Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS202400/0/323630323a666161383a3430343a3a2f34382d3438203d3e20313531313838.roa
File:                     323630323a666161383a3430343a3a2f34382d3438203d3e20313531313838.roa (raw, json)
Hash identifier:          cx25x4Bn9r8zlX2vlQZmKs9ZDMA6RSSIdbRM4i3x8V8=
Subject key identifier:   F0:E3:AB:21:E7:1D:3B:50:14:7A:86:21:C0:7C:1B:D3:A1:83:9B:6F
Certificate issuer:       /CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
Certificate serial:       216F893E12BE23DD256AD1072ECBF64860AB1EE6
Authority key identifier: B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
Subject info access:      rsync://rpki.co/repo/AS202400/0/323630323a666161383a3430343a3a2f34382d3438203d3e20313531313838.roa
Signing time:             Tue 13 Jun 2023 12:37:33 +0000
ROA not before:           Tue 13 Jun 2023 12:32:33 +0000
ROA not after:            Tue 11 Jun 2024 12:37:33 +0000
asID:                     151188
IP address blocks:        2602:faa8:404::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 24 Mar 2024 13:20:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:6f:89:3e:12:be:23:dd:25:6a:d1:07:2e:cb:f6:48:60:ab:1e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
        Validity
            Not Before: Jun 13 12:32:33 2023 GMT
            Not After : Jun 11 12:37:33 2024 GMT
        Subject: CN=F0E3AB21E71D3B50147A8621C07C1BD3A1839B6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:88:6c:c4:4b:93:42:eb:dc:46:fc:6e:89:df:
                    5f:94:f3:f0:4e:50:86:45:37:33:79:cf:f6:69:e4:
                    f6:60:10:c0:b3:54:2b:35:d0:59:bd:58:c3:a5:f8:
                    eb:4d:d6:31:f9:c8:d3:70:24:dd:34:a4:90:6b:35:
                    2f:e3:89:f3:b1:5d:6a:2e:14:b7:35:1a:68:ea:e9:
                    f6:65:36:c3:b6:17:1b:dc:19:ea:65:0c:cc:6f:db:
                    79:2f:d8:75:ac:3c:93:d8:c4:dc:65:5b:f5:f2:aa:
                    f1:91:81:8c:2c:a1:07:fe:c7:e6:5a:20:e6:e3:50:
                    5a:9f:dd:39:cb:1c:61:9b:ee:8a:78:f9:d7:92:58:
                    2c:7e:c1:f8:84:2f:5b:1d:2b:d0:8a:1c:30:21:9a:
                    37:9e:1e:16:de:17:ae:6b:d7:e5:de:cf:16:e6:99:
                    b5:30:dd:ac:eb:c6:82:ee:49:c5:65:b6:57:40:b1:
                    92:82:fc:41:f2:fb:31:08:e0:af:02:75:d8:03:0e:
                    ed:0a:91:bd:ef:bf:32:8b:0b:ad:96:89:b2:7d:b7:
                    59:73:c4:2a:33:07:b9:a3:9b:54:66:8b:a6:57:17:
                    96:5f:05:4e:e2:ff:61:d6:7a:a7:c2:fe:56:67:cd:
                    dc:89:fa:7e:b9:eb:79:7d:2d:26:be:f9:ac:89:e0:
                    61:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E3:AB:21:E7:1D:3B:50:14:7A:86:21:C0:7C:1B:D3:A1:83:9B:6F
            X509v3 Authority Key Identifier:
                keyid:B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS202400/0/323630323a666161383a3430343a3a2f34382d3438203d3e20313531313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8:404::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:c0:1b:a2:7b:21:50:30:28:b2:c8:25:22:c0:13:21:20:61:
