Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a313130303a3a2f34332d3433203d3e20323034363933.roa
File:                     326130363a313238373a313130303a3a2f34332d3433203d3e20323034363933.roa (raw, json)
Hash identifier:          UDgTmNI7nkhfylhSHkTz3nO/rPDqYAfSE/oYvgL0XOo=
Subject key identifier:   20:60:7D:0C:80:0C:0E:23:81:61:5A:CE:87:AB:86:55:D3:C2:C4:2F
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       0E438CDD4A9930D10B3CF4D784FA79980C6EA0CF
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a313130303a3a2f34332d3433203d3e20323034363933.roa
Signing time:             Fri 14 Apr 2023 02:14:24 +0000
ROA not before:           Fri 14 Apr 2023 02:09:24 +0000
ROA not after:            Fri 12 Apr 2024 02:14:24 +0000
asID:                     204693
IP address blocks:        2a06:1287:1100::/43 maxlen: 43

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:43:8c:dd:4a:99:30:d1:0b:3c:f4:d7:84:fa:79:98:0c:6e:a0:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 02:09:24 2023 GMT
            Not After : Apr 12 02:14:24 2024 GMT
        Subject: CN=20607D0C800C0E2381615ACE87AB8655D3C2C42F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:75:cc:e8:b0:2f:1b:37:b6:d0:fe:d5:7f:a0:
                    c0:d8:0a:e8:81:8f:29:46:9e:2a:cd:8a:a7:7f:74:
                    03:22:77:c6:02:d2:f3:3e:30:25:c0:14:f5:e3:c4:
                    e6:29:f5:6b:d1:c2:b7:fd:bb:f8:a4:e1:ca:f7:28:
                    70:89:6b:40:77:55:70:62:91:7d:71:69:f3:0f:e2:
                    e4:14:fc:d4:dc:fc:d2:6f:bf:47:a4:bc:91:14:aa:
                    bb:bd:f2:9b:41:90:ad:e9:d8:b2:fc:70:56:f4:68:
                    02:25:d7:1a:ff:7b:49:32:03:ef:7f:98:64:56:9c:
                    99:f6:6e:81:83:be:06:29:e3:3a:b3:72:4e:a2:b6:
                    4a:a6:aa:f4:80:69:95:2c:2b:87:f2:1a:22:1b:5b:
                    e1:81:27:28:e8:8b:e6:fe:cb:a8:c6:66:39:04:cf:
                    6b:32:df:14:c4:d6:c6:08:fc:5c:ef:f3:c5:3f:8d:
                    a2:bc:c9:c7:e0:6f:9b:0f:9c:db:e7:5d:b1:58:ba:
                    b0:56:63:f3:07:e4:87:55:4b:cf:37:49:3f:2e:e3:
                    95:39:e1:f9:52:56:b9:b5:ba:d5:ed:c5:c6:89:88:
                    dc:6c:12:a3:61:b7:c1:ab:96:51:8f:1c:52:e4:2f:
                    e1:ec:50:74:64:98:61:22:91:cf:cb:50:4d:7a:5c:
                    c8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:60:7D:0C:80:0C:0E:23:81:61:5A:CE:87:AB:86:55:D3:C2:C4:2F
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a313130303a3a2f34332d3433203d3e20323034363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:1100::/43

    Signature Algorithm: sha256WithRSAEncryption
         40:c0:b8:dd:8c:03:03:fc:7a:bd:e8:c8:1f:c8:79:bf:f9:9e:
         ff:7f:9d:11:37:9e:c0:68:9f:4c:c4:94:01:1e:1e:bf:25:12:
         7b:88:a4:0c:d7:c9:59:03:c3:b2:63:3b:13:9d:84:c6:63:38:
         39:6b:ca:8d:9d:47:a0:6a:1a:d7:10:8b:13:ce:69:56:44:99:
         86:71:c0:0c:d2:3e:90:0b:d6:18:10:0b:3a:a0:15:85:51:ca:
         83:43:6b:e6:19:66:64:50:63:63:9d:b4:29:e8:9d:d7:9f:85:
         4b:13:c2:c9:4e:c5:c6:3c:1c:4f:04:35:c1:72:78:4b:52:e7:
         60:7a:61:92:c4:3e:cf:e0:bd:ae:10:ed:fe:e6:8e:74:c9:96:
         ba:4b:8b:fb:46:68:1e:d7:f5:d1:09:33:b9:b8:b8:05:26:02:
         35:2f:fd:46:30:02:46:b4:67:92:d2:92:bb:16:07:21:f3:e4:
         6e:9a:b8:1e:64:bb:79:b3:68:f3:d3:4a:74:e6:71:53:20:20:
         00:92:2a:ac:cc:10:21:64:ed:ad:0a:8e:a2:95:17:b5:fd:95:
         1b:1d:cc:f3:59:18:f7:a1:44:6f:91:f2:5c:ac:15:46:a5:68:
         df:31:d8:cd:f6:39:04:31:8c:1e:f5:0c:de:61:c6:2b:1f:ec:
         50:8b:ea:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----