Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3630303a3a2f34382d3438203d3e20343031363832.roa
File:                     323630343a6361303a3630303a3a2f34382d3438203d3e20343031363832.roa (raw, json)
Hash identifier:          smjxii4q3XKKLuw5bCDXV5+zWbrjtbrre93cktwPBUU=
Subject key identifier:   BD:97:A9:EF:69:4D:15:3B:84:DF:4E:E1:B1:E7:67:1C:22:6A:37:5E
Certificate issuer:       /CN=e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959
Certificate serial:       62A442C5DFD2E0895ADEFADFB95816B7F4628CCB
Authority key identifier: 3B:A3:FB:89:3D:83:8A:15:71:8A:5B:C7:15:75:0C:ED:89:9E:FD:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3630303a3a2f34382d3438203d3e20343031363832.roa
Signing time:             Mon 28 Apr 2025 01:04:37 +0000
ROA not before:           Mon 28 Apr 2025 00:59:37 +0000
ROA not after:            Mon 27 Apr 2026 01:04:37 +0000
asID:                     401682
IP address blocks:        2604:ca0:600::/48 maxlen: 48
Validation:               Failed, certificate revoked on Mon 28 Apr 2025 01:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a4:42:c5:df:d2:e0:89:5a:de:fa:df:b9:58:16:b7:f4:62:8c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959
        Validity
            Not Before: Apr 28 00:59:37 2025 GMT
            Not After : Apr 27 01:04:37 2026 GMT
        Subject: CN=BD97A9EF694D153B84DF4EE1B1E7671C226A375E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ff:12:fd:ab:21:b2:49:58:67:5a:20:5d:cf:
                    19:44:b9:a3:94:3b:65:10:43:3c:ce:42:ad:33:bf:
                    9d:00:94:a4:9f:8e:92:cf:ab:8c:63:55:6e:8e:dc:
                    62:7c:c7:16:9b:44:2e:54:f3:eb:42:22:30:dc:8e:
                    57:99:7a:e8:86:c6:7b:61:56:3c:a5:a9:dd:7f:e9:
                    6d:1c:18:4b:c7:83:22:fc:3e:0b:49:a3:d6:67:1b:
                    38:2e:e9:af:ce:dd:3c:ad:f2:92:42:82:80:21:b8:
                    b9:cb:86:e7:dc:ae:ea:64:e0:68:62:92:e4:60:96:
                    09:a9:4c:61:01:a8:d3:be:f3:dc:dd:fc:af:ad:84:
                    f9:34:18:98:bb:48:9d:de:66:4a:fc:28:6c:b5:84:
                    75:ca:81:af:98:52:20:c6:bf:d9:d3:b8:dc:cc:79:
                    b0:a3:ed:b5:07:9b:cc:61:74:d1:f8:28:48:fa:bc:
                    ce:79:53:72:9e:cb:06:14:81:1c:39:4e:2b:b2:19:
                    b2:ba:ce:80:03:cd:49:7c:5f:03:ad:de:2f:f0:59:
                    e1:94:6e:56:1b:08:d2:f5:03:58:b1:a6:91:3b:3d:
                    1e:f0:c6:ff:a3:d4:55:63:57:92:31:c1:33:c5:d0:
                    d0:38:f4:40:34:9d:89:a6:17:d3:b3:78:ec:4e:a5:
                    90:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:97:A9:EF:69:4D:15:3B:84:DF:4E:E1:B1:E7:67:1C:22:6A:37:5E
            X509v3 Authority Key Identifier:
                keyid:3B:A3:FB:89:3D:83:8A:15:71:8A:5B:C7:15:75:0C:ED:89:9E:FD:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3BA3FB893D838A15718A5BC715750CED899EFD1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3630303a3a2f34382d3438203d3e20343031363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ca0:600::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:5b:4d:16:d2:91:f6:d0:47:1a:bb:8b:62:30:1d:1d:b2:f9:
         52:6d:23:41:0d:4f:83:16:62:4a:64:f1:e1:0f:e4:f1:d0:03:
         92:44:7b:f5:8b:61:ec:e2:a6:26:1b:69:e6:90:eb:1d:c8:43:
         1a:e8:2d:0c:34:4a:65:80:58:d4:03:56:53:19:11:82:b8:01:
         ae:7c:b9:b6:c2:95:79:bd:24:38:99:24:54:37:84:ef:cb:11:
         ec:75:86:79:03:4c:e4:6c:65:d6:a5:9b:6a:b2:d8:11:e2:f9:
         72:0b:c1:df:02:19:a4:3f:12:c9:7e:c9:16:35:19:8e:0c:9d:
         06:36:45:e8:5b:f2:32:0b:d4:63:d6:6b:c3:89:79:ed:74:4d:
         37:b3:58:03:aa:42:d1:08:88:c9:7e:ab:50:85:8f:4c:f0:34:
         df:f2:86:0a:a2:8b:55:b9:19:c6:3b:68:97:d9:52:ac:09:b7:
         af:e9:0a:52:76:89:d5:b9:f4:51:33:a3:ec:b7:9c:8e:35:4b:
         7e:5c:a6:ec:ab:52:f0:d5:1a:de:76:c7:a9:f7:c5:a7:49:ff:
         42:db:59:85:69:8b:91:98:8b:d0:37:d5:d8:39:37:ad:fb:bd:
         fa:5f:7d:35:c0:f8:fe:8d:a5:29:2b:e2:f0:ef:5c:33:fe:19:
         a0:95:e0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----