Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS202400/0/323630323a666161383a3434373a3a2f34382d3438203d3e203539373330.roa
File:                     323630323a666161383a3434373a3a2f34382d3438203d3e203539373330.roa (raw, json)
Hash identifier:          gEKZ6/AGm8xCljhvSkYJg8JfygsWovvlTPCyvP+Dseo=
Subject key identifier:   72:6B:D0:79:47:CE:F2:3C:15:07:77:17:59:A9:90:1A:44:9B:A6:60
Certificate issuer:       /CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
Certificate serial:       373F307FDD8E613071CCA09CEC0631D5A972C5A8
Authority key identifier: B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
Subject info access:      rsync://rpki.co/repo/AS202400/0/323630323a666161383a3434373a3a2f34382d3438203d3e203539373330.roa
Signing time:             Tue 17 Oct 2023 14:07:38 +0000
ROA not before:           Tue 17 Oct 2023 14:02:38 +0000
ROA not after:            Tue 15 Oct 2024 14:07:38 +0000
asID:                     59730
IP address blocks:        2602:faa8:447::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 12 Feb 2024 13:08:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3f:30:7f:dd:8e:61:30:71:cc:a0:9c:ec:06:31:d5:a9:72:c5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
        Validity
            Not Before: Oct 17 14:02:38 2023 GMT
            Not After : Oct 15 14:07:38 2024 GMT
        Subject: CN=726BD07947CEF23C1507771759A9901A449BA660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ee:17:86:07:b5:c4:b4:2d:94:7f:f5:13:00:
                    47:06:9f:92:c8:fc:b3:3c:57:50:8a:87:c3:16:06:
                    0b:25:bf:59:e7:95:3a:29:d2:8a:ce:02:fe:44:63:
                    a4:94:3f:4b:f8:c3:7d:c1:c8:34:ad:a9:7b:fb:68:
                    79:06:3a:66:7b:2d:a5:d6:03:aa:53:56:c0:56:92:
                    09:5d:f0:35:11:72:07:f1:11:25:30:c4:41:2b:8b:
                    9f:99:ef:01:63:cb:5e:b1:24:5b:9b:1e:3d:d8:be:
                    29:15:85:a8:41:20:4c:cc:61:f0:af:2c:75:e6:b1:
                    72:2a:63:1d:70:e9:84:3d:a4:11:34:83:ad:32:d4:
                    12:a1:9a:37:31:69:2b:bf:f1:31:65:2c:7b:81:f1:
                    f9:c3:81:19:3f:66:3f:51:55:76:9b:7c:25:14:3c:
                    f3:f9:d7:ad:f1:67:b0:e0:1a:77:76:36:f8:cc:39:
                    ee:c7:ed:c6:02:95:e3:83:6a:74:90:b2:bd:36:c9:
                    5c:a3:5c:32:ca:30:1c:5b:12:71:bb:38:a1:5d:a9:
                    63:d1:08:c4:9a:f8:fc:81:58:09:4f:4a:ab:c0:64:
                    5d:7e:e4:ef:10:44:63:67:56:4b:44:b9:b7:16:5c:
                    59:d1:69:a4:7c:72:f2:49:c8:f3:29:6a:e8:1d:c0:
                    eb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6B:D0:79:47:CE:F2:3C:15:07:77:17:59:A9:90:1A:44:9B:A6:60
            X509v3 Authority Key Identifier:
                keyid:B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS202400/0/323630323a666161383a3434373a3a2f34382d3438203d3e203539373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8:447::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:9e:63:65:90:7d:45:bc:03:8b:d4:f2:3d:86:7e:9f:10:47:
         8b:0b:42:1d:bd:a0:4e:67:af:42:e1:5e:50:5c:67:68:6e:f4:
         70:09:26:ac:5d:08:35:16:c9:3e:3e:28:ec:06:00:64:2c:63:
         50:76:86:f0:d3:20:b5:89:05:d5:73:ee:3b:25:21:a9:54:7e:
         1c:83:f2:60:7c:b9:41:5f:2a:b8:26:4c:d2:ff:12:c6:58:d9:
         1f:61:e3:dc:cc:be:34:18:bd:4b:89:26:e7:52:09:be:b0:af:
         55:26:0c:7e:e6:bd:b0:c9:3a:d5:b4:79:eb:d0:bd:2e:fd:e9:
         c7:40:cb:f6:7c:e4:3d:a3:f7:48:39:ef:eb:f3:54:d5:10:6d:
         53:63:fe:a0:2c:8d:fc:b8:4c:99:27:52:d2:8a:00:7e:e5:f6:
         01:c0:9b:8d:15:92:92:15:1b:cd:d4:96:db:86:da:52:52:17:
         36:bb:c7:e6:1f:3b:8c:fc:80:94:88:98:0b:a2:d4:dd:1b:00:
         62:74:44:bd:d1:b7:f0:30:07:69:80:22:a4:35:05:90:d4:e3:
         5f:1e:c6:00:e6:7e:ee:21:52:a4:8d:28:45:08:5f:90:46:4d:
         45:1e:d3:72:17:47:8a:e3:10:3f:2d:33:eb:07:42:3d:03:60:
         88:41:8c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----