Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333539373a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538313a333539373a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          12F7cqw0khkOMrVxkOzc9nBgA+viGmRHe5SjV+JGaj4=
Subject key identifier:   AC:6F:E2:94:17:F3:98:40:1F:A5:F2:DF:D6:2D:AB:41:42:3A:41:94
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       746652C7C0DA7A6A3BDB440298A416AFD00A8467
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333539373a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Fri 20 Jun 2025 06:24:51 +0000
ROA not before:           Fri 20 Jun 2025 06:19:51 +0000
ROA not after:            Fri 19 Jun 2026 06:24:51 +0000
asID:                     401507
IP address blocks:        2a14:7581:3597::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:66:52:c7:c0:da:7a:6a:3b:db:44:02:98:a4:16:af:d0:0a:84:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jun 20 06:19:51 2025 GMT
            Not After : Jun 19 06:24:51 2026 GMT
        Subject: CN=AC6FE29417F398401FA5F2DFD62DAB41423A4194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:15:c4:97:d0:69:84:e1:fd:4e:4b:2b:1e:44:
                    ce:e9:b1:ee:15:ac:1d:48:24:0b:73:97:59:19:aa:
                    8d:a0:2e:72:67:38:2e:57:6c:e3:9d:9f:a3:87:c7:
                    20:2f:ae:4a:1e:fb:10:7a:fb:50:eb:7f:e9:c3:2a:
                    04:82:98:f5:73:f5:26:06:43:a0:bf:29:6a:4a:75:
                    30:03:10:7b:f4:83:72:2b:36:d1:97:8b:f8:d6:de:
                    8a:ec:17:b4:31:75:87:13:e4:22:99:74:36:54:0e:
                    ec:e5:41:e0:aa:68:8e:24:02:8d:e6:17:1f:02:c8:
                    4e:09:8a:65:92:f2:a6:49:a9:4e:03:d8:09:00:0d:
                    0c:5c:2d:4d:e3:6b:55:75:9b:70:d9:5b:30:45:1d:
                    c0:29:7d:a8:e9:5d:34:4c:c8:47:9f:d6:fa:99:d5:
                    50:58:9a:be:7f:88:94:e0:cc:ae:30:04:0b:e4:89:
                    c5:33:33:e1:1b:23:29:78:50:36:71:f3:12:16:09:
                    9e:6e:0a:74:a8:d6:7a:5f:95:8f:3c:d3:37:78:f0:
                    ba:45:a4:72:b9:0e:fa:07:d7:63:50:7c:4a:5c:3c:
                    5b:d6:8f:c5:73:7d:2a:06:49:de:15:5c:ed:8d:94:
                    0f:fc:52:1d:03:94:c5:f5:16:51:3c:00:e9:f1:72:
                    9c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6F:E2:94:17:F3:98:40:1F:A5:F2:DF:D6:2D:AB:41:42:3A:41:94
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333539373a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:3597::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:8b:4e:97:f0:bf:e5:f8:c0:ed:d0:60:3d:0c:4d:46:b4:95:
         16:4e:ea:ce:71:33:69:23:5d:eb:8a:85:56:e4:ed:15:66:8b:
         ed:ab:96:25:2d:2d:de:31:a3:6a:15:60:ca:25:2c:c9:06:70:
         9e:0a:d9:2a:07:21:6d:f4:98:ef:66:dd:57:5c:a5:46:00:0d:
         13:df:28:55:a9:80:e0:b3:02:af:d3:7d:26:10:dc:f1:7f:83:
         ba:fc:43:c2:f6:44:ad:44:6b:48:0c:48:36:5e:f6:54:0e:c6:
         98:67:d6:4c:64:d7:f6:8e:5d:a2:76:2c:72:d6:19:ef:73:08:
         52:d0:44:04:19:b6:28:4a:3e:0e:0c:89:f0:66:b4:f8:fa:3b:
         b0:7b:a2:0f:46:1d:06:90:7d:8f:d3:51:42:16:1a:9c:31:bc:
         ae:11:cb:85:55:fb:92:2e:91:3e:a0:2b:b4:5c:37:9a:4b:4e:
         c2:3d:9b:aa:f2:37:e5:41:3d:27:6f:b0:d4:fc:6f:cb:23:6f:
         19:0c:ea:b5:7f:b6:99:c7:b9:80:38:ae:06:5f:f3:18:3e:a3:
         42:c2:e5:28:cd:0a:1c:30:cb:55:09:6f:dc:59:c3:33:c7:fb:
         92:6e:90:a8:26:59:58:ad:48:88:85:d8:ba:86:53:da:69:71:
         19:4d:3c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----