Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333561333a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538313a333561333a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          3FfbLHykIt1G+pjLFaDNtbWLb8nrqkPyHQuXmy3DfN8=
Subject key identifier:   9D:C6:9E:07:79:60:B7:F6:2A:7B:35:DF:78:E7:51:8B:AD:E6:87:B1
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       4509DB7B418569E428128717B2B5DA4125CD0219
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333561333a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Fri 20 Jun 2025 06:24:51 +0000
ROA not before:           Fri 20 Jun 2025 06:19:51 +0000
ROA not after:            Fri 19 Jun 2026 06:24:51 +0000
asID:                     401507
IP address blocks:        2a14:7581:35a3::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:09:db:7b:41:85:69:e4:28:12:87:17:b2:b5:da:41:25:cd:02:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jun 20 06:19:51 2025 GMT
            Not After : Jun 19 06:24:51 2026 GMT
        Subject: CN=9DC69E077960B7F62A7B35DF78E7518BADE687B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7a:79:af:10:00:fd:98:13:c9:39:ab:80:9b:
                    87:0e:07:0f:2a:c3:a4:a6:af:bd:a5:7a:53:44:cb:
                    7d:13:0f:b4:4e:6e:68:5b:4c:a5:53:84:ce:ff:f1:
                    ba:e5:fe:ec:6e:07:d9:ac:df:fb:b5:80:1d:ee:c8:
                    0f:81:3f:cc:25:15:75:e2:a1:96:2b:66:ce:0f:2a:
                    e8:59:3e:45:bc:ab:ae:93:11:0a:a6:f0:93:51:3a:
                    a8:a0:65:e2:d7:ff:dc:71:c7:ef:0b:a2:c2:68:6f:
                    65:6d:43:8a:e8:f6:b5:79:1b:7f:8f:19:f4:d3:19:
                    19:26:c9:4a:ec:73:60:a3:29:49:60:76:46:0d:4e:
                    f6:9b:96:d3:30:23:94:63:0b:7b:c0:4d:32:9e:33:
                    93:6a:d6:94:cd:a9:a9:aa:d7:16:8c:b3:5f:ee:86:
                    4a:19:7c:4a:42:f9:59:a5:bb:80:c9:78:d0:5c:57:
                    2a:8f:7c:2d:29:7b:4b:5b:a3:3f:f3:89:d0:55:99:
                    28:71:18:4f:cc:c9:0d:7d:7c:72:19:ad:d2:ca:d6:
                    66:1d:8a:99:65:28:bd:84:ef:f6:62:b3:7b:6d:33:
                    56:9e:2f:2a:f8:06:08:f8:c2:7b:c3:2e:5f:5f:30:
                    7d:34:0a:0f:89:73:f5:3d:be:b1:57:96:31:d5:9c:
                    a6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C6:9E:07:79:60:B7:F6:2A:7B:35:DF:78:E7:51:8B:AD:E6:87:B1
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333561333a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:35a3::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:51:73:b2:bd:f4:bf:b5:50:dc:ef:fa:0d:a9:87:36:4b:9c:
         03:c5:15:a4:ba:2f:1b:5a:b9:4b:5d:45:49:bb:05:f3:fc:fd:
         f9:50:f4:c2:39:e4:39:a0:ac:88:b7:09:02:79:5a:74:3f:0d:
         fe:bf:6b:c3:89:f7:50:37:77:12:a1:3c:f7:85:db:00:6d:09:
         67:87:26:e5:8f:b9:d9:b1:92:25:21:a3:19:d3:b3:7d:7f:36:
         95:78:ef:d4:81:63:d9:9c:45:40:e3:7f:53:e1:eb:d1:c6:32:
         32:e9:27:ca:5d:75:16:73:c7:81:1e:8c:e7:be:20:1d:22:f0:
         5c:c9:ab:67:f6:ee:87:65:1f:cb:bd:dc:3a:bc:c5:0f:0f:67:
         1c:fe:cf:0c:4a:47:5c:9b:b7:be:6d:bb:29:07:51:7d:20:c4:
         0f:00:00:a1:e1:10:fe:2d:5f:05:10:9b:54:27:cd:58:93:09:
         e5:5e:a8:45:e9:c0:5f:1e:95:d1:0a:3b:8e:04:89:5c:5a:ed:
         5b:a5:e5:e8:26:cf:35:c6:29:e1:97:42:a3:a8:27:0d:20:f0:
         27:b7:51:37:20:e9:dd:4c:0a:04:04:e4:30:40:cb:47:56:3c:
         9a:0e:9c:a3:24:d1:5a:3a:f4:63:a4:80:a3:7b:6b:10:67:fb:
         21:0d:5c:be
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIURQnbe0GFaeQoEocXsrXaQSXNAhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA2MjAwNjE5NTFaFw0yNjA2MTkwNjI0NTFaMDMxMTAvBgNV
BAMTKDlEQzY5RTA3Nzk2MEI3RjYyQTdCMzVERjc4RTc1MThCQURFNjg3QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzenmvEAD9mBPJOauAm4cOBw8q
w6Smr72lelNEy30TD7RObmhbTKVThM7/8brl/uxuB9ms3/u1gB3uyA+BP8wlFXXi
oZYrZs4PKuhZPkW8q66TEQqm8JNROqigZeLX/9xxx+8LosJob2VtQ4ro9rV5G3+P
GfTTGRkmyUrsc2CjKUlgdkYNTvabltMwI5RjC3vATTKeM5Nq1pTNqamq1xaMs1/u
hkoZfEpC+Vmlu4DJeNBcVyqPfC0pe0tboz/zidBVmShxGE/MyQ19fHIZrdLK1mYd
ipllKL2E7/Zis3ttM1aeLyr4Bgj4wnvDLl9fMH00Cg+Jc/U9vrFXljHVnKYtAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUncaeB3lgt/YqezXfeOdRi63mh7EwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzEzYTMzMzU2MTMzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gTWj
MA0GCSqGSIb3DQEBCwUAA4IBAQAhUXOyvfS/tVDc7/oNqYc2S5wDxRWkui8bWrlL
XUVJuwXz/P35UPTCOeQ5oKyItwkCeVp0Pw3+v2vDifdQN3cSoTz3hdsAbQlnhybl
j7nZsZIlIaMZ07N9fzaVeO/UgWPZnEVA439T4evRxjIy6SfKXXUWc8eBHoznviAd
IvBcyatn9u6HZR/Lvdw6vMUPD2cc/s8MSkdcm7e+bbspB1F9IMQPAACh4RD+LV8F
EJtUJ81YkwnlXqhF6cBfHpXRCjuOBIlcWu1bpeXoJs81xinhl0KjqCcNIPAnt1E3
IOndTAoEBOQwQMtHVjyaDpyjJNFaOvRjpICje2sQZ/shDVy+
-----END CERTIFICATE-----