Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333535623a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538313a333535623a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          KiPofabcvStGShI4RC1FYoilrr6e0kQfx6jQb5WA5aw=
Subject key identifier:   97:0A:7D:BF:81:0A:ED:CD:A4:42:77:C5:D5:1C:CB:FD:0B:5C:E7:3F
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       5023A05CBBA1C077ED209B0B4BF423A9EE0D080C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333535623a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Fri 20 Jun 2025 06:24:52 +0000
ROA not before:           Fri 20 Jun 2025 06:19:52 +0000
ROA not after:            Fri 19 Jun 2026 06:24:52 +0000
asID:                     401507
IP address blocks:        2a14:7581:355b::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:23:a0:5c:bb:a1:c0:77:ed:20:9b:0b:4b:f4:23:a9:ee:0d:08:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jun 20 06:19:52 2025 GMT
            Not After : Jun 19 06:24:52 2026 GMT
        Subject: CN=970A7DBF810AEDCDA44277C5D51CCBFD0B5CE73F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b3:b0:41:1a:68:32:c5:5b:ba:fc:6f:50:c1:
                    59:55:89:40:52:9d:c9:9f:7f:b0:e5:42:f3:ab:67:
                    b7:02:82:f2:31:73:21:65:1a:19:a6:c5:f1:be:8a:
                    96:68:10:71:75:70:0e:1c:38:4d:3a:f9:13:04:f1:
                    91:d3:f3:5b:ae:d1:c5:62:5e:13:e4:fd:46:f4:19:
                    f7:0b:b4:31:db:89:35:6c:d2:4d:f4:f9:e7:1a:e4:
                    c3:db:32:34:b7:d0:5b:45:a5:21:84:f9:68:86:f1:
                    c3:b4:9a:ef:a8:cb:c8:62:63:a3:d0:fe:97:b5:b3:
                    f3:c2:53:39:1c:63:2f:11:51:bb:64:be:ff:f8:08:
                    f4:9a:85:aa:a3:53:33:44:be:9e:2a:40:ee:ac:e6:
                    3a:98:cc:5c:99:4b:61:e9:98:fe:75:21:63:6f:ea:
                    b0:f5:74:9f:be:08:5e:f1:90:2e:56:5a:00:5b:79:
                    51:36:02:83:cf:fd:b2:a6:a2:8b:71:d5:06:4f:fa:
                    67:a5:e0:fc:dc:03:31:3e:89:c4:3e:9a:ec:b4:b5:
                    da:74:ae:37:a8:26:29:2d:1d:57:9b:78:bf:0a:35:
                    e1:86:50:16:fc:d3:66:2e:93:dd:8c:7f:93:c0:51:
                    6f:10:97:4a:e9:cb:79:b2:98:12:db:3f:5a:61:55:
                    01:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0A:7D:BF:81:0A:ED:CD:A4:42:77:C5:D5:1C:CB:FD:0B:5C:E7:3F
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333535623a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:355b::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:de:fb:10:cd:16:19:7d:86:b8:70:63:2e:05:f3:c3:f6:50:
         40:bc:e3:5c:65:68:53:ef:63:49:96:cd:49:67:37:62:89:0f:
         e1:22:28:5a:0b:93:a1:24:6e:56:c8:81:61:e0:07:8f:8b:e5:
         9d:b6:18:08:53:ae:93:be:9e:4f:ab:84:32:50:60:70:3b:63:
         a0:5f:60:db:3a:0b:7a:7c:a0:97:0e:c9:2f:65:7e:0d:85:ff:
         f1:d0:42:8a:5b:74:09:94:8f:84:5e:f9:7a:17:69:e5:e4:6b:
         ef:39:6b:7d:4a:a0:6d:73:59:0b:6c:e5:ba:7b:b0:d8:b7:38:
         46:17:8b:36:02:38:13:16:53:b3:33:3f:49:5a:67:28:ef:c1:
         12:9b:cd:d5:8f:b8:b5:4f:54:b5:bc:fa:b5:6d:f6:59:55:2a:
         77:29:98:f9:c6:c9:bb:e0:b2:36:e3:cb:22:42:58:1a:c1:00:
         76:98:2a:44:f1:38:43:77:88:72:e8:e1:9e:98:4f:f9:ff:07:
         d7:03:25:78:44:39:d9:18:5d:72:3d:32:83:15:63:d0:34:90:
         87:02:12:e7:14:bf:07:a5:69:08:42:a7:e8:f5:ca:00:23:b3:
         0e:3a:1d:4f:e8:1e:af:70:08:4f:82:5f:f0:90:1c:54:af:da:
         98:ea:72:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----