Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333534393a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538313a333534393a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          YrH68HRkSsO9CREbAovfazRck2AZfNz+7rmZpLvc/9M=
Subject key identifier:   29:A1:8B:72:75:06:E7:DB:0C:AB:7B:18:BF:53:5F:AA:C9:5B:2D:79
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       109C64B5B84DCB908890F087DB0DA0C9E0EA4436
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333534393a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Fri 20 Jun 2025 06:26:12 +0000
ROA not before:           Fri 20 Jun 2025 06:21:12 +0000
ROA not after:            Fri 19 Jun 2026 06:26:12 +0000
asID:                     401507
IP address blocks:        2a14:7581:3549::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:9c:64:b5:b8:4d:cb:90:88:90:f0:87:db:0d:a0:c9:e0:ea:44:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jun 20 06:21:12 2025 GMT
            Not After : Jun 19 06:26:12 2026 GMT
        Subject: CN=29A18B727506E7DB0CAB7B18BF535FAAC95B2D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cc:9e:f7:39:93:8b:e6:4e:6a:51:14:af:af:
                    8e:bb:65:c3:fd:58:98:c9:ff:66:4b:24:73:34:e7:
                    68:5a:e4:87:d0:7e:b0:17:62:66:a0:b0:16:cd:2a:
                    2e:9d:2e:b5:88:9d:05:96:f2:3b:1b:c0:8c:be:d8:
                    11:17:ac:74:87:8a:0c:94:c6:41:27:d2:a8:98:da:
                    47:e4:03:5f:47:f5:8b:72:9f:0f:9f:c8:4c:c1:75:
                    18:ca:24:b7:5a:d1:af:49:7f:cf:4d:7f:c6:1b:a2:
                    43:e0:15:cc:bb:0c:97:d7:3f:99:81:bd:12:21:1a:
                    a7:52:85:44:a8:19:00:5f:79:ec:2e:1e:02:af:45:
                    d0:9b:ab:88:6a:f1:5c:b2:71:05:4f:e4:15:3d:e2:
                    cb:35:bd:f4:59:ff:43:09:d8:70:e9:ac:f9:16:73:
                    68:62:f5:6a:b2:93:d8:62:32:c9:bc:77:60:1b:c8:
                    da:51:b2:b0:56:14:86:f2:87:c1:d3:e7:e6:be:a2:
                    dc:20:7b:12:46:7f:57:ad:50:8b:b5:eb:59:e5:20:
                    b7:94:21:25:8a:4b:1c:ad:95:fe:64:c4:f3:4e:1c:
                    36:f4:b9:66:be:81:32:c3:5d:dc:11:cb:18:56:8b:
                    67:c3:ec:df:93:b3:50:37:39:a6:9a:4f:e3:93:d2:
                    e1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A1:8B:72:75:06:E7:DB:0C:AB:7B:18:BF:53:5F:AA:C9:5B:2D:79
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333534393a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:3549::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:84:2d:ad:1f:92:80:83:bc:4e:fb:93:6d:a2:f0:00:64:ad:
         c5:7e:5a:29:11:65:fe:96:3e:a4:a8:58:97:a0:df:81:95:d2:
         61:fe:73:f5:a9:d9:37:9d:bc:39:0f:73:59:7a:8a:f5:e7:0d:
         eb:b0:4c:48:63:45:30:25:92:22:35:5a:c3:11:e0:b0:3e:da:
         0c:1b:fd:50:7a:ed:69:3b:4f:a5:6b:9e:3a:f0:52:d0:a8:8e:
         e3:50:2a:ee:86:e6:7b:90:9c:ed:a9:63:ae:b7:a8:c8:98:e8:
         18:5e:9b:23:cc:c3:00:ca:dc:a4:77:44:67:af:58:76:57:fc:
         04:a2:ba:05:16:84:06:ba:4e:52:38:fc:ba:0b:4b:8d:03:13:
         b8:7b:1e:ea:0d:17:18:0e:cb:a2:ea:75:05:22:cb:85:4d:ba:
         1c:05:3b:74:69:c9:bc:9f:3d:17:fe:97:4d:fb:10:46:6f:a6:
         b5:30:c4:d6:66:00:7f:5f:93:67:38:a4:f0:66:a6:39:ca:11:
         f1:13:f7:0a:63:32:af:1a:f4:a2:d0:01:f3:e2:15:9d:24:aa:
         f0:ad:26:5a:23:da:39:7b:0b:c6:69:6f:95:6c:bd:98:29:ac:
         93:e7:54:69:52:f2:33:bd:b5:48:34:ed:3b:d2:3c:f3:9c:1c:
         c8:f6:dd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----