Route Origin Authorization

$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a663a3a2f34382d313238203d3e20323030393735.roa
File:                     326130363a313238323a663a3a2f34382d313238203d3e20323030393735.roa (raw, json)
Hash identifier:          rrlQYFGJ/cJ0/sVx4Z1OoJrb9nnQCNQlJOtrnmS1tI0=
Subject key identifier:   72:56:7A:29:FB:0D:E3:20:E8:A8:C1:DE:2E:3E:5F:CB:A1:6D:D4:15
Certificate issuer:       /CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
Certificate serial:       3A9CDE4DCE5A98052DAEAD17B71149478C996270
Authority key identifier: 3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer
Subject info access:      rsync://rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a663a3a2f34382d313238203d3e20323030393735.roa
Signing time:             Mon 04 Mar 2024 13:27:35 +0000
ROA not before:           Mon 04 Mar 2024 13:22:35 +0000
ROA not after:            Mon 03 Mar 2025 13:27:35 +0000
asID:                     200975
IP address blocks:        2a06:1282:f::/48 maxlen: 128

Validation:               Failed, certificate revoked on Mon 13 May 2024 19:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:9c:de:4d:ce:5a:98:05:2d:ae:ad:17:b7:11:49:47:8c:99:62:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
        Validity
            Not Before: Mar  4 13:22:35 2024 GMT
            Not After : Mar  3 13:27:35 2025 GMT
        Subject: CN=72567A29FB0DE320E8A8C1DE2E3E5FCBA16DD415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:87:4f:ea:ae:60:59:6e:89:b0:82:24:2a:16:
                    5d:d1:09:20:51:83:b2:46:f0:dc:9d:d5:b6:0f:27:
                    e7:d0:30:b0:44:bd:8a:55:1e:5d:a5:91:19:ca:c6:
                    5c:4f:8f:28:1c:0b:98:75:af:32:c6:ca:fa:58:02:
                    3e:5d:fd:7a:4f:c1:51:3e:af:ba:cb:9e:0e:0e:a5:
                    63:6f:2f:fe:35:3c:60:29:af:3f:55:b5:ef:74:09:
                    99:da:dc:cf:fb:e9:16:45:7a:58:98:22:55:23:f4:
                    10:9d:c6:ae:38:c5:ab:cb:66:9b:ae:cf:df:62:d6:
                    eb:25:c4:c4:9a:48:8b:de:1d:0e:62:04:47:06:14:
                    44:9a:17:b2:78:14:19:0e:c6:bc:15:e1:d6:e4:11:
                    3e:08:81:64:bd:d6:1b:51:41:03:59:46:ab:b4:d8:
                    57:7b:5c:95:b1:fe:c1:79:c5:fb:da:47:02:62:7e:
                    b4:c1:bb:b7:1c:75:45:8d:03:dc:12:51:3d:66:a6:
                    6a:9c:5e:de:01:70:ca:69:42:f1:35:8a:a9:06:2f:
                    9a:bd:9a:18:e7:bd:4c:54:ef:f6:67:f3:b8:c9:49:
                    9d:73:93:f9:03:5a:ab:bf:98:d0:e9:12:26:1f:8f:
                    6f:80:4c:26:c3:bd:49:16:49:ba:c6:47:eb:35:35:
                    01:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:56:7A:29:FB:0D:E3:20:E8:A8:C1:DE:2E:3E:5F:CB:A1:6D:D4:15
            X509v3 Authority Key Identifier:
