Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3130303a3a2f34382d3438203d3e20343031363832.roa
File:                     323630343a6361303a3130303a3a2f34382d3438203d3e20343031363832.roa (raw, json)
Hash identifier:          IiDk6+uDymaleZojooe7HwoY7MRs1iFXpyDenR6H9ow=
Subject key identifier:   EC:7A:FB:DD:F8:2B:7E:01:17:13:07:98:F1:F0:B5:39:71:DC:F7:E1
Certificate issuer:       /CN=e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959
Certificate serial:       7B35710955DE0B5F81CFB6F9444F99D5E0BAC9BE
Authority key identifier: 3B:A3:FB:89:3D:83:8A:15:71:8A:5B:C7:15:75:0C:ED:89:9E:FD:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3130303a3a2f34382d3438203d3e20343031363832.roa
Signing time:             Mon 28 Apr 2025 01:03:46 +0000
ROA not before:           Mon 28 Apr 2025 00:58:46 +0000
ROA not after:            Mon 27 Apr 2026 01:03:46 +0000
asID:                     401682
IP address blocks:        2604:ca0:100::/48 maxlen: 48
Validation:               Failed, certificate revoked on Mon 28 Apr 2025 01:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:35:71:09:55:de:0b:5f:81:cf:b6:f9:44:4f:99:d5:e0:ba:c9:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959
        Validity
            Not Before: Apr 28 00:58:46 2025 GMT
            Not After : Apr 27 01:03:46 2026 GMT
        Subject: CN=EC7AFBDDF82B7E0117130798F1F0B53971DCF7E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:47:49:36:2f:44:05:07:8a:cf:97:50:2c:ff:
                    01:cb:64:0f:2b:7c:02:f0:87:a3:ad:a2:d2:d3:2a:
                    87:7e:c0:21:38:f7:75:42:4c:76:64:b5:40:07:42:
                    d6:e2:c4:c8:e5:c3:05:fe:97:e2:f5:4a:39:aa:dc:
                    8c:2d:83:59:78:3f:ac:51:60:79:b2:14:73:5d:40:
                    78:c5:be:8b:27:1f:30:ea:f1:3b:c8:eb:c5:5b:e8:
                    ec:38:c6:97:9b:b8:88:b1:32:b8:07:7b:11:bd:b6:
                    16:1c:1f:57:96:d0:67:29:ca:e5:ce:5d:0e:af:b6:
                    f1:b1:fb:22:c2:ea:bb:11:62:fb:ef:82:3a:32:43:
                    1a:3e:5c:81:69:4c:fb:d0:0a:b1:a4:f1:8b:42:34:
                    da:07:75:06:9f:bc:f1:c9:7e:7b:2d:cd:86:cc:51:
                    35:d2:8c:9f:5b:4d:5f:0a:7e:5c:56:31:f3:1d:3c:
                    15:41:ec:05:bf:bd:72:4f:0d:1e:95:7e:82:41:30:
                    ef:b0:37:b4:a8:77:0b:d7:e6:80:b6:48:26:5b:18:
                    7d:3f:ac:92:e5:42:22:17:41:65:0c:9a:bd:87:7c:
                    c2:f6:74:2a:6f:18:dc:8b:01:07:be:2f:c0:50:a8:
                    22:07:f6:d1:15:21:ad:d2:1d:0a:46:cc:33:89:ed:
                    a4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7A:FB:DD:F8:2B:7E:01:17:13:07:98:F1:F0:B5:39:71:DC:F7:E1
            X509v3 Authority Key Identifier:
