Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333566333a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538313a333566333a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          6e2hMAzkZXNGUc7uvMmLKCCiqYOuoW9xsuftcBsMhk8=
Subject key identifier:   76:18:0A:74:1E:67:7E:ED:64:A7:2F:D5:31:1B:AB:D0:5A:B2:54:E3
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       6A26BEC8134E3A7CF069EBC6F9558FF2734AFF15
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333566333a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Fri 20 Jun 2025 06:26:07 +0000
ROA not before:           Fri 20 Jun 2025 06:21:07 +0000
ROA not after:            Fri 19 Jun 2026 06:26:07 +0000
asID:                     401507
IP address blocks:        2a14:7581:35f3::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:26:be:c8:13:4e:3a:7c:f0:69:eb:c6:f9:55:8f:f2:73:4a:ff:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jun 20 06:21:07 2025 GMT
            Not After : Jun 19 06:26:07 2026 GMT
        Subject: CN=76180A741E677EED64A72FD5311BABD05AB254E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d0:11:07:09:0b:12:89:f6:b9:49:54:e3:b5:
                    42:2f:c4:db:f4:e3:20:53:00:43:e1:cf:dd:84:03:
                    0e:2e:e2:e8:96:8e:b0:27:76:b5:49:ff:aa:b8:3a:
                    7a:21:79:72:d4:51:9d:a2:e9:15:fa:74:d5:c6:92:
                    14:eb:68:4b:74:12:49:d0:9b:40:ff:87:28:e9:37:
                    4b:52:c2:4c:f8:fb:b4:84:64:43:94:f5:5a:a1:eb:
                    51:b3:dc:0d:bf:16:24:1e:6f:57:28:12:cd:95:f6:
                    9d:94:92:5e:c3:17:41:50:55:b4:49:09:fd:b7:25:
                    91:ec:56:ce:7f:81:be:ea:79:61:4e:6a:22:2d:7b:
                    25:8f:72:49:a5:9c:55:20:a5:56:20:cb:7c:49:8f:
                    e7:60:9c:3f:a7:cf:a5:1f:22:08:bb:65:15:4f:2b:
                    97:91:25:c5:38:55:a8:ab:ef:49:3c:de:51:d3:12:
                    66:dd:12:17:d1:64:51:d7:23:4e:83:f4:63:c9:58:
                    d5:9c:e3:0e:a0:1e:b7:12:de:90:01:2d:7c:21:d1:
                    32:36:bf:d9:39:51:5f:3e:5b:6b:7d:2e:6e:5b:1a:
                    06:a2:71:71:38:5f:52:63:07:fe:09:85:0d:76:a6:
                    80:57:61:a1:54:ba:75:4e:99:79:bf:8d:ef:a3:3e:
                    d0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:18:0A:74:1E:67:7E:ED:64:A7:2F:D5:31:1B:AB:D0:5A:B2:54:E3
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333566333a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:35f3::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:a0:b0:40:a5:5a:cc:27:a0:15:7c:f2:76:31:54:c8:63:85:
         2e:ad:40:a8:bb:f7:83:a9:38:1d:59:ea:a5:df:a5:96:99:a8:
         70:60:74:02:b7:01:40:3f:15:b4:2e:22:99:c0:48:5f:c1:94:
         ac:02:ef:17:25:0c:ba:61:cd:d7:91:0a:f4:bd:4d:4c:4f:9a:
         c7:f7:27:da:95:eb:67:4f:dc:5e:2d:35:9c:fa:93:38:d1:33:
         0c:75:10:b2:f9:b9:37:05:1b:ec:b4:00:a0:5f:3d:1e:5e:19:
         19:84:81:8b:6d:d2:80:e5:2b:3f:35:0f:c9:5c:bd:77:94:ea:
         f0:c4:df:e8:fb:4d:51:de:5d:4d:cf:2c:02:13:9a:4e:bf:50:
         67:f6:d3:81:35:e6:da:e5:25:a8:6f:4b:37:f0:f9:0d:04:5a:
         3a:12:0c:06:d7:f9:d2:a5:ad:55:1a:4e:f0:8a:ce:a6:e6:a8:
         e7:d6:fc:b0:b0:2b:d1:99:8e:c1:ea:13:e8:81:2a:56:ad:bb:
         b2:86:48:0a:ed:a4:0c:72:48:2e:57:67:97:c6:38:23:4b:0b:
         d0:d3:00:33:73:67:e4:00:57:51:f2:34:20:0d:e1:b2:06:e6:
         bc:6f:46:72:fb:dc:e1:4d:1a:d8:9c:4b:9b:44:2f:a7:21:69:
         37:1b:a7:5b
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUaia+yBNOOnzwaevG+VWP8nNK/xUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA2MjAwNjIxMDdaFw0yNjA2MTkwNjI2MDdaMDMxMTAvBgNV
BAMTKDc2MTgwQTc0MUU2NzdFRUQ2NEE3MkZENTMxMUJBQkQwNUFCMjU0RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq0BEHCQsSifa5SVTjtUIvxNv0
4yBTAEPhz92EAw4u4uiWjrAndrVJ/6q4OnoheXLUUZ2i6RX6dNXGkhTraEt0EknQ
m0D/hyjpN0tSwkz4+7SEZEOU9Vqh61Gz3A2/FiQeb1coEs2V9p2Ukl7DF0FQVbRJ
Cf23JZHsVs5/gb7qeWFOaiIteyWPckmlnFUgpVYgy3xJj+dgnD+nz6UfIgi7ZRVP
K5eRJcU4Vair70k83lHTEmbdEhfRZFHXI06D9GPJWNWc4w6gHrcS3pABLXwh0TI2
v9k5UV8+W2t9Lm5bGgaicXE4X1JjB/4JhQ12poBXYaFUunVOmXm/je+jPtAbAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUdhgKdB5nfu1kpy/VMRur0FqyVOMwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzEzYTMzMzU2NjMzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gTXz
MA0GCSqGSIb3DQEBCwUAA4IBAQCwoLBApVrMJ6AVfPJ2MVTIY4UurUCou/eDqTgd
Weql36WWmahwYHQCtwFAPxW0LiKZwEhfwZSsAu8XJQy6Yc3XkQr0vU1MT5rH9yfa
letnT9xeLTWc+pM40TMMdRCy+bk3BRvstACgXz0eXhkZhIGLbdKA5Ss/NQ/JXL13
lOrwxN/o+01R3l1NzywCE5pOv1Bn9tOBNeba5SWob0s38PkNBFo6EgwG1/nSpa1V
Gk7wis6m5qjn1vywsCvRmY7B6hPogSpWrbuyhkgK7aQMckguV2eXxjgjSwvQ0wAz
c2fkAFdR8jQgDeGyBua8b0Zy+9zhTRrYnEubRC+nIWk3G6db
-----END CERTIFICATE-----