Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232643a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363232643a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          0eL6dKAlG+Iu8OVvJAcIAeZupXBBQ3WTmAEtgmaV3cQ=
Subject key identifier:   0D:3A:9A:CE:1C:C1:55:3F:BD:FA:4C:2E:7F:8A:08:6D:0F:B1:1D:3D
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       24BCEB89FAAA8D4F5C8636F9B7DD3F345291FEDD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232643a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Mon 12 May 2025 16:18:05 +0000
ROA not before:           Mon 12 May 2025 16:13:05 +0000
ROA not after:            Mon 11 May 2026 16:18:05 +0000
asID:                     401507
IP address blocks:        2a14:7584:622d::/48 maxlen: 48
Validation:               Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:bc:eb:89:fa:aa:8d:4f:5c:86:36:f9:b7:dd:3f:34:52:91:fe:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 12 16:13:05 2025 GMT
            Not After : May 11 16:18:05 2026 GMT
        Subject: CN=0D3A9ACE1CC1553FBDFA4C2E7F8A086D0FB11D3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:16:19:8b:22:51:16:b9:18:85:50:2a:e4:
                    04:34:4a:3a:27:08:93:ef:90:8f:00:77:7d:56:69:
                    46:d3:9c:70:27:db:b9:ed:2d:1c:3f:3a:a7:cb:2a:
                    df:96:25:3a:ff:48:55:ab:3b:e1:ae:71:f6:d3:f0:
                    a5:ba:a8:54:eb:c3:d9:6d:78:f5:47:8b:8b:41:0d:
                    ed:64:04:1b:92:48:c8:64:8c:99:69:21:68:e2:15:
                    5c:dd:49:46:95:90:dd:7f:9c:d5:65:d6:c9:9a:4b:
                    93:8f:95:7c:95:2f:ef:e1:e5:5c:0c:61:46:a0:9c:
                    93:92:83:e5:44:b2:5d:ef:df:96:c9:38:7a:cf:b4:
                    b8:62:67:3c:41:de:87:e6:56:28:73:bd:8a:39:d2:
                    fa:6f:7e:8f:b1:09:d5:6e:43:3f:19:2b:0d:b4:f1:
                    66:ef:ca:fc:e2:ef:b8:6a:c8:ec:45:c5:a2:d1:48:
                    a4:fb:84:53:85:c7:5a:49:e9:0c:2b:bd:69:0b:93:
                    0a:09:5e:00:00:36:cd:fd:91:0e:a6:d8:c6:85:3c:
                    08:27:ea:ed:bc:f8:91:99:ff:4b:3c:d8:b8:65:27:
                    27:0e:b9:02:eb:56:f0:8a:5f:d0:71:72:b3:fc:2a:
                    a3:9c:f5:0e:ae:dd:28:a5:54:3d:6c:cb:6d:4b:6b:
                    21:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3A:9A:CE:1C:C1:55:3F:BD:FA:4C:2E:7F:8A:08:6D:0F:B1:1D:3D
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232643a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:622d::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:69:5c:b2:72:b5:32:0a:27:a5:86:38:71:50:c4:07:0a:6b:
         56:8f:dc:de:f0:1f:3b:a6:eb:32:08:3c:a5:0f:b7:18:65:18:
         71:aa:71:5a:08:e4:ee:d5:2f:d8:db:e9:62:6c:7b:c7:c3:b1:
         c4:0d:8f:51:9f:7f:a1:45:b3:4c:c8:0f:99:90:28:0b:b6:65:
         03:50:5c:b3:8a:54:4b:aa:3e:75:83:34:6a:06:5f:89:5f:96:
         6c:c7:b4:59:bf:f3:4b:48:b2:04:4c:39:da:b8:02:ba:18:3a:
         85:6d:39:8f:d7:16:56:63:63:ad:60:aa:df:b9:6b:75:1c:a6:
         75:ba:1b:64:52:26:3d:af:f2:4d:5d:0e:19:70:f7:10:fb:86:
         3c:2d:32:f3:b1:72:fe:42:24:08:a2:e3:80:15:95:62:c3:4b:
         d2:b8:8d:34:3a:23:54:35:08:4b:20:6a:a5:8b:b3:d6:49:71:
         7c:4f:aa:19:e9:ef:4f:03:fe:cf:f3:53:27:98:a7:4f:b4:e6:
         ce:96:bf:aa:d5:4b:65:96:ed:d5:33:c5:f1:97:8d:d3:01:77:
         07:99:d5:0f:9f:c3:93:71:7b:02:08:13:3d:29:8f:0d:00:1e:
         a8:ff:08:a1:68:16:b4:73:b2:e8:97:56:f9:27:65:c8:97:5f:
         e1:e3:3c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----