Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261643a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363261643a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          gysjz60VymWbXbmVl8HulgLtZgZRUoDqsaAfCqDtEjM=
Subject key identifier:   82:C3:B8:5C:83:FC:FB:7A:24:44:0A:82:75:8F:EB:E2:1F:B0:A0:30
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       2E655BF2D4F8A072D524033C77AC4324476EEE00
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261643a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Fri 16 May 2025 21:00:01 +0000
ROA not before:           Fri 16 May 2025 20:55:01 +0000
ROA not after:            Fri 15 May 2026 21:00:01 +0000
asID:                     401507
IP address blocks:        2a14:7584:62ad::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 21 May 2025 09:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:65:5b:f2:d4:f8:a0:72:d5:24:03:3c:77:ac:43:24:47:6e:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 16 20:55:01 2025 GMT
            Not After : May 15 21:00:01 2026 GMT
        Subject: CN=82C3B85C83FCFB7A24440A82758FEBE21FB0A030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c1:43:88:e9:06:38:f4:36:76:df:33:8e:34:
                    bb:15:a7:ba:81:bc:af:0a:7f:d1:93:77:89:af:b8:
                    7a:29:6b:d5:f1:09:67:5f:28:5f:00:a9:f0:fb:ac:
                    4c:ef:af:9a:97:78:ad:47:35:97:eb:7f:2d:d4:e3:
                    12:4d:4a:da:47:ed:ff:5d:31:ec:2d:d9:d8:f7:44:
                    7f:76:fc:fa:90:36:cd:13:ec:4c:13:96:e2:1f:b8:
                    4c:74:e5:b5:bf:d9:91:3c:e0:68:6b:ba:98:b9:a8:
                    0d:2b:0e:aa:3f:8f:15:75:e9:bf:99:b0:45:d3:65:
                    a5:af:1e:50:3e:78:45:5f:b7:5c:43:46:ca:20:2f:
                    d8:b0:6e:14:14:7a:7f:04:c6:4d:b9:a3:b8:72:ee:
                    fa:d2:b6:47:dc:c7:9a:e0:05:c5:bc:e5:05:1b:7f:
                    95:c6:7c:d7:13:f2:60:37:40:03:e1:62:29:02:62:
                    0f:de:6a:73:c9:80:c0:1a:ce:50:74:d5:55:b7:8f:
                    85:b4:d8:94:a6:d0:f0:a7:27:50:1d:ee:79:78:2c:
                    04:32:7a:57:ab:d8:52:0f:74:5f:85:43:b4:33:66:
                    70:0d:b1:78:e6:bf:0b:d2:c2:b3:0c:cc:c0:7a:85:
                    f6:f6:75:4c:07:50:d3:b6:63:f7:6b:8c:8a:1f:01:
                    da:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C3:B8:5C:83:FC:FB:7A:24:44:0A:82:75:8F:EB:E2:1F:B0:A0:30
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261643a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:62ad::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:6e:16:32:90:7f:d3:c2:e8:ed:03:6d:07:36:06:93:49:d1:
         48:55:2c:0e:1c:99:99:15:3a:2d:3d:d1:cc:bc:46:a3:7c:ee:
         0c:42:be:3b:f8:bc:35:fe:0e:3f:21:b4:c6:f4:1f:6b:3a:ea:
         84:fb:bd:a1:91:3b:1c:ec:83:00:22:39:2e:7b:07:10:17:ce:
         97:61:41:94:55:55:2c:b1:8e:54:ee:71:f9:20:17:3a:4a:bc:
         8d:2d:66:65:8f:d5:a0:d6:69:f5:2e:80:ea:50:49:f7:9e:ed:
         57:ca:44:dd:80:66:03:2d:92:4d:3d:24:cc:78:07:ca:65:a5:
         f5:7b:b5:84:af:01:b4:f1:4f:db:b3:89:ab:8b:30:d6:9d:c1:
         d3:08:75:17:ba:38:de:3c:e8:98:59:7d:73:0f:99:a1:8c:cf:
         a5:69:99:89:ff:b2:3b:c2:4a:d1:f5:b0:96:11:28:ee:88:04:
         40:78:08:1f:4e:9d:8e:47:ab:a9:86:94:6e:11:16:b5:81:16:
         b5:f6:09:25:35:c9:47:5f:fa:a3:43:e8:79:66:69:e1:15:18:
         9a:92:bb:af:fc:55:e7:92:c2:f6:41:fe:50:ed:26:4e:e2:ce:
         73:f9:fc:c5:37:1c:1e:cf:f6:d1:e0:55:94:5e:7c:1d:27:89:
         9f:f3:e4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:59:59 2025 by rpki-client