Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333565613a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538313a333565613a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          3eKryvdXsxTu65oL6KWI4+wWvBRpp3tAOkRlHEoS3lA=
Subject key identifier:   E6:98:FD:0F:71:F1:9D:79:B2:6B:01:9F:E9:B4:DC:DE:01:50:B6:BC
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       5753253BC7688FBD340BF0741702C66B2F56CE0E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333565613a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Fri 20 Jun 2025 06:26:06 +0000
ROA not before:           Fri 20 Jun 2025 06:21:06 +0000
ROA not after:            Fri 19 Jun 2026 06:26:06 +0000
asID:                     401507
IP address blocks:        2a14:7581:35ea::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:53:25:3b:c7:68:8f:bd:34:0b:f0:74:17:02:c6:6b:2f:56:ce:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jun 20 06:21:06 2025 GMT
            Not After : Jun 19 06:26:06 2026 GMT
        Subject: CN=E698FD0F71F19D79B26B019FE9B4DCDE0150B6BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:38:b3:83:c9:84:47:b2:43:c6:28:f0:59:93:
                    5b:25:ae:aa:9d:9d:6b:1e:64:2d:fe:53:82:ab:b3:
                    eb:8a:7c:bc:27:77:e2:0e:cb:71:83:9a:29:99:9d:
                    e2:f5:a6:45:6b:0b:d3:f9:d2:c8:19:4c:fe:47:59:
                    0d:eb:95:3c:4c:77:f7:e7:04:38:78:3b:2d:33:3d:
                    1d:38:1f:1f:ec:82:08:3a:5d:75:7b:0f:e4:35:e1:
                    fa:67:8b:ae:75:2a:97:16:cd:89:1c:31:12:34:d2:
                    25:aa:c0:27:59:0b:ca:5f:25:d5:f2:55:e4:4a:a7:
                    59:21:0f:e2:4e:3b:80:47:ee:ad:b6:9a:4d:6d:36:
                    f4:bb:71:7b:f6:7b:50:99:63:c7:ea:3f:5d:7b:95:
                    d1:3c:0f:55:26:f3:96:c5:39:6c:d5:26:38:0c:4f:
                    e0:8a:c4:1f:2a:89:b4:07:66:0e:21:b0:e1:2c:89:
                    61:43:71:45:48:0d:09:ea:85:6c:0b:5b:c7:34:30:
                    4f:8e:a1:56:fa:8b:c9:f5:a9:db:fe:8b:4f:6f:cb:
                    dd:77:e0:e8:f9:ea:ea:6d:b8:f0:91:1e:0e:bf:66:
                    6d:b4:fd:b5:b3:5e:fc:1c:a6:2d:2a:89:53:d6:a1:
                    a2:bc:b6:75:5f:c3:bc:32:01:68:28:3a:0d:10:6e:
                    74:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:98:FD:0F:71:F1:9D:79:B2:6B:01:9F:E9:B4:DC:DE:01:50:B6:BC
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333565613a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:35ea::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:a5:09:33:ed:fe:3b:67:e2:d6:2f:3a:09:7b:f1:c7:5c:66:
         e9:c3:24:56:a9:e6:1d:77:53:bb:62:38:8a:10:17:8f:61:3a:
         e7:73:e4:6c:cf:0b:ff:7c:a2:a6:13:55:36:08:45:4a:e1:03:
         9e:a0:c1:ff:2c:36:03:15:47:08:af:b9:59:d8:33:97:55:b7:
         75:d2:df:82:f4:65:f6:2a:f8:3f:e8:24:84:c1:68:21:09:12:
         65:60:3b:7b:32:41:89:b9:55:7a:6f:24:00:24:4f:76:5f:81:
         59:d1:89:a1:30:56:28:f6:d6:92:8b:88:93:09:11:b7:42:4c:
         c5:b6:df:dd:63:d9:18:fa:ae:ef:71:f8:0c:a3:70:5f:a1:b0:
         23:ec:cb:b6:f1:60:bd:04:dc:0e:4e:51:8b:df:a7:c3:08:ed:
         4f:cf:fd:2c:65:21:ce:dc:c3:ae:36:94:00:87:f5:a0:32:de:
         1e:47:d4:bc:0c:ce:07:a8:2f:df:8c:98:d1:13:66:fa:0d:54:
         ca:0c:a0:6e:6c:26:8e:a5:32:7f:ac:77:cf:92:fa:1b:09:a9:
         36:dd:49:f8:62:82:9b:d9:7a:21:68:cd:a6:46:53:62:e6:8c:
         7d:3a:dc:05:e3:a7:66:d3:65:a6:2b:27:3c:35:2d:ab:c5:7d:
         8f:1d:07:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----