Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030303a3a2f33362d3438203d3e20343031353037.roa
File:                     326131343a373538343a363030303a3a2f33362d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          Y2srxgmKPBxHMor1oV34SGgKg3DyeLkZvfe1fiafyZU=
Subject key identifier:   C4:ED:F4:CD:FD:87:E8:C6:17:4F:E8:6A:B5:DA:09:0E:18:33:7E:69
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       3A1981D3DA53077F8C3833735493B88551EDBD3C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030303a3a2f33362d3438203d3e20343031353037.roa
Signing time:             Mon 12 May 2025 16:18:04 +0000
ROA not before:           Mon 12 May 2025 16:13:04 +0000
ROA not after:            Mon 11 May 2026 16:18:04 +0000
asID:                     401507
IP address blocks:        2a14:7584:6000::/36 maxlen: 48
Validation:               Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:19:81:d3:da:53:07:7f:8c:38:33:73:54:93:b8:85:51:ed:bd:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 12 16:13:04 2025 GMT
            Not After : May 11 16:18:04 2026 GMT
        Subject: CN=C4EDF4CDFD87E8C6174FE86AB5DA090E18337E69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:26:56:db:3f:30:34:9e:bd:0a:c5:fa:88:ed:
                    d1:72:5f:97:83:f3:fd:9d:c2:02:47:36:e1:a2:dc:
                    d6:49:92:5c:89:05:31:cb:22:ef:a7:42:36:ca:82:
                    5b:7f:11:f7:34:54:0b:87:60:3d:d8:90:72:dd:85:
                    bc:4e:43:e5:b9:68:49:6b:9c:1e:3a:25:f0:12:49:
                    06:e5:a7:27:30:cd:98:fa:8b:3e:dc:8e:e5:6b:78:
                    c2:f5:f8:7a:9b:32:f2:e6:bb:c0:44:f5:8c:64:2c:
                    96:23:80:f6:79:67:fa:fd:f9:0a:b9:cd:09:6c:12:
                    1c:ee:cb:09:d4:43:39:56:ad:23:02:fe:cd:f4:77:
                    97:e2:6e:0b:e2:d4:5a:07:65:a1:43:a6:c1:83:c9:
                    12:fa:41:0c:38:c9:f5:71:6a:75:06:a9:15:d0:4b:
                    bd:22:5d:b4:03:0c:16:06:78:16:d9:ff:92:bd:b3:
                    a5:72:81:59:c7:37:f5:7f:ea:eb:4d:b0:a0:09:36:
                    60:eb:27:48:5f:e6:7b:e7:cb:cf:d6:af:c1:02:13:
                    b0:4b:75:d8:47:d6:5a:86:18:c4:ba:d1:fb:90:b5:
                    49:bd:54:f6:ff:a7:00:cd:ae:ab:ea:04:d3:dc:6c:
                    0f:40:09:13:ed:6d:86:ff:c1:81:1a:e7:a4:9f:f2:
                    90:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:ED:F4:CD:FD:87:E8:C6:17:4F:E8:6A:B5:DA:09:0E:18:33:7E:69
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030303a3a2f33362d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         21:ba:88:12:b9:7c:ce:1a:6c:fb:15:90:f7:d1:30:2f:ca:a7:
         4b:63:e8:1e:0d:81:47:bd:d8:b7:a8:48:7b:51:ed:27:1e:0e:
         c6:bc:3d:61:3b:68:6e:35:73:ef:7c:3c:a9:ee:41:52:06:b6:
         b5:7f:61:fe:c6:bd:2e:ee:3a:26:b4:98:07:35:0a:da:9d:fa:
         b5:d6:c7:ff:ed:a9:28:2c:00:13:ac:00:12:b7:5a:9d:c5:1f:
         ce:b7:d0:8e:04:c0:7a:29:69:e7:17:cc:a2:9f:1f:a0:53:a3:
         86:44:bb:6b:93:d7:ce:df:67:43:63:37:92:72:70:df:b6:05:
         0f:c3:68:48:ff:d1:dd:65:8e:ce:1b:1b:c9:e6:1c:43:40:9a:
         19:66:ff:c9:a1:41:d1:5e:73:b5:c4:f2:5d:f8:d9:cf:a2:d5:
         ad:d6:d1:ca:d5:36:e8:e7:d7:1b:ea:54:e4:28:08:33:10:c1:
         89:3b:19:23:e7:fd:e5:b2:33:4c:89:29:59:da:61:68:3f:95:
         e2:35:ff:28:53:1d:1c:54:bf:1d:8f:3b:e6:df:3f:bc:de:21:
         8e:f6:79:18:5d:c5:6e:b3:6c:cb:d6:b0:33:a3:36:b0:5a:bc:
         0c:5f:e1:07:c7:4e:7f:c7:0e:13:d1:f1:05:86:25:77:47:af:
         b8:66:4c:98
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUOhmB09pTB3+MODNzVJO4hVHtvTwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTIxNjEzMDRaFw0yNjA1MTExNjE4MDRaMDMxMTAvBgNV
BAMTKEM0RURGNENERkQ4N0U4QzYxNzRGRTg2QUI1REEwOTBFMTgzMzdFNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBJlbbPzA0nr0KxfqI7dFyX5eD
8/2dwgJHNuGi3NZJklyJBTHLIu+nQjbKglt/Efc0VAuHYD3YkHLdhbxOQ+W5aElr
nB46JfASSQblpycwzZj6iz7cjuVreML1+HqbMvLmu8BE9YxkLJYjgPZ5Z/r9+Qq5
zQlsEhzuywnUQzlWrSMC/s30d5fibgvi1FoHZaFDpsGDyRL6QQw4yfVxanUGqRXQ
S70iXbQDDBYGeBbZ/5K9s6VygVnHN/V/6utNsKAJNmDrJ0hf5nvny8/Wr8ECE7BL
ddhH1lqGGMS60fuQtUm9VPb/pwDNrqvqBNPcbA9ACRPtbYb/wYEa56Sf8pDTAgMB
AAGjggJpMIICZTAdBgNVHQ4EFgQUxO30zf2H6MYXT+hqtdoJDhgzfmkwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzMDMwM2EzYTJm
MzMzNjJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKhR1hGAw
DQYJKoZIhvcNAQELBQADggEBACG6iBK5fM4abPsVkPfRMC/Kp0tj6B4NgUe92Leo
SHtR7SceDsa8PWE7aG41c+98PKnuQVIGtrV/Yf7GvS7uOia0mAc1Ctqd+rXWx//t
qSgsABOsABK3Wp3FH8630I4EwHopaecXzKKfH6BTo4ZEu2uT187fZ0NjN5JycN+2
BQ/DaEj/0d1ljs4bG8nmHENAmhlm/8mhQdFec7XE8l342c+i1a3W0crVNujn1xvq
VOQoCDMQwYk7GSPn/eWyM0yJKVnaYWg/leI1/yhTHRxUvx2PO+bfP7zeIY72eRhd
xW6zbMvWsDOjNrBavAxf4QfHTn/HDhPR8QWGJXdHr7hmTJg=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:28:44 2025 by rpki-client