                keyid:3B:A3:FB:89:3D:83:8A:15:71:8A:5B:C7:15:75:0C:ED:89:9E:FD:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3BA3FB893D838A15718A5BC715750CED899EFD1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3130303a3a2f34382d3438203d3e20343031363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ca0:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:99:1e:09:5c:4c:5d:12:e6:99:61:3f:4f:dc:14:a6:91:f8:
         48:1b:82:77:44:3d:71:48:d9:08:e6:67:98:75:40:57:e9:a0:
         63:1c:bb:a4:2e:80:54:0a:30:82:d0:49:e6:fb:6f:e0:67:4e:
         53:bf:d7:32:06:c1:5c:fd:27:46:d7:10:f5:f4:4c:5b:d5:b0:
         95:89:39:d6:97:99:f9:b3:3f:f5:26:76:72:18:b1:39:25:dd:
         1e:14:84:4d:62:fd:6d:1c:d4:a2:04:34:9d:03:ec:90:93:e7:
         24:38:b0:1b:42:49:be:cb:6f:19:7a:96:a5:73:4f:d3:47:99:
         64:c1:51:49:4f:f6:9c:5b:f6:78:33:15:0d:59:48:e0:51:e9:
         5e:25:a5:87:71:a9:0f:af:d5:73:02:57:10:f0:a8:a9:0e:c9:
         3a:c8:bf:fa:4e:2d:1e:4e:3b:cb:d2:24:5a:db:0a:5e:26:1c:
         f0:41:74:ea:a7:ed:da:2e:f2:a1:be:75:c2:18:09:37:08:6f:
         03:d1:1a:78:7c:c3:54:cd:8d:b7:92:b3:8e:89:ec:8a:b3:1e:
         49:17:00:50:d8:10:ad:7e:11:52:a6:90:d7:65:d9:b1:97:6a:
         b9:a0:52:a5:74:8e:4b:96:b4:c0:a3:99:6f:fd:08:c0:07:ea:
         51:84:d3:a2
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUezVxCVXeC1+Bz7b5RE+Z1eC6yb4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTg3NDFhYzRmMWZmOWEwNjg4ZjFiNWJmMTM1NWU1Nzg4
Mzc0MjUzNDYxMjM1NmQ5NTkwHhcNMjUwNDI4MDA1ODQ2WhcNMjYwNDI3MDEwMzQ2
WjAzMTEwLwYDVQQDEyhFQzdBRkJEREY4MkI3RTAxMTcxMzA3OThGMUYwQjUzOTcx
RENGN0UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0dJNi9EBQeK
z5dQLP8By2QPK3wC8IejraLS0yqHfsAhOPd1Qkx2ZLVAB0LW4sTI5cMF/pfi9Uo5
qtyMLYNZeD+sUWB5shRzXUB4xb6LJx8w6vE7yOvFW+jsOMaXm7iIsTK4B3sRvbYW
HB9XltBnKcrlzl0Or7bxsfsiwuq7EWL774I6MkMaPlyBaUz70AqxpPGLQjTaB3UG
n7zxyX57Lc2GzFE10oyfW01fCn5cVjHzHTwVQewFv71yTw0elX6CQTDvsDe0qHcL
1+aAtkgmWxh9P6yS5UIiF0FlDJq9h3zC9nQqbxjciwEHvi/AUKgiB/bRFSGt0h0K
Rswzie2kMQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFOx6+934K34BFxMHmPHwtTlx
3PfhMB8GA1UdIwQYMBaAFDuj+4k9g4oVcYpbxxV1DO2Jnv0fMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2M1ZGE0MTNlNDQzODRkN2I4N2UwYTc0YjQyY2ExODY3LzAv
M0JBM0ZCODkzRDgzOEExNTcxOEE1QkM3MTU3NTBDRUQ4OTlFRkQxRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzRlOTYyNzE3LTExMzgtNGQyYi05NDQyLTAzMzJlOTA2MDEzMi9lODc0
MWFjNGYxZmY5YTA2ODhmMWI1YmYxMzU1ZTU3ODgzNzQyNTM0NjEyMzU2ZDk1OS5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jNWRhNDEzZTQ0Mzg0ZDdiODdlMGE3
NGI0MmNhMTg2Ny8wLzMyMzYzMDM0M2E2MzYxMzAzYTMxMzAzMDNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDM0MzAzMTM2MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYEDKABADANBgkq
hkiG9w0BAQsFAAOCAQEAQJkeCVxMXRLmmWE/T9wUppH4SBuCd0Q9cUjZCOZnmHVA
V+mgYxy7pC6AVAowgtBJ5vtv4GdOU7/XMgbBXP0nRtcQ9fRMW9WwlYk51peZ+bM/
9SZ2chixOSXdHhSETWL9bRzUogQ0nQPskJPnJDiwG0JJvstvGXqWpXNP00eZZMFR
SU/2nFv2eDMVDVlI4FHpXiWlh3GpD6/VcwJXEPCoqQ7JOsi/+k4tHk47y9IkWtsK
XiYc8EF06qft2i7yob51whgJNwhvA9EaeHzDVM2Nt5KzjonsirMeSRcAUNgQrX4R
UqaQ12XZsZdquaBSpXSOS5a0wKOZb/0IwAfqUYTTog==
-----END CERTIFICATE-----