Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS202400/0/323630323a666161383a3430353a3a2f34382d3438203d3e203539373330.roa
File:                     323630323a666161383a3430353a3a2f34382d3438203d3e203539373330.roa (raw, json)
Hash identifier:          fSxiRAaCABPQWzuPz7zd/jOca6upvdGw51/7Sgc+6pY=
Subject key identifier:   5A:24:84:C2:42:2E:C9:53:15:C2:81:3C:DC:67:6D:02:42:C9:11:88
Certificate issuer:       /CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
Certificate serial:       105A28ADEB69D7C73696A08C0DF08CAB2CAD000C
Authority key identifier: B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
Subject info access:      rsync://rpki.co/repo/AS202400/0/323630323a666161383a3430353a3a2f34382d3438203d3e203539373330.roa
Signing time:             Fri 22 Sep 2023 09:27:44 +0000
ROA not before:           Fri 22 Sep 2023 09:22:44 +0000
ROA not after:            Fri 20 Sep 2024 09:27:44 +0000
asID:                     59730
IP address blocks:        2602:faa8:405::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 12 Feb 2024 13:08:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5a:28:ad:eb:69:d7:c7:36:96:a0:8c:0d:f0:8c:ab:2c:ad:00:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
        Validity
            Not Before: Sep 22 09:22:44 2023 GMT
            Not After : Sep 20 09:27:44 2024 GMT
        Subject: CN=5A2484C2422EC95315C2813CDC676D0242C91188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a3:0e:c5:8d:6c:bf:06:8e:a8:b5:31:7b:9c:
                    32:af:8b:8d:34:d6:f9:5d:2e:4b:48:c3:8c:be:d0:
                    45:a3:2e:96:14:7e:4e:ba:ef:cd:2c:b4:2f:75:ce:
                    f8:0b:bd:d8:47:38:72:c5:6f:88:0b:54:91:93:12:
                    10:e8:52:f8:62:05:6e:36:aa:16:41:0f:54:8e:a5:
                    33:01:ba:a4:8e:29:7d:37:a4:4a:60:e7:75:14:97:
                    3a:60:cb:9a:e1:6c:7d:a0:f7:7c:dd:61:95:d8:7f:
                    63:e0:61:8e:45:c4:a1:78:6c:54:2b:f8:fe:06:58:
                    f6:86:ee:4d:de:61:08:5f:95:f8:db:6b:41:1c:9b:
                    94:1d:25:fa:6f:da:c3:2c:df:a7:fc:27:67:9d:19:
                    1a:da:f2:03:e7:2b:86:aa:70:7a:10:52:5b:67:28:
                    0f:63:0d:1d:88:be:65:96:4f:f3:3a:12:cd:ef:9d:
                    86:14:e6:c6:b9:e1:7a:68:98:54:ac:f0:d2:ad:f4:
                    6f:c3:3f:41:fe:26:66:1d:86:85:05:8b:a5:f0:11:
                    b1:95:67:c5:cd:0b:69:32:7b:e6:16:76:59:4c:48:
                    25:a0:dc:88:90:3d:b2:6f:02:f4:c6:16:5c:7b:3d:
                    a1:8d:a5:5c:ea:69:e0:39:e3:9a:10:16:58:b3:a8:
                    15:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:24:84:C2:42:2E:C9:53:15:C2:81:3C:DC:67:6D:02:42:C9:11:88
            X509v3 Authority Key Identifier:
                keyid:B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS202400/0/323630323a666161383a3430353a3a2f34382d3438203d3e203539373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8:405::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:84:f2:eb:67:72:f3:96:67:9f:55:d4:89:ff:85:07:26:af:
