Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS202400/0/323630323a666161383a3a2f34302d3430203d3e20323032343030.roa
File:                     323630323a666161383a3a2f34302d3430203d3e20323032343030.roa (raw, json)
Hash identifier:          hmTxoFSL0B/V5d7xoqgWNVIGjHtlZAwomeQ8+B5C8Yw=
Subject key identifier:   60:BE:A1:D5:E8:7D:21:DA:D3:90:F3:06:4C:1A:EC:36:F5:9D:2F:CA
Certificate issuer:       /CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
Certificate serial:       2119BBB84DEB3EF42556AC5F13E8CC539E944431
Authority key identifier: B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
Subject info access:      rsync://rpki.co/repo/AS202400/0/323630323a666161383a3a2f34302d3430203d3e20323032343030.roa
Signing time:             Thu 13 Apr 2023 15:49:27 +0000
ROA not before:           Thu 13 Apr 2023 15:44:27 +0000
ROA not after:            Thu 11 Apr 2024 15:49:27 +0000
asID:                     202400
IP address blocks:        2602:faa8::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:19:bb:b8:4d:eb:3e:f4:25:56:ac:5f:13:e8:cc:53:9e:94:44:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
        Validity
            Not Before: Apr 13 15:44:27 2023 GMT
            Not After : Apr 11 15:49:27 2024 GMT
        Subject: CN=60BEA1D5E87D21DAD390F3064C1AEC36F59D2FCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:63:80:e8:49:40:fe:d8:e9:0a:dc:3b:01:76:
                    41:6e:64:ad:89:68:3d:99:c4:00:ea:0b:89:ba:1f:
                    ee:fc:8c:27:d2:db:ba:c1:c1:2c:e7:0e:c6:02:04:
                    f0:27:93:21:6a:36:47:46:db:f1:33:67:63:5e:4f:
                    ac:a6:20:28:da:54:b2:88:da:bb:0e:6f:f4:04:e5:
                    98:fb:ce:0a:da:6b:bb:da:7e:9d:df:9a:84:45:82:
                    b3:69:bb:d1:a0:15:97:a2:14:90:55:58:bd:d0:7b:
                    64:11:65:2d:2b:98:ea:95:04:fe:8f:c5:f2:50:45:
                    d5:f8:76:a0:3c:f0:0c:4d:be:cb:24:25:c8:4d:6b:
                    46:21:47:d5:e4:a3:9a:c4:7e:20:69:f9:c6:9b:35:
                    25:51:91:36:5c:46:47:f6:48:31:39:3c:b9:b4:d4:
                    10:63:49:2f:ef:d9:47:6a:ec:cb:c3:34:ac:05:45:
                    2a:12:67:63:54:f7:c2:31:eb:24:4d:01:84:ec:30:
                    a0:d9:46:ae:f8:fe:b9:fc:a5:ba:2f:dd:18:26:c5:
                    4f:0b:6d:02:54:e3:40:75:46:bb:45:8a:7d:69:86:
                    05:71:89:c2:28:a8:ed:17:4d:84:2d:a5:13:f3:dd:
                    d4:e9:78:dd:40:48:96:08:fc:12:4d:8c:fe:8b:7d:
                    67:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BE:A1:D5:E8:7D:21:DA:D3:90:F3:06:4C:1A:EC:36:F5:9D:2F:CA
            X509v3 Authority Key Identifier:
                keyid:B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS202400/0/323630323a666161383a3a2f34302d3430203d3e20323032343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8::/40

    Signature Algorithm: sha256WithRSAEncryption
         a9:37:ad:ec:01:09:26:f5:a7:a6:a1:83:e4:b0:65:33:eb:a5:
         f8:4e:4d:af:d1:23:b1:d2:63:b9:86:46:79:7c:5e:c3:ad:d9:
         7c:3d:9f:eb:37:cc:0c:e9:de:53:91:51:50:3d:43:ee:05:50:
         f2:ad:70:3b:08:25:92:38:4d:5b:48:f7:c6:0d:96:ac:22:61:
         c5:9a:f5:c4:fd:55:ed:03:c3:0c:c3:2d:2d:e8:49:8b:46:d6:
         c2:90:a8:fa:ef:53:3d:44:fc:0e:d8:2c:af:2a:4e:a2:11:af:
         4b:5c:9b:21:22:83:c9:19:8f:ae:eb:ea:f2:5d:2a:4a:c4:b3:
         10:14:a6:1d:0c:91:19:d5:85:4f:43:64:d7:ce:7f:7f:8a:c1:
         1a:4c:43:d9:da:2d:f6:cb:e2:a0:f0:7e:20:aa:3b:37:e6:f0:
         96:79:4e:52:b6:27:a4:2c:40:06:4b:9e:ff:0f:a5:e7:5f:57:
         34:1a:04:27:9c:2b:fc:d5:c7:86:dc:82:5c:0a:47:f1:8b:c0:
         06:b0:c5:88:6d:48:84:be:ca:52:fb:3a:2b:a7:4e:80:03:db:
         dd:9e:60:54:f7:20:03:87:2e:cf:13:29:89:49:26:f6:7c:1f:
         25:21:eb:0d:57:9c:e6:f2:55:c8:13:5f:75:33:f0:f2:c9:75:
         8c:05:07:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----