Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333533613a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538313a333533613a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          Y2Gkl8iUuKnxzqvrAdJwHcIiQS7eLT6RBPRSIax06/A=
Subject key identifier:   AA:9C:A9:FD:17:56:2C:57:16:7D:3E:80:FC:41:63:A6:56:64:A5:1F
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       70CBC623C21C3539CCF9E49876DC7345D1FC3C4E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333533613a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Fri 20 Jun 2025 06:26:07 +0000
ROA not before:           Fri 20 Jun 2025 06:21:07 +0000
ROA not after:            Fri 19 Jun 2026 06:26:07 +0000
asID:                     401507
IP address blocks:        2a14:7581:353a::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:cb:c6:23:c2:1c:35:39:cc:f9:e4:98:76:dc:73:45:d1:fc:3c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jun 20 06:21:07 2025 GMT
            Not After : Jun 19 06:26:07 2026 GMT
        Subject: CN=AA9CA9FD17562C57167D3E80FC4163A65664A51F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:43:ac:3e:19:ab:b8:d3:0e:21:8f:3b:2d:cd:
                    26:3d:b0:28:44:c2:fd:a9:5d:8b:2c:a7:6b:d0:9b:
                    f2:58:d1:0e:d7:7b:00:b7:53:4b:47:bc:bc:f6:58:
                    c0:ef:fe:2d:b9:98:c5:4c:1b:82:f1:6a:2b:da:dc:
                    8c:64:0b:64:13:53:8b:bf:65:92:cc:05:2f:86:7a:
                    b7:c0:15:71:99:a6:8a:68:d2:11:20:c9:f0:37:18:
                    da:43:de:9e:8f:87:eb:23:a3:bc:da:f3:76:9c:8e:
                    ed:55:01:0d:d6:cd:94:d4:9a:72:b4:74:a5:fc:97:
                    49:e4:0a:da:ed:30:c4:b7:7f:93:46:bd:d2:69:63:
                    25:22:53:05:5a:fe:66:92:a4:e7:5b:d5:67:73:86:
                    23:49:19:80:0b:d7:e3:ba:a2:c9:e9:15:06:4d:ea:
                    21:b8:36:e8:4d:3a:ab:32:9e:c2:4d:a2:4d:6a:00:
                    91:5f:2a:cf:76:c1:72:61:35:33:2a:11:11:ab:88:
                    40:14:db:7e:ec:c8:cd:43:a9:c1:ea:81:a4:8e:21:
                    d6:45:f3:35:6a:66:79:f5:05:13:a2:33:96:45:6b:
                    5d:e6:1a:51:18:2a:c3:bc:80:25:55:98:0c:68:b8:
                    8e:0c:6c:2f:b8:43:5b:09:78:03:4e:e0:06:d9:3e:
                    0a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9C:A9:FD:17:56:2C:57:16:7D:3E:80:FC:41:63:A6:56:64:A5:1F
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333533613a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:353a::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:83:94:db:12:75:a5:cd:c5:32:ac:80:21:ad:0b:9b:b7:aa:
         67:3a:45:b6:06:90:3c:07:d8:d3:b2:d7:26:24:79:98:ee:3f:
         8f:53:a2:21:20:e6:c1:1b:2d:c5:85:01:01:91:bd:83:c6:2c:
         55:7a:d6:27:7e:66:29:a8:40:8a:f2:aa:26:20:6c:9c:50:0f:
         9e:ee:41:f1:91:e3:1a:6b:51:db:48:7d:c4:c0:ba:4e:e7:67:
         c3:53:9b:77:69:58:cb:6b:44:9c:4a:e7:96:51:0e:d5:f4:6f:
         30:3f:73:8e:65:49:f4:f2:c3:05:5b:1c:0e:ed:f2:cd:04:b9:
         50:93:23:83:dd:39:0e:99:b3:73:44:bf:a9:22:99:6b:46:33:
         7a:a2:d5:b4:9b:46:21:36:2f:bf:e5:f5:48:79:5c:00:07:4b:
         bd:77:16:ea:6c:08:f1:d7:35:25:d2:cf:c0:1d:7e:62:64:66:
         8f:55:e6:9b:a4:d0:66:4f:6d:4a:cf:5a:a2:b4:df:29:30:fa:
         51:ea:a1:a4:e7:e6:ec:3e:4e:29:f1:43:c4:e7:0f:c2:22:7f:
         82:0f:87:23:80:f9:7d:32:d4:a6:fb:32:ed:7f:5a:3c:3b:ba:
         f2:13:b3:0d:3c:7c:ab:5f:0f:4b:94:47:f5:63:ba:da:47:67:
         3d:b7:74:be
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUcMvGI8IcNTnM+eSYdtxzRdH8PE4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA2MjAwNjIxMDdaFw0yNjA2MTkwNjI2MDdaMDMxMTAvBgNV
BAMTKEFBOUNBOUZEMTc1NjJDNTcxNjdEM0U4MEZDNDE2M0E2NTY2NEE1MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyQ6w+Gau40w4hjzstzSY9sChE
wv2pXYssp2vQm/JY0Q7XewC3U0tHvLz2WMDv/i25mMVMG4Lxaiva3IxkC2QTU4u/
ZZLMBS+GerfAFXGZpopo0hEgyfA3GNpD3p6Ph+sjo7za83acju1VAQ3WzZTUmnK0
dKX8l0nkCtrtMMS3f5NGvdJpYyUiUwVa/maSpOdb1WdzhiNJGYAL1+O6osnpFQZN
6iG4NuhNOqsynsJNok1qAJFfKs92wXJhNTMqERGriEAU237syM1DqcHqgaSOIdZF
8zVqZnn1BROiM5ZFa13mGlEYKsO8gCVVmAxouI4MbC+4Q1sJeANO4AbZPgqjAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUqpyp/RdWLFcWfT6A/EFjplZkpR8wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzEzYTMzMzUzMzYxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gTU6
MA0GCSqGSIb3DQEBCwUAA4IBAQB8g5TbEnWlzcUyrIAhrQubt6pnOkW2BpA8B9jT
stcmJHmY7j+PU6IhIObBGy3FhQEBkb2DxixVetYnfmYpqECK8qomIGycUA+e7kHx
keMaa1HbSH3EwLpO52fDU5t3aVjLa0ScSueWUQ7V9G8wP3OOZUn08sMFWxwO7fLN
BLlQkyOD3TkOmbNzRL+pIplrRjN6otW0m0YhNi+/5fVIeVwAB0u9dxbqbAjx1zUl
0s/AHX5iZGaPVeabpNBmT21Kz1qitN8pMPpR6qGk5+bsPk4p8UPE5w/CIn+CD4cj
gPl9MtSm+zLtf1o8O7ryE7MNPHyrXw9LlEf1Y7raR2c9t3S+
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:35 2025 by rpki-client