Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530383a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538313a333530383a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          HgNgPCJsXYjtYwnNmPl0AgAwbnVrhaWovmXv0OSEhx0=
Subject key identifier:   73:A7:2F:C0:51:FF:98:E3:51:2E:C9:C5:6C:CC:ED:FB:F1:53:42:8D
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       60958DF45B5BF54B07D34058EF1E5702E649231C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530383a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Fri 20 Jun 2025 06:26:07 +0000
ROA not before:           Fri 20 Jun 2025 06:21:07 +0000
ROA not after:            Fri 19 Jun 2026 06:26:07 +0000
asID:                     401507
IP address blocks:        2a14:7581:3508::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:95:8d:f4:5b:5b:f5:4b:07:d3:40:58:ef:1e:57:02:e6:49:23:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jun 20 06:21:07 2025 GMT
            Not After : Jun 19 06:26:07 2026 GMT
        Subject: CN=73A72FC051FF98E3512EC9C56CCCEDFBF153428D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:8e:9c:c1:bb:dd:ac:9f:71:e4:55:fc:13:
                    38:ae:10:91:a0:23:92:9a:80:54:00:d7:54:06:37:
                    f6:49:6d:aa:32:a7:c2:06:9f:b2:f9:29:8d:2c:67:
                    80:f5:34:90:ae:7c:bc:fc:6d:7d:27:e0:e8:45:ae:
                    d4:64:fc:f7:33:f7:d1:28:ee:e1:2b:e2:5b:fa:6c:
                    38:12:0e:dd:22:ce:aa:43:d3:a7:7d:01:6e:0b:60:
                    66:75:0f:1b:7b:92:e4:32:ef:64:4a:ee:c9:cd:73:
                    a6:ee:55:9a:29:18:fd:60:be:ff:41:a0:fd:8f:b9:
                    db:cd:5c:32:b3:99:26:34:9a:6a:1d:17:20:39:72:
                    e8:49:07:0b:96:06:9a:9b:be:de:62:90:91:b1:59:
                    c5:0d:b9:62:93:85:15:73:17:91:89:08:22:74:98:
                    fc:59:21:0a:74:c7:3a:df:3f:4b:a4:08:f1:74:28:
                    c2:37:c2:8a:a9:ff:33:b1:ab:74:d8:38:de:29:d9:
                    b8:ec:d7:c7:52:6e:a8:b3:f1:91:d1:99:34:8a:9b:
                    20:73:ae:5e:63:dd:ba:d5:25:01:e7:e6:31:37:0d:
                    d1:f4:5e:22:e6:14:e9:d5:dc:62:e6:2d:35:d9:c9:
                    ea:91:c9:60:80:12:e1:8e:d0:a4:ec:9a:b1:63:1d:
                    29:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A7:2F:C0:51:FF:98:E3:51:2E:C9:C5:6C:CC:ED:FB:F1:53:42:8D
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530383a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:3508::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:d9:5e:52:f8:83:ef:9b:d0:52:ce:78:9b:c3:a4:94:67:5a:
         02:0a:33:c3:8e:5b:4e:14:2a:66:04:49:5c:4d:fc:65:dc:26:
         5a:6d:8a:88:3e:42:0e:e9:52:bd:cd:fb:6d:0a:26:56:b6:c2:
         b7:41:9a:8f:15:de:01:59:f3:ec:93:3e:48:d7:f0:94:0a:e1:
         9b:c4:f3:5d:ee:da:67:de:68:c5:78:b4:c4:c9:eb:29:ec:09:
         a3:42:28:8b:82:27:05:9d:9a:1a:22:d9:69:51:f8:9e:77:e8:
         04:98:28:c3:67:b1:09:37:61:bb:28:40:15:3c:05:7b:c2:b9:
         1a:38:83:2d:22:a9:e1:37:f1:9f:3d:7e:07:0c:db:5e:5b:07:
         6d:1f:93:d0:bb:99:99:55:4d:0a:6c:42:7c:31:7c:a2:af:40:
         e4:b7:0b:a8:30:b3:a1:18:27:b5:93:64:8a:09:b0:7b:09:c6:
         63:56:3e:3a:0c:9b:7b:a3:24:a0:60:9d:73:fa:33:5b:11:c4:
         52:27:0b:e8:b8:d4:86:e5:64:3a:7c:9f:b2:ca:a0:96:59:7f:
         6c:de:fc:d0:87:a9:90:dd:72:01:d3:d7:d8:b1:f4:bb:aa:2b:
         6f:61:af:07:46:05:f7:d6:33:9d:66:5b:f1:4c:27:c9:61:39:
         15:da:4b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----