Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3430303a3a2f34382d3438203d3e20343031363832.roa
File:                     323630343a6361303a3430303a3a2f34382d3438203d3e20343031363832.roa (raw, json)
Hash identifier:          3kqj8FBeYsBo1fc+flgVHhiAwJ8JCZuEE4hPoxtVtFg=
Subject key identifier:   26:33:8F:29:44:24:6D:08:D4:C0:20:A3:FB:B1:4F:BF:66:73:AC:48
Certificate issuer:       /CN=e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959
Certificate serial:       59AA460E2BEEEBF59F6256A39A0FA059886067B3
Authority key identifier: 3B:A3:FB:89:3D:83:8A:15:71:8A:5B:C7:15:75:0C:ED:89:9E:FD:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3430303a3a2f34382d3438203d3e20343031363832.roa
Signing time:             Mon 28 Apr 2025 01:04:17 +0000
ROA not before:           Mon 28 Apr 2025 00:59:17 +0000
ROA not after:            Mon 27 Apr 2026 01:04:17 +0000
asID:                     401682
IP address blocks:        2604:ca0:400::/48 maxlen: 48
Validation:               Failed, certificate revoked on Mon 28 Apr 2025 01:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:aa:46:0e:2b:ee:eb:f5:9f:62:56:a3:9a:0f:a0:59:88:60:67:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959
        Validity
            Not Before: Apr 28 00:59:17 2025 GMT
            Not After : Apr 27 01:04:17 2026 GMT
        Subject: CN=26338F2944246D08D4C020A3FBB14FBF6673AC48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:29:88:32:db:26:11:0d:7d:4b:8e:2d:53:d7:
                    13:6f:5e:d7:8b:32:5d:1d:3b:f9:29:2c:b2:0d:aa:
                    a5:e3:0c:64:99:51:c3:10:f4:43:a0:db:1b:d2:be:
                    52:4f:14:27:d8:3d:7a:cf:f2:a9:a7:cf:aa:01:09:
                    99:01:96:eb:a4:12:d4:0a:bf:52:07:b0:3f:df:24:
                    27:40:61:09:ae:cf:9c:8c:d5:ee:ff:e7:24:3e:95:
                    b8:82:3e:8a:dc:03:3e:7e:6a:06:47:07:46:00:55:
                    7c:55:a1:c6:9a:17:c2:f8:33:8c:40:24:35:1c:14:
                    89:b2:00:c0:2f:36:ef:94:48:d9:24:32:5f:ff:b1:
                    b4:0a:23:09:ab:4b:af:14:37:bf:c9:6b:92:13:be:
                    2a:1e:54:bc:12:56:5f:95:91:c9:53:be:bd:b4:91:
                    57:6c:3c:2b:d3:04:d1:c0:e9:47:19:74:5d:f1:af:
                    65:dd:68:2b:28:1f:b5:1b:d4:14:46:95:bb:a7:07:
                    2f:af:b3:6e:cb:73:40:16:e8:2f:0f:ff:c0:ae:60:
                    e6:5e:96:5b:ed:1b:80:9a:b3:ee:1a:73:ea:5d:75:
                    59:5b:4b:73:01:5e:6c:79:2a:2c:5a:ba:b7:bb:6e:
                    87:e6:c5:54:06:2e:af:91:55:78:92:65:56:8b:73:
                    5c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:33:8F:29:44:24:6D:08:D4:C0:20:A3:FB:B1:4F:BF:66:73:AC:48
            X509v3 Authority Key Identifier:
                keyid:3B:A3:FB:89:3D:83:8A:15:71:8A:5B:C7:15:75:0C:ED:89:9E:FD:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3BA3FB893D838A15718A5BC715750CED899EFD1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3430303a3a2f34382d3438203d3e20343031363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ca0:400::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:70:b2:f1:26:df:10:bd:92:96:df:38:7a:20:f6:e9:27:cb:
         53:2b:98:ea:12:a1:df:e5:3b:1f:da:ec:d0:f5:3d:e5:eb:c6:
         d6:68:54:d0:ec:b3:b7:84:cf:f7:97:ca:55:ad:8d:56:96:28:
         9a:59:9c:96:53:29:83:f2:19:b0:a0:0c:df:c6:df:ad:4d:b7:
         11:9c:ba:f5:6f:19:ac:1a:cc:ff:38:56:ec:d5:86:50:7f:d7:
         66:a8:31:c2:95:7a:5b:0a:06:bc:3c:77:05:11:d3:16:17:eb:
         bf:e7:4a:2b:92:e5:7c:cf:ac:77:e4:4f:2b:25:25:10:b4:a1:
         fd:9c:ea:79:76:94:a9:b1:31:06:0d:c9:77:f1:7c:b2:3a:b5:
         32:c0:7e:6a:0c:ef:4c:d4:9f:30:3d:8f:bb:42:19:0e:50:f2:
         5f:41:0b:9d:d0:e9:5d:15:5c:8f:5b:f4:ef:0f:4b:38:97:9f:
         b8:bb:fa:ec:b8:4a:72:6d:f4:a4:83:8c:3f:7f:07:c3:1c:25:
         3e:5e:97:23:50:96:df:0f:44:18:99:21:ad:58:73:fa:1a:9b:
         91:2c:25:cf:ed:b5:2e:58:c4:0d:4e:c5:b2:72:d4:af:d2:51:
         60:db:ff:7f:44:9e:f1:06:de:6b:a5:25:74:e6:55:56:00:9e:
         e2:4a:28:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----