Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333533383a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538313a333533383a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          VBhOXcLWZisKKfefL8vmh6x79pn5o3+EoBDDgdutfoA=
Subject key identifier:   70:A0:97:D7:2E:9E:E3:02:E4:FC:E0:D2:80:33:A8:4A:18:4E:A6:10
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       0CCD75DA60216C25DD8752499B37580CEA6FE694
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333533383a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Fri 20 Jun 2025 06:24:42 +0000
ROA not before:           Fri 20 Jun 2025 06:19:42 +0000
ROA not after:            Fri 19 Jun 2026 06:24:42 +0000
asID:                     401507
IP address blocks:        2a14:7581:3538::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:cd:75:da:60:21:6c:25:dd:87:52:49:9b:37:58:0c:ea:6f:e6:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jun 20 06:19:42 2025 GMT
            Not After : Jun 19 06:24:42 2026 GMT
        Subject: CN=70A097D72E9EE302E4FCE0D28033A84A184EA610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a6:da:02:4f:0d:3a:ba:ef:18:79:8d:be:7c:
                    18:87:6b:27:23:67:37:8b:2b:e1:70:02:01:07:cd:
                    47:f9:d7:0b:21:ea:9a:2d:50:8a:47:68:2a:b9:d8:
                    3b:cb:f1:51:18:6a:1e:58:8d:82:dc:be:81:8b:89:
                    6c:ca:57:dc:b0:b0:3f:68:a0:bc:fd:86:eb:da:f2:
                    1f:35:d5:d9:cc:d9:75:83:44:93:09:3c:2d:79:3c:
                    d4:80:9b:1e:59:b8:83:5a:75:74:a8:62:8e:82:d1:
                    97:90:8e:bf:bb:b6:22:22:41:81:10:41:73:13:cb:
                    94:81:d3:4e:40:cc:c3:9e:fd:78:86:d3:7f:05:35:
                    a7:77:97:67:e0:be:1d:aa:05:dd:be:fe:7e:44:a2:
                    c0:57:5d:7e:82:24:9e:b3:5d:18:80:e9:b3:aa:13:
                    ed:d7:c4:aa:66:eb:a8:16:d6:1c:78:41:ad:94:67:
                    6e:e1:93:56:e3:fc:6e:88:b0:df:0b:ca:7a:86:ba:
                    e1:c0:5f:35:29:a7:a0:26:f3:7a:7a:09:bd:61:b1:
                    c3:3a:87:1f:ae:ed:58:1d:bf:4a:88:81:b4:cb:f8:
                    aa:7e:6c:d3:5b:72:fb:06:25:1d:da:a5:7c:6a:19:
                    02:c2:47:37:bd:f5:84:37:47:f8:a6:74:f9:83:2b:
                    13:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A0:97:D7:2E:9E:E3:02:E4:FC:E0:D2:80:33:A8:4A:18:4E:A6:10
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333533383a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:3538::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:7e:5a:b6:21:f9:41:c5:e0:3f:70:d0:e9:06:4c:83:7f:14:
         d7:1c:84:7a:c4:2d:c1:80:cb:b1:8d:bc:4c:a9:cc:1b:d3:22:
         85:9d:c5:f1:5a:bd:a9:ac:7c:a5:73:cf:86:30:2b:5a:c2:a1:
         91:dc:77:8d:e1:96:73:95:ac:67:e1:d0:3e:53:f7:c7:02:33:
         01:bc:6e:82:55:be:44:50:28:b5:b5:f1:d9:17:3d:c4:f4:ef:
         6c:80:0a:1b:59:d5:95:e0:0a:5b:e8:f3:88:e6:50:b3:77:87:
         ce:f6:f3:ec:23:70:6f:89:d7:87:3a:1f:b6:8f:f0:73:59:d1:
         f2:0f:14:da:d9:f4:d0:c1:30:82:b3:2e:c8:11:92:82:d5:6d:
         aa:41:dc:41:e7:28:0d:80:c6:2d:84:9c:a6:86:d3:01:dd:18:
         aa:43:c1:72:b4:4c:c8:24:1f:02:84:f5:20:f3:27:f6:bd:58:
         3b:e1:fe:48:66:a9:4a:ab:15:d6:15:02:89:1b:ca:54:5b:6a:
         29:52:35:da:e4:fa:fc:3f:cf:60:7c:5f:af:ec:fe:16:23:cc:
         c9:e3:a3:ac:b4:8a:06:d2:45:41:af:32:39:17:f6:3e:7a:a4:
         11:77:18:14:ed:b5:e2:e0:79:1d:5b:b5:84:ee:d2:a7:8c:53:
         13:d4:73:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----