Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363163643a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363163643a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          KJhPPRKhk7djctG7LYzuFhf7iM3Cv6SK0C5s+FiO4I0=
Subject key identifier:   EE:F7:23:5A:21:FB:10:7C:A0:2C:6E:08:91:19:23:E9:99:DF:4D:5D
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       72ED667911A36863B68EC74F4306B27CD672B6F8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363163643a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Mon 12 May 2025 16:18:03 +0000
ROA not before:           Mon 12 May 2025 16:13:03 +0000
ROA not after:            Mon 11 May 2026 16:18:03 +0000
asID:                     401507
IP address blocks:        2a14:7584:61cd::/48 maxlen: 48
Validation:               Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ed:66:79:11:a3:68:63:b6:8e:c7:4f:43:06:b2:7c:d6:72:b6:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 12 16:13:03 2025 GMT
            Not After : May 11 16:18:03 2026 GMT
        Subject: CN=EEF7235A21FB107CA02C6E08911923E999DF4D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b2:c3:de:1f:ad:75:f1:1c:62:3b:6f:ae:05:
                    3e:00:df:c6:1d:4b:46:b5:5a:c5:ea:db:42:e5:80:
                    1f:e8:bf:f4:8c:1a:5f:b4:ae:99:1d:24:3f:1c:b9:
                    62:5d:17:53:f7:b6:24:17:06:14:35:cd:ed:d3:86:
                    ca:b4:29:6d:02:aa:fe:1c:94:39:6f:bc:b6:b6:2f:
                    4c:e1:79:05:46:45:b4:48:0a:f4:c3:78:ab:40:be:
                    30:83:93:2a:42:b5:47:45:fb:0c:ee:15:b5:49:3e:
                    09:74:30:af:6b:0c:7f:b8:8b:39:3b:8d:81:a6:1c:
                    9f:1f:8e:d3:3c:bc:d0:ac:6d:46:d5:bd:b0:d0:6d:
                    d8:d0:47:d1:91:28:8d:af:ed:16:6b:84:04:21:22:
                    08:7a:34:96:9f:13:32:98:4c:43:4f:ef:ce:ca:e5:
                    47:44:ed:20:3a:4b:c2:e8:8a:75:d8:40:60:27:d6:
                    ee:34:62:85:9c:cb:23:a9:3a:ff:83:98:44:48:d1:
                    73:d5:35:55:57:2b:1a:ce:69:f7:33:8d:e7:2c:a4:
                    09:ae:05:32:a9:8f:44:2e:81:da:70:05:93:1e:6a:
                    c6:6b:28:58:09:dd:2e:39:c3:ae:ab:0e:e4:d9:24:
                    6f:df:e5:1c:75:ee:62:cb:4f:e4:7d:b5:b5:49:be:
                    9e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F7:23:5A:21:FB:10:7C:A0:2C:6E:08:91:19:23:E9:99:DF:4D:5D
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363163643a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:61cd::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:99:d1:b8:a4:68:7e:1b:4e:17:91:ba:b6:9d:04:1b:87:e0:
         4c:b0:1a:55:30:f4:77:79:39:e1:9a:a7:74:f1:f5:81:c8:18:
         23:bf:1e:de:8d:b1:73:56:60:01:ef:2e:67:61:cc:fe:97:ed:
         df:7b:e9:db:6e:80:01:d6:06:8f:b1:48:fe:7a:42:36:4d:11:
         ac:59:95:40:2d:2f:e8:60:b2:da:a1:d1:ee:cb:7d:16:89:61:
         7f:57:45:68:c1:df:bb:b9:71:2d:75:07:24:59:7d:67:a2:3b:
         68:da:de:97:73:7b:9c:0a:f9:8d:41:98:7c:01:5f:4b:2d:42:
         f7:bd:d2:b7:35:2e:e9:ae:37:97:e7:cb:bf:a6:f4:72:4b:27:
         fb:10:8f:00:ed:a6:ec:9e:0f:41:1f:1f:c9:f1:f2:03:bd:d2:
         dd:fd:db:4e:cf:17:90:1f:7b:6f:e6:fd:90:91:6f:a9:1d:ae:
         51:86:64:0d:0a:0c:7f:62:90:95:2d:6c:ff:8f:84:0e:e8:f8:
         da:cb:c7:a7:e3:13:54:b7:2f:4b:8c:e8:71:cb:83:3e:a2:59:
         ce:5a:a0:88:e5:89:70:ed:c3:ca:ee:60:64:a7:8d:a6:ce:9a:
         72:95:93:16:ad:75:cf:93:8d:98:2b:4c:36:e0:3d:49:52:7c:
         ac:eb:3c:d3
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUcu1meRGjaGO2jsdPQwayfNZytvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTIxNjEzMDNaFw0yNjA1MTExNjE4MDNaMDMxMTAvBgNV
BAMTKEVFRjcyMzVBMjFGQjEwN0NBMDJDNkUwODkxMTkyM0U5OTlERjRENUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpssPeH6118RxiO2+uBT4A38Yd
S0a1WsXq20LlgB/ov/SMGl+0rpkdJD8cuWJdF1P3tiQXBhQ1ze3Thsq0KW0Cqv4c
lDlvvLa2L0zheQVGRbRICvTDeKtAvjCDkypCtUdF+wzuFbVJPgl0MK9rDH+4izk7
jYGmHJ8fjtM8vNCsbUbVvbDQbdjQR9GRKI2v7RZrhAQhIgh6NJafEzKYTENP787K
5UdE7SA6S8LoinXYQGAn1u40YoWcyyOpOv+DmERI0XPVNVVXKxrOafczjecspAmu
BTKpj0QugdpwBZMeasZrKFgJ3S45w66rDuTZJG/f5Rx17mLLT+R9tbVJvp5BAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQU7vcjWiH7EHygLG4IkRkj6ZnfTV0wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzE2MzY0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGHN
MA0GCSqGSIb3DQEBCwUAA4IBAQCymdG4pGh+G04Xkbq2nQQbh+BMsBpVMPR3eTnh
mqd08fWByBgjvx7ejbFzVmAB7y5nYcz+l+3fe+nbboAB1gaPsUj+ekI2TRGsWZVA
LS/oYLLaodHuy30WiWF/V0Vowd+7uXEtdQckWX1nojto2t6Xc3ucCvmNQZh8AV9L
LUL3vdK3NS7prjeX58u/pvRySyf7EI8A7absng9BHx/J8fIDvdLd/dtOzxeQH3tv
5v2QkW+pHa5RhmQNCgx/YpCVLWz/j4QO6Pjay8en4xNUty9LjOhxy4M+olnOWqCI
5Ylw7cPK7mBkp42mzppylZMWrXXPk42YK0w24D1JUnys6zzT
-----END CERTIFICATE-----