         3d:61:c0:75:4b:a4:a3:bc:b4:e6:43:a2:b5:84:84:6a:81:b9:
         78:06:43:47:dc:47:92:70:26:f9:2f:97:a6:c5:6e:e1:41:56:
         4f:9a:24:a7:d1:7c:77:27:f3:80:16:c8:fd:b4:f0:b2:90:70:
         8c:bb:47:c7:a2:b5:2d:18:9d:2c:fb:eb:88:88:eb:33:22:d3:
         95:17:72:39:ea:cf:69:94:f3:a4:63:3c:44:b7:a8:c3:dd:0b:
         06:34:9d:52:0e:85:93:0f:d8:48:96:9b:9d:eb:51:bd:95:52:
         68:97:6e:f4:94:3e:2c:2f:af:32:15:85:87:16:30:1a:f0:a4:
         07:19:5b:ce:e2:fc:fc:b8:6a:0d:80:72:b6:d6:9d:5f:a5:bf:
         a4:4d:76:e6:a2:ea:20:72:83:f6:66:c3:d7:fb:32:f7:5f:29:
         76:2e:85:e7:c6:5e:9c:6d:91:24:82:52:78:ea:ad:3d:96:86:
         1d:66:0f:79:7d:dd:44:37:0e:82:c9:a8:57:eb:9a:ba:42:af:
         f9:c0:5d:9f:49:05:01:7b:b5:17:01:97:a5:9b:f3:68:81:fe:
         c4:f0:4c:fe:52:5d:84:e3:67:39:9a:e0:27:5c:71:37:20:a3:
         39:92:3d:61
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIUIW+JPhK+I90latEHLsv2SGCrHuYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMmE1YWY3NGRiYjlkNGQ0MzdjZjNhYzEzMjA2MDY3Y2Fh
MTFiMTc5ODMxOTYyM2YyMWYwHhcNMjMwNjEzMTIzMjMzWhcNMjQwNjExMTIzNzMz
WjAzMTEwLwYDVQQDEyhGMEUzQUIyMUU3MUQzQjUwMTQ3QTg2MjFDMDdDMUJEM0Ex
ODM5QjZGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYhsxEuTQuvc
Rvxuid9flPPwTlCGRTczec/2aeT2YBDAs1QrNdBZvVjDpfjrTdYx+cjTcCTdNKSQ
azUv44nzsV1qLhS3NRpo6un2ZTbDthcb3BnqZQzMb9t5L9h1rDyT2MTcZVv18qrx
kYGMLKEH/sfmWiDm41Ban905yxxhm+6KePnXklgsfsH4hC9bHSvQihwwIZo3nh4W
3heua9fl3s8W5pm1MN2s68aC7knFZbZXQLGSgvxB8vsxCOCvAnXYAw7tCpG9778y
iwutlomyfbdZc8QqMwe5o5tUZoumVxeWXwVO4v9h1nqnwv5WZ83cifp+uet5fS0m
vvmsieBhMQIDAQABo4ICZzCCAmMwHQYDVR0OBBYEFPDjqyHnHTtQFHqGIcB8G9Oh
g5tvMB8GA1UdIwQYMBaAFLC+er2+s+AUfQgSK2mcR4yZobD/MA4GA1UdDwEB/wQE
AwIHgDBdBgNVHR8EVjBUMFKgUKBOhkxyc3luYzovL3Jwa2kuY28vcmVwby9BUzIw
MjQwMC8wL0IwQkU3QUJEQkVCM0UwMTQ3RDA4MTIyQjY5OUM0NzhDOTlBMUIwRkYu
Y3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jw
a2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgw
YS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3
LTFiZTIwNDkzM2FlNS83MGY1ZDgwYy05ZGFhLTRmNmYtOGY1OC0xODFjNWYwYzRi
MGEvMmE1YWY3NGRiYjlkNGQ0MzdjZjNhYzEzMjA2MDY3Y2FhMTFiMTc5ODMxOTYy
M2YyMWYuY2VyMH4GCCsGAQUFBwELBHIwcDBuBggrBgEFBQcwC4ZicnN5bmM6Ly9y
cGtpLmNvL3JlcG8vQVMyMDI0MDAvMC8zMjM2MzAzMjNhNjY2MTYxMzgzYTM0MzAz
NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzUzMTMxMzgzOC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACYC+qgEBDANBgkqhkiG9w0BAQsFAAOCAQEAhcAbonshUDAossglIsATISBhPWHA
dUuko7y05kOitYSEaoG5eAZDR9xHknAm+S+XpsVu4UFWT5okp9F8dyfzgBbI/bTw
spBwjLtHx6K1LRidLPvriIjrMyLTlRdyOerPaZTzpGM8RLeow90LBjSdUg6Fkw/Y
SJabnetRvZVSaJdu9JQ+LC+vMhWFhxYwGvCkBxlbzuL8/LhqDYByttadX6W/pE12
5qLqIHKD9mbD1/sy918pdi6F58ZenG2RJIJSeOqtPZaGHWYPeX3dRDcOgsmoV+ua
ukKv+cBdn0kFAXu1FwGXpZvzaIH+xPBM/lJdhONnOZrgJ1xxNyCjOZI9YQ==
-----END CERTIFICATE-----