Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333533373a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538313a333533373a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          1fsXRvWeRZiRcJMQJ6P4+OwraN+fIGAg94wLbexJ8RY=
Subject key identifier:   14:2A:5E:7C:AE:7A:05:C8:BB:8E:6C:73:0C:63:FD:A4:2F:C4:51:C9
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       215D95671FD8A56B14C94D92666B17A393A9572A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333533373a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Fri 20 Jun 2025 06:26:05 +0000
ROA not before:           Fri 20 Jun 2025 06:21:05 +0000
ROA not after:            Fri 19 Jun 2026 06:26:05 +0000
asID:                     401507
IP address blocks:        2a14:7581:3537::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:5d:95:67:1f:d8:a5:6b:14:c9:4d:92:66:6b:17:a3:93:a9:57:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jun 20 06:21:05 2025 GMT
            Not After : Jun 19 06:26:05 2026 GMT
        Subject: CN=142A5E7CAE7A05C8BB8E6C730C63FDA42FC451C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8b:03:7c:16:48:a8:7c:e9:a1:b9:53:34:90:
                    8a:3d:b2:6e:c3:df:e3:4d:46:8a:0e:3a:6d:9e:ab:
                    fd:79:15:e7:b0:ba:d8:a0:3d:aa:f8:b1:c4:b2:a8:
                    b2:df:95:c5:5c:a2:91:79:16:e0:f9:0b:2b:ee:5b:
                    cd:77:3c:d4:b9:6c:ec:d0:fc:09:bb:5a:5c:44:1c:
                    6e:5f:c3:ee:0d:8e:4c:51:11:a1:e0:0c:f8:78:88:
                    b5:ce:d2:4a:97:4b:6e:ad:e9:f7:e6:3c:f3:68:9a:
                    85:90:49:46:fc:f6:4c:0b:eb:2a:49:74:3c:06:fb:
                    f4:9a:61:57:6f:11:d1:42:64:e6:0a:42:50:ab:3d:
                    fe:56:b8:6f:39:b9:9d:73:8d:28:ac:2d:0b:62:59:
                    30:69:de:b2:44:15:bd:ba:33:56:c1:ad:b1:83:de:
                    1f:90:64:5d:82:8f:1f:54:e5:38:9c:18:91:f6:a9:
                    99:4a:01:48:cc:32:77:39:3a:cf:06:db:26:5c:86:
                    a1:91:d0:07:86:82:3a:68:56:f7:e8:0d:26:75:4a:
                    dd:42:07:d2:f9:e2:11:e2:aa:2c:26:5b:98:76:44:
                    cd:12:19:d8:10:f8:81:38:3e:bd:cc:71:4a:58:ef:
                    91:e2:e7:91:2e:8d:f8:c8:42:64:44:e4:37:03:88:
                    3c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2A:5E:7C:AE:7A:05:C8:BB:8E:6C:73:0C:63:FD:A4:2F:C4:51:C9
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333533373a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:3537::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:43:c2:d3:33:60:4a:b9:57:3a:2c:5a:aa:92:44:37:80:c6:
         62:65:b6:78:2d:a2:f3:cb:ed:c2:e7:3e:ad:53:59:2a:d7:49:
         2f:e3:ac:0e:30:dd:85:85:f3:00:d6:db:5d:7d:24:5f:58:eb:
         be:48:3e:0e:0e:6e:eb:7e:92:dc:d3:cd:e1:57:ba:60:6a:d7:
         e5:bb:4a:20:d0:43:cc:7a:d6:50:14:1a:73:b9:9c:4d:ee:0b:
         f2:f3:f9:a9:43:d5:c0:8b:24:d9:54:27:d5:8b:27:ba:80:23:
         98:9c:c3:28:27:b7:44:a4:21:15:86:30:2b:0e:83:5b:a6:cb:
         cb:9c:1d:7e:39:d4:5a:5f:0d:06:a4:a6:7e:4a:4f:0a:ed:ac:
         8f:71:bb:1a:c0:fc:90:0b:f4:1a:d3:6f:44:29:2e:48:8d:b5:
         b6:f0:c9:07:3c:ae:b3:47:b6:04:30:ab:64:c5:fe:58:8c:69:
         cf:8e:6a:58:ef:14:fb:b8:80:68:56:1e:82:ad:10:e9:7d:69:
         c5:49:a3:9c:6e:64:e8:fa:ac:45:fd:b7:b3:85:4e:24:59:fd:
         d5:18:bf:16:93:d0:67:9f:5c:f6:c0:a8:ad:55:d6:fe:53:f5:
         61:b1:5a:7e:7c:25:f5:73:2b:39:8d:3a:df:24:ef:ae:0c:94:
         62:f7:98:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:53:32 2025 by rpki-client