Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333533333a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538313a333533333a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          K1CkP71J8IDD6EsR/LXH3tk1oYxliT9z9TCp1tBk4pk=
Subject key identifier:   7B:7F:70:53:E1:15:B8:48:BD:47:C4:35:71:55:C7:D8:FA:5F:CE:6D
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       2680DF103ABE3B0E3CA8DC848D685FE283B71DE4
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333533333a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Fri 20 Jun 2025 06:24:42 +0000
ROA not before:           Fri 20 Jun 2025 06:19:42 +0000
ROA not after:            Fri 19 Jun 2026 06:24:42 +0000
asID:                     401507
IP address blocks:        2a14:7581:3533::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:80:df:10:3a:be:3b:0e:3c:a8:dc:84:8d:68:5f:e2:83:b7:1d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jun 20 06:19:42 2025 GMT
            Not After : Jun 19 06:24:42 2026 GMT
        Subject: CN=7B7F7053E115B848BD47C4357155C7D8FA5FCE6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:92:5a:37:2f:96:5e:d5:68:bf:d1:a3:fc:97:
                    2c:44:26:06:15:96:46:c4:fe:b5:aa:e5:8d:14:e4:
                    d7:9e:84:6d:77:c4:9f:86:41:d2:ad:2b:71:ff:b3:
                    60:eb:80:e5:f1:f5:5c:59:21:ff:c8:bb:79:39:7f:
                    9e:53:54:04:6d:50:b7:14:3a:0b:b6:95:2c:fa:4f:
                    f2:c7:90:d9:78:b3:12:37:80:21:b5:71:9a:ad:f9:
                    ff:21:c2:a1:49:e5:ba:a7:30:99:f6:51:7c:b8:42:
                    78:d3:18:0b:37:2e:2c:f5:77:4b:08:5a:36:e0:fd:
                    e2:46:2b:f7:6a:f2:c6:f4:c4:7a:81:29:dd:dc:30:
                    f6:b6:a8:8e:b4:12:8f:a0:07:b9:20:e3:52:ca:69:
                    81:9e:d9:72:db:19:4b:e4:6c:a6:bf:c6:5c:f3:9f:
                    5a:fa:9f:bd:29:7f:b1:e4:04:f6:b8:bb:0f:20:ae:
                    d0:c5:56:16:ea:fe:2c:f5:59:f9:54:95:e1:02:09:
                    24:38:8e:94:15:b0:f7:35:59:34:f1:0c:d7:59:dd:
                    c3:93:14:fc:44:44:b2:b8:9f:a3:f7:96:6e:e4:72:
                    57:b3:1e:d0:54:82:8e:28:ed:7c:ff:92:45:15:3e:
                    ab:1f:6d:2f:bc:60:1f:74:a4:69:a7:88:ea:e6:c7:
                    70:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7F:70:53:E1:15:B8:48:BD:47:C4:35:71:55:C7:D8:FA:5F:CE:6D
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333533333a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:3533::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:4c:b5:2e:83:82:00:8e:e0:99:69:72:16:52:0d:9e:c3:11:
         cd:a4:81:b8:96:3e:89:07:65:fe:d2:cb:c3:15:ee:aa:d2:00:
         d4:21:0a:b3:85:c4:58:b4:0a:22:b6:2c:36:a1:53:cf:ea:2d:
         25:a4:61:f5:88:af:07:66:5c:70:d6:c9:87:3b:f7:b4:36:5c:
         81:de:0e:6a:0d:5e:e5:14:0e:46:21:bc:b9:77:cf:6b:55:ad:
         72:15:93:17:a3:38:69:5a:0b:9a:cd:7c:6e:b2:a9:67:64:6d:
         de:49:4e:4f:b0:98:c3:18:a0:04:dc:14:49:ca:1d:cf:92:d7:
         37:0d:32:0a:9b:76:b4:65:fb:44:09:e9:fa:ec:2e:e2:78:19:
         e7:a6:a9:16:02:57:83:5b:a4:e4:2c:53:6c:4d:5c:7f:9a:61:
         d8:25:e3:30:e0:54:5c:80:74:33:29:fe:1c:ac:cf:44:43:d8:
         ce:0c:95:cf:b2:73:63:e2:a5:f1:66:ea:e3:34:30:57:79:b5:
         83:bd:25:6c:c4:9c:e8:1a:e3:bc:5c:87:88:e0:d4:20:3d:37:
         a7:f9:c6:66:89:2f:56:c6:da:36:be:23:89:c8:8a:ea:f8:5e:
         29:73:9b:2d:e1:ff:7a:cc:97:3f:1d:80:86:a7:ba:3b:43:f0:
         00:c0:de:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:28:44 2025 by rpki-client