                keyid:3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a663a3a2f34382d313238203d3e20323030393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1282:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:1c:94:02:cd:ae:d1:dd:f8:b7:24:f6:5c:25:32:0b:6c:b7:
         09:f7:27:dd:d1:3e:3c:1c:e8:65:20:94:13:78:10:e4:1e:3a:
         d5:55:5a:93:1a:f6:4b:d0:fd:1b:3d:d3:98:30:8e:87:10:83:
         5d:8f:5d:45:5d:c0:76:45:bb:0e:15:4a:98:ca:fa:46:82:a3:
         d7:e7:53:0b:13:fa:4f:96:a9:7d:09:79:9f:50:9e:95:5e:6e:
         f3:b5:04:ac:55:bc:23:c0:fe:fe:b9:19:2c:84:4a:a7:53:a5:
         0d:a8:8c:6e:25:86:98:b4:c8:cf:f2:61:b4:e3:6f:e0:3d:53:
         48:fb:6e:b0:2f:11:c5:bb:5f:36:61:b7:ae:2b:bb:b1:89:86:
         b9:ac:b4:6f:21:cf:c4:98:89:2e:43:e9:6b:d9:b4:65:6a:29:
         07:d6:ae:05:ff:17:48:7f:88:3f:d5:15:24:d8:78:5f:59:d6:
         86:e8:2e:c2:ef:32:2b:e3:ce:e3:d7:8b:26:05:11:b2:6f:82:
         92:1d:3f:5f:2f:d9:16:5b:38:b8:82:3d:98:90:ec:8a:9f:d2:
         f0:4c:53:69:d3:5b:30:12:40:25:70:4b:1b:a9:c4:ed:54:e2:
         1e:e5:bd:b7:c7:3f:34:6e:03:4e:13:f3:e8:f6:3f:66:b5:9e:
         c2:6a:40:f4
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIUOpzeTc5amAUtrq0XtxFJR4yZYnAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0IzRTFCRENFRDhDQjg5NTk3RkU5MkVBRjc1QkUyREY5
OEFGODRBNzAeFw0yNDAzMDQxMzIyMzVaFw0yNTAzMDMxMzI3MzVaMDMxMTAvBgNV
BAMTKDcyNTY3QTI5RkIwREUzMjBFOEE4QzFERTJFM0U1RkNCQTE2REQ0MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXh0/qrmBZbomwgiQqFl3RCSBR
g7JG8Nyd1bYPJ+fQMLBEvYpVHl2lkRnKxlxPjygcC5h1rzLGyvpYAj5d/XpPwVE+
r7rLng4OpWNvL/41PGAprz9Vte90CZna3M/76RZFeliYIlUj9BCdxq44xavLZpuu
z99i1uslxMSaSIveHQ5iBEcGFESaF7J4FBkOxrwV4dbkET4IgWS91htRQQNZRqu0
2Fd7XJWx/sF5xfvaRwJifrTBu7ccdUWNA9wSUT1mpmqcXt4BcMppQvE1iqkGL5q9
mhjnvUxU7/Zn87jJSZ1zk/kDWqu/mNDpEiYfj2+ATCbDvUkWSbrGR+s1NQEjAgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQUclZ6KfsN4yDoqMHeLj5fy6Ft1BUwHwYDVR0j
BBgwFoAUOz4b3O2MuJWX/pLq91vi35ivhKcwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraS5zbi1wLmlvL3JlcG8vc24tcC1pby8w
LzNCM0UxQkRDRUQ4Q0I4OTU5N0ZFOTJFQUY3NUJFMkRGOThBRjg0QTcuY3JsMIGT
BggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC8yLzNCM0UxQkRDRUQ4Q0I4OTU5N0ZFOTJFQUY3NUJFMkRGOThBRjg0QTcu
Y2VyMIGABggrBgEFBQcBCwR0MHIwcAYIKwYBBQUHMAuGZHJzeW5jOi8vcnBraS5z
bi1wLmlvL3JlcG8vc24tcC1pby8wLzMyNjEzMDM2M2EzMTMyMzgzMjNhNjYzYTNh
MmYzNDM4MmQzMTMyMzgyMDNkM2UyMDMyMzAzMDM5MzczNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoG
EoIADzANBgkqhkiG9w0BAQsFAAOCAQEAhRyUAs2u0d34tyT2XCUyC2y3Cfcn3dE+
PBzoZSCUE3gQ5B461VVakxr2S9D9Gz3TmDCOhxCDXY9dRV3AdkW7DhVKmMr6RoKj
1+dTCxP6T5apfQl5n1CelV5u87UErFW8I8D+/rkZLIRKp1OlDaiMbiWGmLTIz/Jh
tONv4D1TSPtusC8RxbtfNmG3riu7sYmGuay0byHPxJiJLkPpa9m0ZWopB9auBf8X
SH+IP9UVJNh4X1nWhuguwu8yK+PO49eLJgURsm+Ckh0/Xy/ZFls4uII9mJDsip/S
8ExTadNbMBJAJXBLG6nE7VTiHuW9t8c/NG4DThPz6PY/ZrWewmpA9A==
-----END CERTIFICATE-----