Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333535313a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538313a333535313a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          VwKcKao+6LmBD9c5iuMQwNU9n+S6xrF70nJ3+NnfP7c=
Subject key identifier:   C6:33:DD:D0:A5:14:F9:15:92:85:B7:EA:D3:CE:4E:56:42:66:73:14
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       7F3D632446E4C5C8612070F0BEF989F8EFB03F4D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333535313a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Fri 20 Jun 2025 06:24:41 +0000
ROA not before:           Fri 20 Jun 2025 06:19:41 +0000
ROA not after:            Fri 19 Jun 2026 06:24:41 +0000
asID:                     401507
IP address blocks:        2a14:7581:3551::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:3d:63:24:46:e4:c5:c8:61:20:70:f0:be:f9:89:f8:ef:b0:3f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jun 20 06:19:41 2025 GMT
            Not After : Jun 19 06:24:41 2026 GMT
        Subject: CN=C633DDD0A514F9159285B7EAD3CE4E5642667314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6d:ec:91:94:e9:c5:c8:a9:f7:aa:40:e9:ee:
                    45:25:49:83:35:2a:30:0f:2d:99:74:e6:04:04:ae:
                    27:61:89:d0:67:d8:6e:b0:60:9a:05:98:aa:c2:a5:
                    7a:af:f8:3d:2d:09:32:cd:ca:80:84:93:90:cf:fb:
                    33:34:98:3d:42:bc:31:83:0b:a5:8e:86:76:f9:9a:
                    d1:a9:51:21:92:91:96:f6:7d:60:6c:d4:bb:f2:14:
                    c9:0a:f5:05:bf:57:72:dd:3d:0b:71:43:cc:d0:0e:
                    fa:97:40:07:77:0f:77:df:55:b0:ba:f0:b5:5c:ca:
                    80:4a:bf:3b:78:bc:d5:54:e8:8e:fb:42:45:fc:56:
                    e9:6e:70:ab:02:99:d6:46:99:b1:1d:34:91:56:bd:
                    a5:de:c7:c1:ca:c9:68:18:7e:75:43:31:a2:82:c4:
                    01:eb:33:34:72:87:df:08:2a:cb:63:b1:fe:b7:5e:
                    01:fe:4b:06:10:4d:5c:9f:2f:9e:be:6b:8e:69:fd:
                    29:88:31:f0:f7:06:bb:d8:0e:f7:50:9b:27:a2:eb:
                    01:4d:45:b3:64:47:46:8b:78:2b:e6:f4:c2:12:52:
                    b1:c5:1f:45:94:35:7e:78:1d:21:f2:2a:9a:3d:5f:
                    af:02:17:02:6b:d8:f2:13:8e:03:f6:a8:d1:3a:25:
                    9e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:33:DD:D0:A5:14:F9:15:92:85:B7:EA:D3:CE:4E:56:42:66:73:14
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333535313a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:3551::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:2d:00:7a:1e:dc:6c:0d:21:05:3d:cc:4b:d2:d1:3c:30:de:
         62:24:58:af:09:28:40:48:cd:3c:eb:18:bc:49:c4:0f:a9:6d:
         a1:b3:dd:ca:60:90:c1:3e:4b:ed:8b:d2:8d:9e:f9:5b:9c:70:
         45:9f:c0:c8:2c:c4:b6:c6:be:b2:1d:87:d4:bd:2d:3c:4b:d1:
         71:58:9e:f7:5b:18:bc:be:1b:d0:ff:6d:37:90:05:a3:e5:45:
         56:38:3d:77:0e:7a:f2:57:7c:64:01:63:41:c4:44:92:95:e9:
         23:58:02:07:ea:bb:2e:56:ec:c9:f5:4d:5f:fe:c9:cf:38:41:
         88:01:60:2a:d1:85:6a:f3:b8:35:c2:e5:45:f5:e4:d9:ba:8c:
         6c:b1:e0:b9:8f:76:a1:5a:f3:ad:d4:16:41:0e:d1:67:22:65:
         99:b6:b2:84:ba:c6:3b:62:81:dc:b0:c9:44:e5:36:dc:0a:fc:
         d6:ff:af:d2:86:88:6d:7b:14:7f:ce:63:1c:49:5d:b0:69:2f:
         d4:fe:a5:6a:3a:5a:9a:da:ec:f8:04:29:d0:dc:81:61:b5:02:
         cc:28:b7:9d:eb:ac:af:11:c6:31:04:5d:f8:6a:4d:2b:72:87:
         b7:b3:1a:34:b3:bb:85:64:82:ef:e5:f7:60:70:b9:c5:3b:64:
         17:8d:88:a6
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUfz1jJEbkxchhIHDwvvmJ+O+wP00wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA2MjAwNjE5NDFaFw0yNjA2MTkwNjI0NDFaMDMxMTAvBgNV
BAMTKEM2MzNEREQwQTUxNEY5MTU5Mjg1QjdFQUQzQ0U0RTU2NDI2NjczMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLbeyRlOnFyKn3qkDp7kUlSYM1
KjAPLZl05gQEridhidBn2G6wYJoFmKrCpXqv+D0tCTLNyoCEk5DP+zM0mD1CvDGD
C6WOhnb5mtGpUSGSkZb2fWBs1LvyFMkK9QW/V3LdPQtxQ8zQDvqXQAd3D3ffVbC6
8LVcyoBKvzt4vNVU6I77QkX8VulucKsCmdZGmbEdNJFWvaXex8HKyWgYfnVDMaKC
xAHrMzRyh98IKstjsf63XgH+SwYQTVyfL56+a45p/SmIMfD3BrvYDvdQmyei6wFN
RbNkR0aLeCvm9MISUrHFH0WUNX54HSHyKpo9X68CFwJr2PITjgP2qNE6JZ79AgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUxjPd0KUU+RWShbfq085OVkJmcxQwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzEzYTMzMzUzNTMxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gTVR
MA0GCSqGSIb3DQEBCwUAA4IBAQCjLQB6HtxsDSEFPcxL0tE8MN5iJFivCShASM08
6xi8ScQPqW2hs93KYJDBPkvti9KNnvlbnHBFn8DILMS2xr6yHYfUvS08S9FxWJ73
Wxi8vhvQ/203kAWj5UVWOD13DnryV3xkAWNBxESSlekjWAIH6rsuVuzJ9U1f/snP
OEGIAWAq0YVq87g1wuVF9eTZuoxsseC5j3ahWvOt1BZBDtFnImWZtrKEusY7YoHc
sMlE5TbcCvzW/6/ShohtexR/zmMcSV2waS/U/qVqOlqa2uz4BCnQ3IFhtQLMKLed
66yvEcYxBF34ak0rcoe3sxo0s7uFZILv5fdgcLnFO2QXjYim
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:32 2025 by rpki-client