Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333539303a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538313a333539303a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          VL4GFykfxdai2TFChVUgtn2D3Cnfpk4KgR+Vvy/jNZA=
Subject key identifier:   19:6E:35:0B:52:12:33:DD:2E:B1:E1:60:4D:6D:BD:04:AA:1A:35:17
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       1ED2BC70CBF908C432FCB36F5B4330FCBCA7ACF1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333539303a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Fri 20 Jun 2025 06:26:11 +0000
ROA not before:           Fri 20 Jun 2025 06:21:11 +0000
ROA not after:            Fri 19 Jun 2026 06:26:11 +0000
asID:                     401507
IP address blocks:        2a14:7581:3590::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d2:bc:70:cb:f9:08:c4:32:fc:b3:6f:5b:43:30:fc:bc:a7:ac:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jun 20 06:21:11 2025 GMT
            Not After : Jun 19 06:26:11 2026 GMT
        Subject: CN=196E350B521233DD2EB1E1604D6DBD04AA1A3517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:44:96:37:31:8c:bd:a6:9d:d6:d4:19:ad:b5:
                    b5:c9:91:06:33:0c:4f:3c:50:c9:d7:6b:86:71:48:
                    78:08:09:ba:46:ce:00:d9:81:54:2f:5d:b0:05:39:
                    ee:db:9b:87:8d:5d:38:9f:c3:54:10:47:36:15:f6:
                    be:88:92:02:a1:33:07:eb:9a:4c:70:86:d7:32:ef:
                    01:6b:80:cf:06:c5:0f:5d:c1:8d:56:de:d6:89:e9:
                    d7:bf:30:13:6c:7f:28:94:0f:7c:0e:e2:1b:16:35:
                    51:ed:d0:c2:ab:9c:3b:a8:2e:3b:e1:5d:c0:7c:fc:
                    a5:cd:2e:26:de:a2:bb:47:60:9f:b4:d3:f9:4f:3f:
                    66:8c:92:99:3a:e4:44:7e:06:e6:0d:bc:cf:1a:10:
                    8f:e7:34:0b:df:5b:7e:81:40:9e:f7:7f:5e:9f:2b:
                    91:b5:8f:d0:58:1e:f0:af:b6:ee:1e:f2:d8:0d:c3:
                    b7:df:18:85:d2:7b:6c:09:b8:2f:80:69:24:6e:e2:
                    30:75:c6:30:8c:4c:8c:87:df:7f:93:9f:1c:9a:ae:
                    2d:ad:91:78:ab:b4:bd:ec:6c:cb:de:57:1b:78:0c:
                    84:fa:b9:d8:c4:24:89:a1:f7:2d:fd:fc:75:bb:a1:
                    ff:df:09:5c:a9:bb:91:a2:c7:59:ae:54:f7:84:f1:
                    0b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6E:35:0B:52:12:33:DD:2E:B1:E1:60:4D:6D:BD:04:AA:1A:35:17
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333539303a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:3590::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:67:61:10:fe:c6:d0:7a:90:87:09:0d:91:4f:2d:f4:2b:d8:
         e4:e5:72:74:d9:52:a7:4b:03:70:c0:aa:10:53:b6:34:32:af:
         a4:fc:75:ad:46:ac:94:70:f0:63:f4:04:95:07:9c:ef:cf:3e:
         20:0f:0b:9e:a9:b5:ce:1a:65:70:e0:e8:0f:3d:8b:90:0f:3d:
         99:96:ba:fe:cb:2a:7c:9d:7c:cd:0b:bb:db:7d:c4:f5:9a:3b:
         84:10:96:54:b7:d6:bf:e5:df:af:62:47:16:b1:0e:ac:1f:ca:
         72:e4:03:8e:5b:68:9a:3a:2c:aa:a0:df:69:e6:0c:85:90:ac:
         5d:bc:5c:22:e3:ac:24:ce:13:eb:df:7f:65:3a:35:c8:83:ec:
         5d:c7:42:28:0d:36:44:de:40:59:49:6e:79:97:a0:70:73:3a:
         25:73:62:d1:37:52:97:eb:da:98:3b:69:66:81:f4:be:52:2d:
         17:ed:66:54:61:fa:b0:df:a0:30:e9:6d:88:ad:7a:42:ec:90:
         99:ad:4f:f7:44:28:af:40:51:ff:3f:cf:6a:83:6f:86:e8:43:
         30:33:56:b9:b8:fc:aa:1f:7b:88:cf:22:1b:74:14:59:e5:1e:
         df:ca:49:a9:11:d6:b6:50:1c:25:95:5b:73:8a:2b:a7:f6:6b:
         bf:2e:8a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----