Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333563363a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538313a333563363a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          Zoc0aem6sCsA6u/5tuqpI+DZM/+n0LOsoG8vDFbrqiA=
Subject key identifier:   4B:B5:89:5D:73:86:96:67:24:2A:CC:72:CB:1A:86:5E:80:24:21:C8
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       4A2019E827800B450A33E89EB5D80C9C91BB48AA
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333563363a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Fri 20 Jun 2025 06:26:05 +0000
ROA not before:           Fri 20 Jun 2025 06:21:05 +0000
ROA not after:            Fri 19 Jun 2026 06:26:05 +0000
asID:                     401507
IP address blocks:        2a14:7581:35c6::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:20:19:e8:27:80:0b:45:0a:33:e8:9e:b5:d8:0c:9c:91:bb:48:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jun 20 06:21:05 2025 GMT
            Not After : Jun 19 06:26:05 2026 GMT
        Subject: CN=4BB5895D73869667242ACC72CB1A865E802421C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7c:5e:e9:a9:f2:e4:bc:7e:9a:35:8a:82:6e:
                    7b:06:1f:a5:ec:b8:47:87:e8:b4:f5:ac:d1:19:b8:
                    60:2c:9d:c1:3d:a3:2a:d5:b9:63:13:7d:4a:db:35:
                    36:bc:eb:42:6f:dd:c6:43:bf:dc:3c:2a:a5:4b:23:
                    ee:c9:54:a0:5a:c5:d9:d9:19:16:e3:9b:43:1e:d1:
                    52:40:24:01:cd:51:ee:ec:f1:bc:c1:73:da:a5:c9:
                    f7:f8:8e:0d:9a:98:b4:10:fd:ad:3c:36:43:9c:d7:
                    e0:13:9e:b3:ee:3f:16:a7:dc:23:ac:c4:12:fb:dc:
                    fe:f3:1d:c6:3c:6d:85:21:f7:5f:ac:f0:b7:1a:99:
                    82:dc:22:50:1a:c0:99:cf:4e:be:ff:6e:ad:8e:a8:
                    71:87:a9:52:91:8e:5a:f8:6b:7f:be:46:f7:d7:af:
                    22:6b:0e:a7:75:26:00:2a:23:0a:d9:f9:37:33:b5:
                    53:00:4b:f3:0e:b8:75:65:17:3d:83:54:5c:a6:bc:
                    16:85:44:a1:24:60:27:5f:24:73:fc:35:ad:73:14:
                    a2:b4:a6:6f:f6:6d:ac:52:38:44:6c:7e:5b:30:07:
                    5b:d7:64:76:f2:fd:8d:23:2a:ff:14:5c:05:60:10:
                    08:7b:b8:33:c6:c4:61:a4:04:8f:61:77:0b:2a:16:
                    c3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B5:89:5D:73:86:96:67:24:2A:CC:72:CB:1A:86:5E:80:24:21:C8
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333563363a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:35c6::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:ae:15:da:25:8b:65:81:29:46:a1:70:06:b9:a1:a3:51:7a:
         75:4b:4f:2f:13:72:31:31:cc:90:79:06:69:ea:58:c1:77:81:
         64:5c:7b:36:8c:92:1f:72:cc:7e:d6:74:3b:47:28:bf:13:58:
         66:e9:15:f0:e2:59:0e:51:c7:e9:e9:54:09:73:13:43:60:b0:
         67:6b:cb:f4:17:8c:ef:27:df:67:a4:f3:c8:9e:75:42:76:22:
         e9:42:34:e4:67:cc:28:59:af:62:77:9e:a0:eb:9a:53:84:90:
         39:ee:e4:63:6a:a7:42:44:ed:67:29:50:8d:95:b2:5d:89:48:
         55:bb:8c:63:0d:00:53:b2:41:ab:3a:ef:b6:dd:16:19:0b:dc:
         d2:94:b3:26:d7:a2:91:57:e4:78:9f:ad:1e:8c:14:61:57:92:
         5e:f7:88:91:ac:4d:da:10:30:47:30:d7:60:7f:b4:00:b0:76:
         94:5f:fc:e1:75:a0:31:05:26:c7:e9:62:0e:21:aa:62:cb:0c:
         4d:2a:60:8b:31:93:8f:52:47:9a:54:81:82:c3:f7:48:9b:fc:
         c8:75:54:97:6c:8d:50:14:05:68:00:a3:bc:bc:de:e2:95:f7:
         da:06:8e:ab:42:5f:b2:bc:81:a0:9b:4a:46:ec:07:f1:68:e9:
         48:85:51:5f
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUSiAZ6CeAC0UKM+ietdgMnJG7SKowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA2MjAwNjIxMDVaFw0yNjA2MTkwNjI2MDVaMDMxMTAvBgNV
BAMTKDRCQjU4OTVENzM4Njk2NjcyNDJBQ0M3MkNCMUE4NjVFODAyNDIxQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBfF7pqfLkvH6aNYqCbnsGH6Xs
uEeH6LT1rNEZuGAsncE9oyrVuWMTfUrbNTa860Jv3cZDv9w8KqVLI+7JVKBaxdnZ
GRbjm0Me0VJAJAHNUe7s8bzBc9qlyff4jg2amLQQ/a08NkOc1+ATnrPuPxan3COs
xBL73P7zHcY8bYUh91+s8LcamYLcIlAawJnPTr7/bq2OqHGHqVKRjlr4a3++RvfX
ryJrDqd1JgAqIwrZ+TcztVMAS/MOuHVlFz2DVFymvBaFRKEkYCdfJHP8Na1zFKK0
pm/2baxSOERsflswB1vXZHby/Y0jKv8UXAVgEAh7uDPGxGGkBI9hdwsqFsM1AgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUS7WJXXOGlmckKsxyyxqGXoAkIcgwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzEzYTMzMzU2MzM2M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gTXG
MA0GCSqGSIb3DQEBCwUAA4IBAQBXrhXaJYtlgSlGoXAGuaGjUXp1S08vE3IxMcyQ
eQZp6ljBd4FkXHs2jJIfcsx+1nQ7Ryi/E1hm6RXw4lkOUcfp6VQJcxNDYLBna8v0
F4zvJ99npPPInnVCdiLpQjTkZ8woWa9id56g65pThJA57uRjaqdCRO1nKVCNlbJd
iUhVu4xjDQBTskGrOu+23RYZC9zSlLMm16KRV+R4n60ejBRhV5Je94iRrE3aEDBH
MNdgf7QAsHaUX/zhdaAxBSbH6WIOIapiywxNKmCLMZOPUkeaVIGCw/dIm/zIdVSX
bI1QFAVoAKO8vN7ilffaBo6rQl+yvIGgm0pG7AfxaOlIhVFf
-----END CERTIFICATE-----