Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333535663a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538313a333535663a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          FPwm+WuVFd9gdwtc3YbbpgZ0qmBGrUYCMoUc4QsgRbg=
Subject key identifier:   2E:63:DD:1B:DD:21:F0:EB:39:EB:CC:82:B8:46:05:92:A1:21:20:A4
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       429F256758E9EFB5633441FF25F1C6564FD0B795
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333535663a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Fri 20 Jun 2025 06:26:11 +0000
ROA not before:           Fri 20 Jun 2025 06:21:11 +0000
ROA not after:            Fri 19 Jun 2026 06:26:11 +0000
asID:                     401507
IP address blocks:        2a14:7581:355f::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:9f:25:67:58:e9:ef:b5:63:34:41:ff:25:f1:c6:56:4f:d0:b7:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jun 20 06:21:11 2025 GMT
            Not After : Jun 19 06:26:11 2026 GMT
        Subject: CN=2E63DD1BDD21F0EB39EBCC82B8460592A12120A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:53:45:46:38:19:c9:02:b8:f4:42:b4:ce:1e:
                    b5:33:9c:cf:f4:76:0d:03:df:ed:0a:e2:13:aa:3a:
                    9a:bb:17:ed:fa:8e:fe:d6:f0:c5:f5:87:35:4b:b4:
                    fd:4a:32:6e:d6:c8:52:f3:df:aa:e8:0c:4b:55:64:
                    a2:ff:91:4e:ee:71:31:91:14:59:fd:9e:53:89:9e:
                    b4:ee:22:16:91:b9:05:30:a2:d4:ad:b7:e3:47:cb:
                    c5:8a:07:fb:45:e1:fd:42:bb:33:42:2b:38:f8:cc:
                    82:93:61:dd:15:da:15:0c:47:85:85:c3:d6:0b:39:
                    c1:53:0d:8c:3a:6d:6c:93:5e:3d:1f:5f:4e:6b:da:
                    9f:69:64:29:62:4f:50:fd:50:96:4a:05:de:ca:47:
                    87:d7:ce:6a:91:e3:0b:b8:37:d3:80:6c:59:7b:13:
                    bb:94:e3:e6:b2:7a:b9:7d:12:fb:a1:18:ab:bd:4f:
                    c5:66:65:62:d1:58:1d:c1:b7:fa:09:e8:c4:57:0a:
                    14:77:18:c4:25:11:5f:4f:90:03:f0:8c:76:66:04:
                    44:94:e3:5e:87:3d:a5:3b:fe:33:0e:a1:5e:16:8f:
                    74:a4:74:4b:86:75:26:e1:8e:b3:b1:09:92:2b:5e:
                    d0:81:9e:e8:6b:34:bf:29:83:ae:f0:fa:e7:a0:eb:
                    75:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:63:DD:1B:DD:21:F0:EB:39:EB:CC:82:B8:46:05:92:A1:21:20:A4
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333535663a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:355f::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:61:4f:e3:c0:5b:12:7e:af:7f:6d:18:60:fe:19:cf:af:bc:
         64:e8:1f:7f:8f:2d:c0:0a:df:37:b5:00:28:48:56:38:62:95:
         a6:59:98:f5:6b:8d:6b:cb:c0:de:45:21:b7:75:65:80:14:e0:
         2e:f7:74:ba:8c:93:65:03:8d:7c:f0:c0:6c:8f:16:a5:32:d5:
         4b:31:19:d8:93:0f:f0:d0:e7:5f:1f:35:a6:16:a0:bd:2f:1c:
         72:cc:03:f9:ef:32:d4:e7:19:40:b1:12:06:d4:ac:7b:22:07:
         ee:3b:45:60:4b:31:f9:a5:50:0a:58:c6:dc:d3:5b:81:00:e3:
         2c:83:97:50:9e:11:89:09:5f:41:53:5d:1f:dd:75:fb:02:14:
         a0:e5:6a:71:d1:98:b6:01:ac:d9:00:0e:c9:61:34:88:7c:f4:
         30:dd:34:ae:66:85:4a:c2:d6:56:0a:98:dc:20:1f:4f:22:3c:
         31:67:47:80:8e:f4:2c:2a:15:22:e2:a9:4d:22:d1:9e:fe:26:
         5e:4c:d7:88:e3:b3:0e:ed:90:9c:df:b3:72:07:b2:8d:cc:23:
         b5:a6:d0:45:16:43:2c:b7:04:7d:d6:e5:89:01:60:d5:00:70:
         78:cd:75:72:55:30:cf:e1:f7:6c:76:93:42:e9:40:f5:3f:27:
         26:0b:21:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----