Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530343a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538313a333530343a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          4kYiSCO1+2eoSPGdMAseuo8J9RDL6E+Vtyrtdtccf0A=
Subject key identifier:   DD:D5:3C:AE:49:1D:B4:EB:1D:64:00:33:FA:11:0F:8D:4C:64:99:73
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       158D36650C30CB992F3A94F21B7905041B652442
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530343a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Fri 20 Jun 2025 06:24:41 +0000
ROA not before:           Fri 20 Jun 2025 06:19:41 +0000
ROA not after:            Fri 19 Jun 2026 06:24:41 +0000
asID:                     401507
IP address blocks:        2a14:7581:3504::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:8d:36:65:0c:30:cb:99:2f:3a:94:f2:1b:79:05:04:1b:65:24:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jun 20 06:19:41 2025 GMT
            Not After : Jun 19 06:24:41 2026 GMT
        Subject: CN=DDD53CAE491DB4EB1D640033FA110F8D4C649973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:b6:29:f4:f7:73:d6:03:40:32:66:71:83:
                    5c:cc:1f:36:6b:e1:b5:f2:25:d9:8a:c1:af:4b:69:
                    e6:94:a6:3a:c5:4e:2e:5d:d6:01:86:2a:cd:0c:1f:
                    e3:1d:09:03:72:8d:4d:f4:8c:61:50:69:2d:af:08:
                    d4:b5:52:d7:9f:05:5b:03:42:f2:bf:4d:25:f2:dd:
                    8e:82:89:07:36:1d:f2:29:f2:c3:d7:1f:ac:67:05:
                    9b:18:c5:a4:b3:d5:6f:17:2a:7c:aa:11:6d:dd:7a:
                    da:28:24:a8:0b:24:8d:17:10:d6:15:06:e4:2d:89:
                    9a:60:e1:78:f0:a0:dc:72:b1:92:7c:e1:0f:0e:88:
                    91:d1:02:b2:9d:91:56:82:25:4a:d2:6c:93:31:41:
                    45:83:dd:7b:7a:4b:bf:f0:a7:67:c1:09:d2:4d:32:
                    eb:58:52:75:06:74:b6:4e:5f:f1:4d:03:d9:27:71:
                    04:85:c9:30:e7:dd:41:f9:f5:09:61:66:ad:cd:a7:
                    55:97:e5:c1:0f:34:61:f8:ca:76:d7:12:a1:0c:73:
                    e3:4a:31:87:f2:2c:5e:91:9f:c9:8c:e6:5c:d1:23:
                    18:b4:66:0f:6f:5d:03:1e:1f:46:18:2b:88:8d:32:
                    00:19:2a:6a:a8:a2:84:ce:50:d6:d5:f2:ae:f6:3a:
                    df:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D5:3C:AE:49:1D:B4:EB:1D:64:00:33:FA:11:0F:8D:4C:64:99:73
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530343a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:3504::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:da:85:f4:85:e3:e1:6d:6d:b8:90:96:97:35:e9:29:d8:4d:
         e7:38:fd:e3:9c:25:b3:24:9b:12:fa:3a:32:8f:b1:9c:97:f0:
         c7:ad:16:0e:86:e5:0d:4c:c2:94:30:91:a2:81:db:1c:50:e4:
         bf:b9:0d:e0:0b:79:9d:6a:7a:3c:24:fe:b8:8e:14:01:7b:ff:
         cd:e4:8c:1a:36:5c:7a:7d:eb:f4:59:77:ce:68:36:e4:35:34:
         29:f5:48:3a:ca:a0:f7:82:5d:85:ed:5a:dd:b7:ef:d5:b6:bb:
         ed:27:0a:7c:4c:bc:16:50:a6:d6:72:39:30:2f:47:ab:50:58:
         1c:f7:a4:07:7f:7b:01:bb:64:10:be:f7:68:53:34:da:05:f4:
         89:4d:80:f4:bd:0b:4a:b7:38:fb:ea:e9:e4:15:71:df:d2:d2:
         cc:32:20:4c:6a:b8:fa:8a:0c:dc:fb:98:c0:a9:18:5a:f3:52:
         30:9e:6b:e9:b4:3a:9b:08:4b:2d:0e:f8:2b:19:17:6f:e5:67:
         15:02:39:4a:be:10:1d:46:3c:f1:94:42:56:2a:df:41:a0:7a:
         a6:64:f0:74:81:e9:46:98:66:ad:67:46:fd:84:63:3f:03:4b:
         dd:d5:97:de:7f:86:da:04:d3:75:b4:d9:42:ff:da:e9:72:91:
         f7:49:d7:25
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUFY02ZQwwy5kvOpTyG3kFBBtlJEIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA2MjAwNjE5NDFaFw0yNjA2MTkwNjI0NDFaMDMxMTAvBgNV
BAMTKERERDUzQ0FFNDkxREI0RUIxRDY0MDAzM0ZBMTEwRjhENEM2NDk5NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9SLYp9Pdz1gNAMmZxg1zMHzZr
4bXyJdmKwa9LaeaUpjrFTi5d1gGGKs0MH+MdCQNyjU30jGFQaS2vCNS1UtefBVsD
QvK/TSXy3Y6CiQc2HfIp8sPXH6xnBZsYxaSz1W8XKnyqEW3detooJKgLJI0XENYV
BuQtiZpg4XjwoNxysZJ84Q8OiJHRArKdkVaCJUrSbJMxQUWD3Xt6S7/wp2fBCdJN
MutYUnUGdLZOX/FNA9kncQSFyTDn3UH59QlhZq3Np1WX5cEPNGH4ynbXEqEMc+NK
MYfyLF6Rn8mM5lzRIxi0Zg9vXQMeH0YYK4iNMgAZKmqoooTOUNbV8q72Ot/JAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQU3dU8rkkdtOsdZAAz+hEPjUxkmXMwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzEzYTMzMzUzMDM0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gTUE
MA0GCSqGSIb3DQEBCwUAA4IBAQBq2oX0hePhbW24kJaXNekp2E3nOP3jnCWzJJsS
+joyj7Gcl/DHrRYOhuUNTMKUMJGigdscUOS/uQ3gC3mdano8JP64jhQBe//N5Iwa
Nlx6fev0WXfOaDbkNTQp9Ug6yqD3gl2F7Vrdt+/VtrvtJwp8TLwWUKbWcjkwL0er
UFgc96QHf3sBu2QQvvdoUzTaBfSJTYD0vQtKtzj76unkFXHf0tLMMiBMarj6igzc
+5jAqRha81IwnmvptDqbCEstDvgrGRdv5WcVAjlKvhAdRjzxlEJWKt9BoHqmZPB0
gelGmGatZ0b9hGM/A0vd1Zfef4baBNN1tNlC/9rpcpH3Sdcl
-----END CERTIFICATE-----