Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a333030303a3a2f34342d3434203d3e203334353439.roa
File:                     326130363a313238373a333030303a3a2f34342d3434203d3e203334353439.roa (raw, json)
Hash identifier:          mZ/MwV53I3kvYtQo+fyiQXwjG2n7LDtOP6WND9XxexA=
Subject key identifier:   E1:72:D9:2E:A8:94:6D:F7:99:47:C1:F3:0D:60:F0:2B:EC:1C:67:50
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       1DA93BB9B6B9BC1A08A482613091A24DD10F03BF
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a333030303a3a2f34342d3434203d3e203334353439.roa
Signing time:             Fri 14 Apr 2023 01:39:19 +0000
ROA not before:           Fri 14 Apr 2023 01:34:19 +0000
ROA not after:            Fri 12 Apr 2024 01:39:19 +0000
asID:                     34549
IP address blocks:        2a06:1287:3000::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a9:3b:b9:b6:b9:bc:1a:08:a4:82:61:30:91:a2:4d:d1:0f:03:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:34:19 2023 GMT
            Not After : Apr 12 01:39:19 2024 GMT
        Subject: CN=E172D92EA8946DF79947C1F30D60F02BEC1C6750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:79:68:fc:60:76:64:23:e6:cf:6a:25:cb:ce:
                    b4:c7:4b:c1:d6:4c:1e:a1:97:21:7d:34:6c:43:17:
                    8c:70:93:ef:a0:96:5e:e7:47:8f:c7:51:77:53:19:
                    bc:c4:82:cc:ff:8d:78:04:24:3d:5d:d8:b2:98:7e:
                    41:82:ea:e8:e8:6a:6a:2f:cf:b5:1d:85:52:8c:09:
                    3c:99:c3:52:66:64:40:7f:0b:4f:cc:93:f8:40:b5:
                    17:28:77:e9:33:37:25:65:91:cd:66:7e:ca:d6:21:
                    77:07:a9:a6:a6:6f:0f:dd:2f:5d:73:93:00:05:c1:
                    b8:6f:9d:46:32:57:c6:63:8e:e8:d4:6b:0c:59:15:
                    61:58:fa:5a:84:52:d1:2c:c6:d6:51:30:4f:12:41:
                    a6:52:03:fd:a1:e0:9c:a4:37:98:0c:f1:b1:83:e3:
                    af:96:4c:05:95:a6:10:28:33:ef:8a:d2:65:11:f6:
                    e8:41:14:37:98:4b:8a:30:b8:57:01:c9:32:9e:3f:
                    3e:7e:95:24:d2:7a:b3:29:d1:b4:d8:62:2f:c0:15:
                    eb:2f:02:76:83:fe:9f:c5:86:30:94:7c:1c:9d:ae:
                    48:fe:04:55:8f:b9:87:a0:20:47:44:7e:56:80:2e:
                    a6:cb:57:0a:f5:cb:51:d6:cc:2a:bb:91:5a:c1:e8:
                    d2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:72:D9:2E:A8:94:6D:F7:99:47:C1:F3:0D:60:F0:2B:EC:1C:67:50
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a333030303a3a2f34342d3434203d3e203334353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:3000::/44

    Signature Algorithm: sha256WithRSAEncryption
         7f:71:67:20:fb:b5:fd:27:77:5c:3e:21:bd:c9:5c:28:6a:76:
         3b:2c:4b:3f:b8:c0:b5:36:33:e2:d0:ca:85:f8:e4:b2:4a:2f:
         60:96:f7:21:42:13:ad:8b:16:32:81:f4:c9:4f:7d:08:83:c2:
         c4:39:0d:b3:d5:90:50:fd:0b:b7:22:7f:9c:27:f9:f7:37:39:
         a0:6c:24:fd:2c:ad:7e:fa:61:18:48:61:0c:de:07:4b:7b:36:
         3d:67:08:b4:77:8d:ba:c4:7e:5c:e8:f8:df:a9:4c:76:0e:10:
         7d:d1:3e:ea:ed:38:75:98:d7:4e:56:c1:d7:9c:0b:8e:3e:b8:
         12:1e:ee:ad:d2:23:74:8f:ec:7b:3e:fe:37:ec:95:1d:53:0f:
         c7:e3:99:19:41:79:10:6f:15:7e:b9:2e:97:f5:b6:75:61:87:
         6f:0a:21:42:dc:5b:ee:e3:51:79:25:3c:77:b5:a3:85:f8:91:
         35:c0:dc:32:34:20:1c:05:42:a6:01:18:26:d1:64:e6:34:4d:
         16:b1:26:76:69:2b:e3:e4:2b:66:ce:30:93:11:51:37:eb:fe:
         88:2a:ba:27:cc:0d:f5:ff:73:37:37:db:9b:ae:67:ff:55:9b:
         c7:78:5d:7d:98:a1:40:fd:61:c1:8c:32:4f:b9:9d:2c:8b:e0:
         89:d1:4a:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIUHak7uba5vBoIpIJhMJGiTdEPA78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA0MTQwMTM0MTlaFw0yNDA0MTIwMTM5MTlaMDMxMTAvBgNV
BAMTKEUxNzJEOTJFQTg5NDZERjc5OTQ3QzFGMzBENjBGMDJCRUMxQzY3NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDceWj8YHZkI+bPaiXLzrTHS8HW
TB6hlyF9NGxDF4xwk++gll7nR4/HUXdTGbzEgsz/jXgEJD1d2LKYfkGC6ujoamov
z7UdhVKMCTyZw1JmZEB/C0/Mk/hAtRcod+kzNyVlkc1mfsrWIXcHqaambw/dL11z
kwAFwbhvnUYyV8ZjjujUawxZFWFY+lqEUtEsxtZRME8SQaZSA/2h4JykN5gM8bGD
46+WTAWVphAoM++K0mUR9uhBFDeYS4owuFcByTKePz5+lSTSerMp0bTYYi/AFesv
AnaD/p/FhjCUfBydrkj+BFWPuYegIEdEflaALqbLVwr1y1HWzCq7kVrB6NKzAgMB
AAGjggIHMIICAzAdBgNVHQ4EFgQU4XLZLqiUbfeZR8HzDWDwK+wcZ1AwHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2kuY28vcmVw
by9BUzIwNTQzMi8wLzMyNjEzMDM2M2EzMTMyMzgzNzNhMzMzMDMwMzAzYTNhMmYz
NDM0MmQzNDM0MjAzZDNlMjAzMzM0MzUzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgYShzAAMA0G
CSqGSIb3DQEBCwUAA4IBAQB/cWcg+7X9J3dcPiG9yVwoanY7LEs/uMC1NjPi0MqF
+OSySi9glvchQhOtixYygfTJT30Ig8LEOQ2z1ZBQ/Qu3In+cJ/n3NzmgbCT9LK1+
+mEYSGEM3gdLezY9Zwi0d426xH5c6PjfqUx2DhB90T7q7Th1mNdOVsHXnAuOPrgS
Hu6t0iN0j+x7Pv437JUdUw/H45kZQXkQbxV+uS6X9bZ1YYdvCiFC3Fvu41F5JTx3
taOF+JE1wNwyNCAcBUKmARgm0WTmNE0WsSZ2aSvj5CtmzjCTEVE36/6IKronzA31
/3M3N9ubrmf/VZvHeF19mKFA/WHBjDJPuZ0si+CJ0Uq0
-----END CERTIFICATE-----