Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333561653a3a2f34382d3438203d3e20333936393638.roa
File:                     326131343a373538313a333561653a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          0J9yGnEK4TKQjN732tIPknJcxqDLsULV/h1fHraywIA=
Subject key identifier:   E3:49:AC:B1:67:7C:3D:92:0D:45:3C:A3:85:9F:93:A1:FD:72:D8:E4
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       1DDF2231FEB6EFC3B7BDAFBD4095227CBBE3F4C6
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333561653a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Wed 25 Jun 2025 15:49:58 +0000
ROA not before:           Wed 25 Jun 2025 15:44:58 +0000
ROA not after:            Wed 24 Jun 2026 15:49:58 +0000
asID:                     396968
IP address blocks:        2a14:7581:35ae::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:df:22:31:fe:b6:ef:c3:b7:bd:af:bd:40:95:22:7c:bb:e3:f4:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jun 25 15:44:58 2025 GMT
            Not After : Jun 24 15:49:58 2026 GMT
        Subject: CN=E349ACB1677C3D920D453CA3859F93A1FD72D8E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:a0:60:b1:e6:30:b4:3e:28:34:0f:19:ec:b7:
                    8c:a2:c0:7d:ea:0b:1b:83:a8:a2:e9:74:0d:37:8b:
                    39:be:11:9d:40:88:22:12:fb:3b:3f:f7:72:69:c1:
                    40:20:bc:89:23:e1:85:62:35:69:06:53:f9:1e:89:
                    de:bd:46:e1:2c:35:8e:d3:93:1d:d1:dc:2d:02:99:
                    62:2b:3a:13:c8:d3:5e:3b:ee:10:58:95:6f:9f:da:
                    65:35:7c:e1:52:fa:0f:ad:86:3f:eb:15:78:13:0f:
                    d8:e8:b3:91:cf:1d:95:ba:fa:0e:bf:a8:78:48:c4:
                    ba:c5:f8:a7:4e:4c:e4:c5:bb:ad:73:b7:4f:83:74:
                    2c:84:b6:43:0d:09:9c:43:e0:07:83:ee:93:f2:26:
                    ea:38:d3:34:b2:ee:e6:0d:f3:70:43:ce:54:e9:13:
                    6f:48:91:5e:f9:20:64:3a:28:43:1c:0c:20:79:2e:
                    37:11:d1:62:29:c4:46:ac:d4:8a:f7:06:ca:be:2d:
                    a2:81:c4:47:47:f9:1d:74:23:bf:9c:fe:2c:6d:52:
                    86:07:fd:d4:e8:31:fd:94:bc:15:e2:b7:ca:c3:f4:
                    a1:42:10:ac:93:e5:1e:b5:cb:01:b8:21:2e:01:e5:
                    8c:73:c2:da:6b:a1:f8:e0:53:2f:58:85:31:27:02:
                    bc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:49:AC:B1:67:7C:3D:92:0D:45:3C:A3:85:9F:93:A1:FD:72:D8:E4
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333561653a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:35ae::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:8c:83:41:27:a8:48:e2:96:b3:c6:8c:81:ea:e2:fe:98:8b:
         1b:6d:b9:a6:55:83:f6:04:30:e4:87:4a:45:e4:7d:15:cf:26:
         e0:4c:ee:1a:09:53:04:4d:2f:8d:71:73:f5:f4:1e:37:9e:9a:
         bd:0e:67:28:ed:e5:4d:15:a7:ac:da:67:3b:ea:24:c4:16:a5:
         77:30:b7:ae:57:e5:12:c4:f6:a9:53:1a:99:ea:1f:f2:bf:17:
         7e:6a:89:48:7e:98:12:fe:47:2a:4f:db:b5:39:9e:66:2c:15:
         8f:7b:f9:87:ae:7e:7e:da:36:e4:85:b4:f4:19:89:67:d7:10:
         71:7d:13:7d:d8:2a:48:8f:64:e3:0d:a3:d9:f4:f9:bf:7b:b0:
         3e:fd:58:1c:ec:90:f9:ac:55:22:39:54:1f:c0:15:f0:60:15:
         2f:a1:d8:19:d1:52:a0:a4:3d:3b:d0:8a:f3:d3:34:0e:9d:a0:
         07:60:99:f0:98:c3:8f:f8:44:cc:49:32:a7:3c:9f:4d:07:91:
         ed:c2:65:26:53:bf:02:06:ec:3c:31:e5:8f:50:0d:83:fe:a8:
         e4:39:77:90:34:6b:de:07:d7:4e:8b:69:c2:80:dd:fe:ff:b2:
         71:8b:f8:12:fa:cb:1f:4c:ca:d2:a5:97:b7:14:a8:7b:ab:07:
         a9:9f:b8:a0
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUHd8iMf6278O3va+9QJUifLvj9MYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA2MjUxNTQ0NThaFw0yNjA2MjQxNTQ5NThaMDMxMTAvBgNV
BAMTKEUzNDlBQ0IxNjc3QzNEOTIwRDQ1M0NBMzg1OUY5M0ExRkQ3MkQ4RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1oGCx5jC0Pig0Dxnst4yiwH3q
CxuDqKLpdA03izm+EZ1AiCIS+zs/93JpwUAgvIkj4YViNWkGU/keid69RuEsNY7T
kx3R3C0CmWIrOhPI01477hBYlW+f2mU1fOFS+g+thj/rFXgTD9jos5HPHZW6+g6/
qHhIxLrF+KdOTOTFu61zt0+DdCyEtkMNCZxD4AeD7pPyJuo40zSy7uYN83BDzlTp
E29IkV75IGQ6KEMcDCB5LjcR0WIpxEas1Ir3Bsq+LaKBxEdH+R10I7+c/ixtUoYH
/dToMf2UvBXit8rD9KFCEKyT5R61ywG4IS4B5YxzwtprofjgUy9YhTEnArwtAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQU40mssWd8PZINRTyjhZ+Tof1y2OQwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzEzYTMzMzU2MTY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gTWu
MA0GCSqGSIb3DQEBCwUAA4IBAQCnjINBJ6hI4pazxoyB6uL+mIsbbbmmVYP2BDDk
h0pF5H0VzybgTO4aCVMETS+NcXP19B43npq9Dmco7eVNFaes2mc76iTEFqV3MLeu
V+USxPapUxqZ6h/yvxd+aolIfpgS/kcqT9u1OZ5mLBWPe/mHrn5+2jbkhbT0GYln
1xBxfRN92CpIj2TjDaPZ9Pm/e7A+/Vgc7JD5rFUiOVQfwBXwYBUvodgZ0VKgpD07
0Irz0zQOnaAHYJnwmMOP+ETMSTKnPJ9NB5HtwmUmU78CBuw8MeWPUA2D/qjkOXeQ
NGveB9dOi2nCgN3+/7Jxi/gS+ssfTMrSpZe3FKh7qwepn7ig
-----END CERTIFICATE-----