Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a3430303a3a2f34332d3433203d3e20323035343332.roa
File:                     326130363a313238373a3430303a3a2f34332d3433203d3e20323035343332.roa (raw, json)
Hash identifier:          K3v5abCooBSZbxOzGye5UGKn0TVx0gJAMuLbkj/DQZo=
Subject key identifier:   E5:5F:E7:5C:B9:2B:38:06:08:AC:95:E2:E0:4F:69:33:94:0E:39:A5
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       4AD933D36A4C411B6B43048FB9D9FE216B2AD67D
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a3430303a3a2f34332d3433203d3e20323035343332.roa
Signing time:             Fri 14 Apr 2023 01:52:18 +0000
ROA not before:           Fri 14 Apr 2023 01:47:18 +0000
ROA not after:            Fri 12 Apr 2024 01:52:18 +0000
asID:                     205432
IP address blocks:        2a06:1287:400::/43 maxlen: 43

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d9:33:d3:6a:4c:41:1b:6b:43:04:8f:b9:d9:fe:21:6b:2a:d6:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:47:18 2023 GMT
            Not After : Apr 12 01:52:18 2024 GMT
        Subject: CN=E55FE75CB92B380608AC95E2E04F6933940E39A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ef:53:6f:65:63:22:e6:e9:f8:07:41:f6:06:
                    d5:94:59:63:dd:7d:f3:24:74:76:94:11:5e:a7:0c:
                    97:76:5f:2b:5a:46:74:2a:70:d4:d9:cf:91:1a:f1:
                    56:bd:82:81:73:a5:a2:c6:b6:5b:19:06:4f:56:c2:
                    ff:49:69:6d:c1:3f:37:e3:53:58:84:be:b6:39:3d:
                    8a:cb:60:61:a4:19:16:e0:78:f6:88:56:15:73:d4:
                    ca:de:eb:eb:bd:a4:8c:06:b8:0c:8e:cf:cf:ab:19:
                    fe:06:ea:53:7a:77:71:c9:e4:11:2f:d6:8b:f5:21:
                    92:ec:46:e3:66:66:91:c8:6e:0d:98:71:be:43:b9:
                    0f:43:b8:db:ee:52:37:92:8b:79:d4:15:2c:63:5a:
                    12:d9:f2:8b:42:af:b4:12:e0:8e:2e:47:13:b1:a0:
                    76:7f:02:38:8f:2f:85:fb:11:ed:bb:de:b6:59:ab:
                    9b:1d:48:b0:d7:07:56:40:34:78:46:c6:8c:f3:11:
                    8b:a8:c0:ba:b0:c3:7a:33:cb:d3:d2:fc:fb:67:64:
                    7e:c7:b6:24:52:fb:80:92:1e:33:f2:5a:d7:46:32:
                    bb:82:6c:4d:bd:9d:1c:5b:fe:d8:67:b9:71:ab:b3:
                    c4:71:c6:40:f9:f7:87:b1:29:69:f5:0b:58:01:d1:
                    ac:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:5F:E7:5C:B9:2B:38:06:08:AC:95:E2:E0:4F:69:33:94:0E:39:A5
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a3430303a3a2f34332d3433203d3e20323035343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:400::/43

    Signature Algorithm: sha256WithRSAEncryption
         c7:00:78:9b:d7:27:13:c2:7a:6a:7d:09:73:a4:b1:74:e2:23:
         d0:b6:47:f4:59:16:86:3c:26:5a:7c:b0:ad:1e:9f:b2:e5:34:
         ff:48:73:65:24:a8:89:75:a5:86:4c:58:4e:6e:60:d1:fe:4b:
         5e:3a:1e:78:2b:c3:95:50:9c:c3:8b:1d:4e:98:0f:23:8a:8e:
         70:8f:42:3d:28:c7:b6:a4:c0:e1:80:ce:29:2e:32:e7:c1:73:
         4f:6e:63:dc:56:89:4c:6c:78:92:c9:e5:36:8c:ec:bb:d8:76:
         86:29:ec:15:39:f1:84:35:a0:b1:73:5c:67:11:7c:94:da:7d:
         81:d1:0d:eb:2c:a0:1d:a4:8a:0d:ff:d1:94:4b:a4:b5:7c:26:
         33:67:c0:de:8e:b9:14:20:9c:b2:44:a4:4b:dc:ca:59:0d:72:
         c8:1c:52:44:e8:1d:69:42:a4:ab:06:69:ae:58:49:35:b1:f8:
         e0:17:60:e2:e0:a4:a1:c9:db:08:55:8e:d4:ff:a3:0c:fe:a1:
         ad:74:a6:af:ac:85:73:f9:6a:d9:03:44:7b:98:d9:09:a5:af:
         d0:af:3f:7a:d0:65:8e:1b:1b:3e:6d:bc:bb:88:a3:16:5d:1c:
         a2:36:d5:d0:17:16:30:15:cc:78:cf:ee:6c:4d:d1:42:a2:2e:
         8a:8b:ad:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIUStkz02pMQRtrQwSPudn+IWsq1n0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA0MTQwMTQ3MThaFw0yNDA0MTIwMTUyMThaMDMxMTAvBgNV
BAMTKEU1NUZFNzVDQjkyQjM4MDYwOEFDOTVFMkUwNEY2OTMzOTQwRTM5QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc71NvZWMi5un4B0H2BtWUWWPd
ffMkdHaUEV6nDJd2XytaRnQqcNTZz5Ea8Va9goFzpaLGtlsZBk9Wwv9JaW3BPzfj
U1iEvrY5PYrLYGGkGRbgePaIVhVz1Mre6+u9pIwGuAyOz8+rGf4G6lN6d3HJ5BEv
1ov1IZLsRuNmZpHIbg2Ycb5DuQ9DuNvuUjeSi3nUFSxjWhLZ8otCr7QS4I4uRxOx
oHZ/AjiPL4X7Ee273rZZq5sdSLDXB1ZANHhGxozzEYuowLqww3ozy9PS/PtnZH7H
tiRS+4CSHjPyWtdGMruCbE29nRxb/thnuXGrs8RxxkD594exKWn1C1gB0axnAgMB
AAGjggIHMIICAzAdBgNVHQ4EFgQU5V/nXLkrOAYIrJXi4E9pM5QOOaUwHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2kuY28vcmVw
by9BUzIwNTQzMi8wLzMyNjEzMDM2M2EzMTMyMzgzNzNhMzQzMDMwM2EzYTJmMzQz
MzJkMzQzMzIwM2QzZTIwMzIzMDM1MzQzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFKgYShwQAMA0G
CSqGSIb3DQEBCwUAA4IBAQDHAHib1ycTwnpqfQlzpLF04iPQtkf0WRaGPCZafLCt
Hp+y5TT/SHNlJKiJdaWGTFhObmDR/kteOh54K8OVUJzDix1OmA8jio5wj0I9KMe2
pMDhgM4pLjLnwXNPbmPcVolMbHiSyeU2jOy72HaGKewVOfGENaCxc1xnEXyU2n2B
0Q3rLKAdpIoN/9GUS6S1fCYzZ8DejrkUIJyyRKRL3MpZDXLIHFJE6B1pQqSrBmmu
WEk1sfjgF2Di4KShydsIVY7U/6MM/qGtdKavrIVz+WrZA0R7mNkJpa/Qrz960GWO
Gxs+bby7iKMWXRyiNtXQFxYwFcx4z+5sTdFCoi6Ki63P
-----END CERTIFICATE-----