         b0:c5:80:56:c0:a9:30:2a:81:ec:9b:18:2b:b0:50:11:d4:51:
         0e:be:ba:bc:31:8f:b3:46:5f:fb:6b:e6:85:88:94:33:87:df:
         01:e2:14:a7:53:d0:40:36:a1:3b:07:3c:f0:1c:b0:f4:44:4f:
         c1:2e:12:1b:59:87:40:77:0e:0c:0d:a6:3e:3e:04:f9:1a:bf:
         ac:c3:72:97:eb:17:dd:0d:6d:d4:98:cf:17:79:4c:38:f0:2a:
         5f:e5:89:a2:4d:c2:b6:72:9e:aa:97:3c:ca:c0:a0:67:d3:b1:
         34:16:bb:75:65:a0:d2:c2:20:02:35:3d:c6:8b:4a:66:21:b1:
         c5:fc:51:c0:ef:c4:e6:db:15:3b:65:7f:57:e4:a3:e1:26:a3:
         b5:46:3c:a6:45:3c:95:66:90:ad:ef:3c:f1:5a:c5:7e:58:41:
         83:27:ab:2b:0e:96:23:45:97:9b:0c:ac:c9:4e:ff:d4:d7:98:
         fe:ea:12:49:6f:a5:ca:f4:bb:0a:bf:1e:fa:7b:22:51:ee:db:
         bf:06:1f:9b:b4:81:fd:31:f3:31:2c:96:17:f3:a5:b7:54:1d:
         82:bb:8d:da:b4:91:b5:ed:ff:10:09:ad:f7:e5:49:11:1e:a9:
         c1:a7:b3:7a
-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgIUEFooretp18c2lqCMDfCMqyytAAwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMmE1YWY3NGRiYjlkNGQ0MzdjZjNhYzEzMjA2MDY3Y2Fh
MTFiMTc5ODMxOTYyM2YyMWYwHhcNMjMwOTIyMDkyMjQ0WhcNMjQwOTIwMDkyNzQ0
WjAzMTEwLwYDVQQDEyg1QTI0ODRDMjQyMkVDOTUzMTVDMjgxM0NEQzY3NkQwMjQy
QzkxMTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6MOxY1svwaO
qLUxe5wyr4uNNNb5XS5LSMOMvtBFoy6WFH5Ouu/NLLQvdc74C73YRzhyxW+IC1SR
kxIQ6FL4YgVuNqoWQQ9UjqUzAbqkjil9N6RKYOd1FJc6YMua4Wx9oPd83WGV2H9j
4GGORcSheGxUK/j+Blj2hu5N3mEIX5X422tBHJuUHSX6b9rDLN+n/CdnnRka2vID
5yuGqnB6EFJbZygPYw0diL5llk/zOhLN752GFObGueF6aJhUrPDSrfRvwz9B/iZm
HYaFBYul8BGxlWfFzQtpMnvmFnZZTEgloNyIkD2ybwL0xhZcez2hjaVc6mngOeOa
EBZYs6gVWQIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFFokhMJCLslTFcKBPNxnbQJC
yRGIMB8GA1UdIwQYMBaAFLC+er2+s+AUfQgSK2mcR4yZobD/MA4GA1UdDwEB/wQE
AwIHgDBdBgNVHR8EVjBUMFKgUKBOhkxyc3luYzovL3Jwa2kuY28vcmVwby9BUzIw
MjQwMC8wL0IwQkU3QUJEQkVCM0UwMTQ3RDA4MTIyQjY5OUM0NzhDOTlBMUIwRkYu
Y3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jw
a2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgw
YS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3
LTFiZTIwNDkzM2FlNS83MGY1ZDgwYy05ZGFhLTRmNmYtOGY1OC0xODFjNWYwYzRi
MGEvMmE1YWY3NGRiYjlkNGQ0MzdjZjNhYzEzMjA2MDY3Y2FhMTFiMTc5ODMxOTYy
M2YyMWYuY2VyMHwGCCsGAQUFBwELBHAwbjBsBggrBgEFBQcwC4ZgcnN5bmM6Ly9y
cGtpLmNvL3JlcG8vQVMyMDI0MDAvMC8zMjM2MzAzMjNhNjY2MTYxMzgzYTM0MzAz
NTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzkzNzMzMzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAm
AvqoBAUwDQYJKoZIhvcNAQELBQADggEBACGE8utncvOWZ59V1In/hQcmr7DFgFbA
qTAqgeybGCuwUBHUUQ6+urwxj7NGX/tr5oWIlDOH3wHiFKdT0EA2oTsHPPAcsPRE
T8EuEhtZh0B3DgwNpj4+BPkav6zDcpfrF90NbdSYzxd5TDjwKl/liaJNwrZynqqX
PMrAoGfTsTQWu3VloNLCIAI1PcaLSmYhscX8UcDvxObbFTtlf1fko+Emo7VGPKZF
PJVmkK3vPPFaxX5YQYMnqysOliNFl5sMrMlO/9TXmP7qEklvpcr0uwq/Hvp7IlHu
278GH5u0gf0x8zEslhfzpbdUHYK7jdq0kbXt/xAJrfflSREeqcGns3o=
-----END CERTIFICATE-----