Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333532363a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538313a333532363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          9OKD7ukUNJQObZJQjcbkXFsHBoRKUNx1XGNDfjVOU9Q=
Subject key identifier:   55:AB:BF:B2:74:2B:4E:F0:F4:EB:14:23:8C:EC:FE:AC:F6:4C:19:CA
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       09FC6B3FD5F569D81F5BA5D90BCE22A201356F3E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333532363a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 20 Jun 2025 06:24:46 +0000
ROA not before:           Fri 20 Jun 2025 06:19:46 +0000
ROA not after:            Fri 19 Jun 2026 06:24:46 +0000
asID:                     16909
IP address blocks:        2a14:7581:3526::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fc:6b:3f:d5:f5:69:d8:1f:5b:a5:d9:0b:ce:22:a2:01:35:6f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jun 20 06:19:46 2025 GMT
            Not After : Jun 19 06:24:46 2026 GMT
        Subject: CN=55ABBFB2742B4EF0F4EB14238CECFEACF64C19CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:80:a6:2d:f0:72:4f:89:74:ab:58:08:a7:ed:
                    86:9f:6a:ed:9f:bd:e2:83:d4:b1:5d:47:68:7f:42:
                    78:00:25:a9:9d:5f:6c:b7:cf:ee:69:fc:0b:66:c5:
                    3f:43:7e:8b:37:39:52:4a:e5:f8:c7:2b:82:ab:43:
                    7e:10:65:04:2e:83:de:35:0b:e8:55:d7:b1:b9:c0:
                    c5:21:25:5e:ef:b4:61:02:ce:0b:86:34:66:bc:2f:
                    3b:86:d1:fc:8e:15:cc:da:27:d0:60:e0:60:9d:f8:
                    be:c3:cb:af:bd:a6:ca:15:1d:f4:a2:46:2d:82:8e:
                    b6:e3:9c:7d:20:88:f0:17:d4:3d:ff:a4:cf:0f:f8:
                    83:68:34:f6:f5:7d:79:74:dd:5e:35:9b:31:1e:5a:
                    70:88:47:fe:26:61:7a:dc:45:3d:08:bb:84:5a:ad:
                    96:55:1b:11:ef:a6:7a:35:e9:af:6b:8d:26:9c:c4:
                    2b:af:e3:2a:0d:4f:99:e6:7f:ae:11:f1:dd:83:9d:
                    84:02:92:8f:6f:77:4a:d9:21:12:56:69:2d:a9:e2:
                    91:14:00:54:d4:15:1a:12:8a:43:48:53:1c:86:61:
                    ef:7c:27:3f:47:fb:b0:80:cc:5a:44:7b:f4:fc:9f:
                    3b:3c:cb:d2:7b:d6:fc:78:b8:19:5f:9e:9b:52:24:
                    18:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AB:BF:B2:74:2B:4E:F0:F4:EB:14:23:8C:EC:FE:AC:F6:4C:19:CA
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333532363a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:3526::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:60:8a:a6:06:ba:1d:10:07:7b:44:8d:e1:ae:58:a9:05:ea:
         eb:03:13:08:51:6c:81:d5:ac:9f:b1:f1:24:98:52:de:ed:76:
         20:91:2d:75:5a:97:f4:ce:99:91:98:ba:4d:75:d4:f7:67:ba:
         26:57:7c:3a:84:6d:11:58:dc:bb:26:9f:24:c8:2e:5e:3d:a9:
         b5:40:4c:dd:a0:be:3d:1f:a9:a8:e2:d7:f6:92:1c:da:c1:c2:
         3e:b8:61:8c:d4:38:a9:55:4f:9a:e6:99:4c:9c:20:c5:1c:67:
         e6:9a:b5:8d:d6:52:78:2e:7a:73:8a:9b:4e:a0:77:3d:b3:7b:
         c0:a5:8b:b9:b5:0e:90:7d:34:e3:7d:b3:69:f9:f9:a7:e1:a4:
         88:17:b3:0c:76:b6:1c:ba:df:7b:1c:e3:7b:d0:7d:c3:fe:1e:
         75:1c:8a:60:0c:d8:f0:d2:66:b3:37:a5:cb:85:72:40:7a:49:
         54:3b:19:98:03:63:8b:7b:7f:90:f8:66:19:65:4d:17:4f:a0:
         11:8a:c8:5d:d6:a4:91:0e:27:13:ab:9a:5e:d5:85:5d:2d:e3:
         8c:b9:f2:ab:b8:93:ad:ab:72:33:81:31:bf:fe:95:84:55:41:
         a0:46:35:4d:73:dc:18:67:34:53:c9:a4:95:7a:6a:02:2f:b7:
         9e:76:21:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----