Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a3930303a3a2f34302d3430203d3e20323030353739.roa
File:                     326130363a313238373a3930303a3a2f34302d3430203d3e20323030353739.roa (raw, json)
Hash identifier:          5sBYUCkkdbi+3YJf9Zx8VSiAn6XzLyth05rjgFG6BmE=
Subject key identifier:   E2:F5:FB:62:CE:08:0C:2B:2A:58:E0:BA:CA:6C:00:C4:EA:19:97:38
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       45CCD9F2C426FE3641EFB717944517B47A461307
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a3930303a3a2f34302d3430203d3e20323030353739.roa
Signing time:             Fri 14 Apr 2023 01:45:27 +0000
ROA not before:           Fri 14 Apr 2023 01:40:27 +0000
ROA not after:            Fri 12 Apr 2024 01:45:27 +0000
asID:                     200579
IP address blocks:        2a06:1287:900::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:cc:d9:f2:c4:26:fe:36:41:ef:b7:17:94:45:17:b4:7a:46:13:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:40:27 2023 GMT
            Not After : Apr 12 01:45:27 2024 GMT
        Subject: CN=E2F5FB62CE080C2B2A58E0BACA6C00C4EA199738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ef:15:fe:ed:99:8b:f0:bd:f3:1a:8d:f3:e5:
                    05:d0:56:c1:d8:d0:4c:1d:c9:55:3a:23:86:5d:98:
                    66:c8:17:36:ee:08:8b:7d:73:61:fb:73:3a:85:d6:
                    6e:3a:7c:d7:ff:17:ac:1e:f1:b8:d3:94:45:ef:76:
                    04:f5:4a:8a:33:22:95:94:e6:fd:59:1a:db:62:e4:
                    ed:61:cf:25:00:b4:bc:68:ca:13:bf:cc:84:34:ea:
                    80:a8:53:96:3a:c8:ae:29:8b:f6:b8:9a:db:63:ba:
                    8b:47:2e:4c:9f:d2:57:f9:b3:1b:5a:a5:df:ec:a9:
                    d4:e8:3f:c9:15:31:4e:90:cc:75:9d:50:af:bf:20:
                    26:40:f9:65:ae:9d:2e:9e:03:cf:c4:85:a5:5b:8a:
                    94:d1:fb:41:8b:e2:7f:52:5a:90:30:24:8f:98:9a:
                    51:c1:eb:56:e8:f3:f1:60:38:bb:8e:b9:7d:25:e6:
                    30:c8:6e:40:97:36:f7:4f:f8:59:07:b5:d9:80:48:
                    8f:ea:f2:a9:bb:f5:6c:a1:1e:bf:f1:12:99:a4:e0:
                    6b:56:1f:93:db:fd:a9:0f:1e:aa:65:d1:72:13:26:
                    c6:64:ea:27:86:ce:22:88:0d:70:97:08:65:ca:07:
                    9a:93:32:be:19:13:0c:1b:ed:6f:f9:1b:23:b6:6e:
                    3e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F5:FB:62:CE:08:0C:2B:2A:58:E0:BA:CA:6C:00:C4:EA:19:97:38
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a3930303a3a2f34302d3430203d3e20323030353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:8a:d3:bd:12:9c:0f:28:cb:7b:ab:fa:dc:6a:ef:e9:45:72:
         b3:27:de:a1:58:26:83:b7:06:96:1c:25:f0:f7:8a:d6:49:f1:
         bd:c1:fc:5f:24:35:5a:53:12:e3:b6:be:07:a5:a3:7c:a4:26:
         f0:85:a3:97:40:79:99:7e:49:cf:78:3c:9d:7e:85:c4:77:dd:
         2a:31:a5:7a:ee:d5:c4:3d:e7:a5:cb:2b:24:a5:36:4f:80:2e:
         ae:12:a1:35:1e:d6:d7:4e:02:7f:17:3e:68:d0:c2:72:90:96:
         6c:3b:25:5c:25:fb:13:40:89:ce:16:88:17:85:0b:01:1b:84:
         e9:4a:a3:1f:2d:60:21:81:a7:f1:62:f2:a1:83:c7:6c:ab:e9:
         8b:42:c5:95:a4:88:0b:23:fc:28:f4:2c:22:fa:02:16:62:e0:
         55:38:83:cf:ea:12:3b:9f:e2:63:18:40:14:55:c5:75:d0:78:
         4b:3e:6a:1d:82:74:28:8c:a3:7e:4a:fd:5b:63:5d:75:2e:7e:
         3f:5e:e3:60:12:5a:ee:06:44:7e:cd:cf:0f:bd:78:8a:12:da:
         1c:30:58:89:99:63:19:ce:f6:26:67:b8:c3:22:22:25:00:05:
         b3:7e:78:69:bc:09:f2:e2:8f:5f:5a:4c:b1:31:c0:70:27:c5:
         6e:77:2f:7d
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIURczZ8sQm/jZB77cXlEUXtHpGEwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA0MTQwMTQwMjdaFw0yNDA0MTIwMTQ1MjdaMDMxMTAvBgNV
BAMTKEUyRjVGQjYyQ0UwODBDMkIyQTU4RTBCQUNBNkMwMEM0RUExOTk3MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH7xX+7ZmL8L3zGo3z5QXQVsHY
0EwdyVU6I4ZdmGbIFzbuCIt9c2H7czqF1m46fNf/F6we8bjTlEXvdgT1SoozIpWU
5v1ZGtti5O1hzyUAtLxoyhO/zIQ06oCoU5Y6yK4pi/a4mttjuotHLkyf0lf5sxta
pd/sqdToP8kVMU6QzHWdUK+/ICZA+WWunS6eA8/EhaVbipTR+0GL4n9SWpAwJI+Y
mlHB61bo8/FgOLuOuX0l5jDIbkCXNvdP+FkHtdmASI/q8qm79WyhHr/xEpmk4GtW
H5Pb/akPHqpl0XITJsZk6ieGziKIDXCXCGXKB5qTMr4ZEwwb7W/5GyO2bj7JAgMB
AAGjggIGMIICAjAdBgNVHQ4EFgQU4vX7Ys4IDCsqWOC6ymwAxOoZlzgwHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2kuY28vcmVw
by9BUzIwNTQzMi8wLzMyNjEzMDM2M2EzMTMyMzgzNzNhMzkzMDMwM2EzYTJmMzQz
MDJkMzQzMDIwM2QzZTIwMzIzMDMwMzUzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgYShwkwDQYJ
KoZIhvcNAQELBQADggEBAEqK070SnA8oy3ur+txq7+lFcrMn3qFYJoO3BpYcJfD3
itZJ8b3B/F8kNVpTEuO2vgelo3ykJvCFo5dAeZl+Sc94PJ1+hcR33SoxpXru1cQ9
56XLKySlNk+ALq4SoTUe1tdOAn8XPmjQwnKQlmw7JVwl+xNAic4WiBeFCwEbhOlK
ox8tYCGBp/Fi8qGDx2yr6YtCxZWkiAsj/Cj0LCL6AhZi4FU4g8/qEjuf4mMYQBRV
xXXQeEs+ah2CdCiMo35K/VtjXXUufj9e42ASWu4GRH7Nzw+9eIoS2hwwWImZYxnO
9iZnuMMiIiUABbN+eGm8CfLij19aTLExwHAnxW53L30=
-----END CERTIFICATE-----