERBM0IwQ0Y1
OUIxNEYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfXxGKq7Rd10
vqwoR2dJ/83r57iX5J8SR0TqY0rKINILGlxpRFwQH4HusMbc+3CkyqcqGbXe0V6w
v5GAXvO25M6KlXtO4ee0Lf/BYZ/C6StED5r+AsxbAgKJjY2Lil83Tbb3YsHYVMwU
JWEen3nIRcIlZ1lhPQzRR6gaX4fVuVTR/hmHiPvXBUd4G+weXlFniOBqtgHz1RgJ
R7+U1SrxUjpPkoAzQlaNsVP5to3X8xyRI8clLY2nYGq4GBxfrWePqzkr0vcO3WeY
l2sf8gfvIjG+IKm9lqXJf/vBPAco11Tg+HAceHGmvrjIWVFdNlN8DoxHV9PFgNpj
4j5PojfZuwIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFKg0OExd4pejPresCKDaOwz1
mxTxMB8GA1UdIwQYMBaAFLC+er2+s+AUfQgSK2mcR4yZobD/MA4GA1UdDwEB/wQE
AwIHgDBdBgNVHR8EVjBUMFKgUKBOhkxyc3luYzovL3Jwa2kuY28vcmVwby9BUzIw
MjQwMC8wL0IwQkU3QUJEQkVCM0UwMTQ3RDA4MTIyQjY5OUM0NzhDOTlBMUIwRkYu
Y3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jw
a2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgw
YS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3
LTFiZTIwNDkzM2FlNS83MGY1ZDgwYy05ZGFhLTRmNmYtOGY1OC0xODFjNWYwYzRi
MGEvMmE1YWY3NGRiYjlkNGQ0MzdjZjNhYzEzMjA2MDY3Y2FhMTFiMTc5ODMxOTYy
M2YyMWYuY2VyMHwGCCsGAQUFBwELBHAwbjBsBggrBgEFBQcwC4ZgcnN5bmM6Ly9y
cGtpLmNvL3JlcG8vQVMyMDI0MDAvMC8zMjM2MzAzMjNhNjY2MTYxMzgzYTMyMzAz
MzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzQzMjM4MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAm
AvqoAgMwDQYJKoZIhvcNAQELBQADggEBAE63dMPVDxeYkWYm3TCKxXCGD2MUE8vQ
MFOuKH/3lyKW4JrQN2Z+efa3dg72vKdtqsujlTY+2yfunupO02gPymQo2soZOm+B
o6uFzpjiPWwj0O6Qr4ERuEKA6gNZ9wzThli3zxP9Ui1HbDNM161MQPbZyPB2+N87
riGnaIJcmaaSPmep+p3wWZcS9HwuiTho6xByPnLiMaN9fBaIEAKeLjOk3CCJtXBS
1h5XWXJNgpdkQu8ujLjMmueMp7O0rOKNCVOaSLI9LEz8TBj3OIRpyOOfCX1g5RmT
iq+dg0k5YFp/j8rR/IMGhonQ3KfIUdVANgieCkmxJlClLQM9tpC/KFo=
-----END CERTIFICATE-----