Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333536623a3a2f34382d3438203d3e20333936393638.roa
File:                     326131343a373538313a333536623a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          MIaK5XmmOZzYKA8spQVAf/9foHJHXTdo9kkmUnKtF2I=
Subject key identifier:   89:B5:62:F0:AB:9A:4A:03:BD:E3:CE:77:A9:2F:5C:B3:D9:7A:E1:71
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       2C9582574B8E4E3C789700BFB7F4404A6392C256
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333536623a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Wed 25 Jun 2025 15:49:58 +0000
ROA not before:           Wed 25 Jun 2025 15:44:58 +0000
ROA not after:            Wed 24 Jun 2026 15:49:58 +0000
asID:                     396968
IP address blocks:        2a14:7581:356b::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:95:82:57:4b:8e:4e:3c:78:97:00:bf:b7:f4:40:4a:63:92:c2:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jun 25 15:44:58 2025 GMT
            Not After : Jun 24 15:49:58 2026 GMT
        Subject: CN=89B562F0AB9A4A03BDE3CE77A92F5CB3D97AE171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fa:84:fe:d5:2d:37:71:04:1d:55:05:0c:46:
                    ed:b2:ee:91:e9:99:dd:8f:21:73:33:e3:b2:09:98:
                    8e:21:cf:c1:26:dc:93:c8:05:70:9b:d3:b9:08:1c:
                    7a:9e:8f:60:a8:dd:b4:10:68:ad:7a:19:22:d8:dc:
                    ea:5b:44:33:b5:45:d5:e4:0b:75:ae:29:f0:09:e0:
                    8f:d1:64:d7:e8:6e:96:91:49:90:ef:cb:bb:51:e7:
                    2e:b7:77:52:74:ea:8f:84:7f:7c:e5:a4:cf:d1:87:
                    19:17:e5:3e:ab:c5:cf:6b:ef:d7:96:cd:64:af:af:
                    b6:90:38:e4:fb:c5:ff:e8:9f:77:9c:5a:34:ec:08:
                    97:86:bb:f9:39:ee:6c:8c:d2:bc:e5:b5:eb:98:89:
                    f6:7c:8b:51:bc:e8:a0:c4:34:f4:c1:e5:e0:b0:42:
                    3d:78:fd:76:88:78:a7:fa:98:22:0c:26:f4:9c:6f:
                    ec:22:08:7e:f3:16:60:28:d2:90:3f:aa:51:48:a3:
                    31:94:63:f4:af:46:f7:7b:9f:8f:3e:0c:c1:4a:e5:
                    a4:61:20:f7:ac:00:b6:6b:2c:ad:14:b8:6b:b0:e9:
                    64:1e:e9:1c:4b:99:8e:dd:1f:eb:e3:2d:83:ad:29:
                    9d:b7:33:8a:49:8a:bd:3f:4c:7e:f3:9d:ac:da:9c:
                    5c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B5:62:F0:AB:9A:4A:03:BD:E3:CE:77:A9:2F:5C:B3:D9:7A:E1:71
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333536623a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:356b::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:7d:3b:ac:3a:21:55:f1:cf:fe:18:7d:22:c8:2f:4b:ee:4c:
         f1:82:9b:11:42:9a:49:99:93:cf:19:17:f8:a4:56:57:74:c1:
         b7:34:f1:f0:c2:89:c1:1f:f5:cc:35:00:e6:81:9f:ef:38:20:
         0b:96:70:66:20:80:10:7e:fe:49:ee:84:69:d4:8b:99:33:b4:
         e9:1f:db:35:a5:0e:ba:62:55:9c:f2:ca:02:56:53:a7:1d:b5:
         31:5e:29:d6:ae:6e:6a:5f:dc:90:17:f0:86:49:70:35:c5:85:
         cc:1c:61:d9:e9:30:31:2d:86:5e:31:c9:b5:d5:0d:60:b7:ad:
         ea:ac:ce:a2:6a:be:bc:d7:94:22:30:56:70:a6:fe:4d:f1:ca:
         c0:f9:41:d0:68:c2:ba:67:33:3a:53:29:dc:4d:c4:27:ab:37:
         51:7d:ba:6e:da:3b:10:34:1c:a9:49:0e:48:c9:c2:5b:87:d4:
         67:dc:df:58:6f:49:a1:b9:47:30:6d:99:db:ff:0c:4a:c3:b9:
         64:26:8c:6c:5e:b2:0b:a5:cb:50:3c:4e:f5:2b:20:c7:db:84:
         da:ec:d4:a3:38:8e:a8:58:b4:21:bb:0d:20:4f:84:ee:51:52:
         54:69:ed:1a:96:db:17:8b:36:25:fc:c3:1e:1f:48:89:a5:c4:
         d0:77:a9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----