Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263353a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363263353a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          JEKXEAdf7rlRhor+npdPIjK957t7iJrXrqsJ0zLnYbk=
Subject key identifier:   8E:8B:41:40:86:41:DB:23:E5:33:6C:55:74:5B:D6:09:17:16:4C:2F
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       2DE7EF6612B2C9362982246364C178C101292D71
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263353a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Sat 17 May 2025 15:12:02 +0000
ROA not before:           Sat 17 May 2025 15:07:02 +0000
ROA not after:            Sat 16 May 2026 15:12:02 +0000
asID:                     401507
IP address blocks:        2a14:7584:62c5::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 21 May 2025 20:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e7:ef:66:12:b2:c9:36:29:82:24:63:64:c1:78:c1:01:29:2d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 17 15:07:02 2025 GMT
            Not After : May 16 15:12:02 2026 GMT
        Subject: CN=8E8B41408641DB23E5336C55745BD60917164C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:34:32:a1:65:83:34:87:e9:d3:ce:c1:ca:73:
                    b6:2b:47:13:b7:e0:53:42:a1:57:23:6f:e5:b4:f9:
                    1b:4d:bd:98:55:64:97:39:28:e5:23:26:26:f1:c4:
                    61:4f:a7:48:01:d9:23:13:f4:c9:ff:5e:52:ad:08:
                    63:34:89:0c:0e:4d:7f:95:c0:2e:27:bc:a2:02:62:
                    de:fd:63:a0:d4:0c:01:50:ee:19:9d:52:66:3d:a5:
                    7c:b1:a7:f1:1b:99:54:94:e7:24:d6:5a:d0:e3:ed:
                    f1:fb:7d:d7:46:45:f3:18:fa:7e:f2:24:b5:e5:12:
                    77:c8:ed:fd:70:a6:6d:77:e1:73:32:c9:58:fa:74:
                    a3:06:e1:c4:22:de:2e:00:1f:dc:c2:62:88:64:b7:
                    b6:2d:5e:8f:80:0c:a1:04:67:f1:e6:ca:8e:bd:3a:
                    63:24:df:71:c7:7f:64:97:22:c2:77:e0:95:af:fe:
                    8a:72:c7:cc:a3:ce:89:d3:ca:0b:3a:56:07:67:35:
                    25:89:28:3a:22:c4:1f:89:9d:0b:72:c8:7d:7f:81:
                    1c:a9:4d:e1:2b:9c:ad:6d:16:75:df:08:87:0d:4b:
                    05:8e:38:82:da:f3:9f:0d:20:36:80:60:29:d7:4a:
                    c3:03:51:61:ab:de:2d:46:1d:56:78:ac:50:0e:b6:
                    12:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8B:41:40:86:41:DB:23:E5:33:6C:55:74:5B:D6:09:17:16:4C:2F
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263353a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:62c5::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:4c:0b:bd:d5:dd:fe:ad:d0:12:ee:e9:2e:93:64:c7:06:20:
         22:45:0b:e0:48:37:2f:01:e3:b2:f5:d6:12:d6:be:8d:d9:c9:
         15:4a:b0:06:be:56:f9:bb:37:12:65:e9:ce:bf:24:30:ad:c1:
         0e:b6:73:f3:a2:3e:ca:8f:d3:65:6f:5a:51:5f:eb:f8:f8:bb:
         1e:d2:62:2f:bd:6c:c4:af:e9:90:13:5b:64:c9:42:e3:98:ac:
         19:00:b8:93:e9:32:db:c5:72:11:4e:e6:e8:b4:56:ff:f1:ea:
         1e:94:ae:28:c4:7e:29:90:b7:0c:e5:f2:c8:b3:bf:57:d8:6f:
         94:71:36:47:a2:91:be:99:ca:2d:ce:56:21:b1:4b:7c:94:49:
         2b:5f:1b:1e:62:8a:c2:88:42:5d:13:65:71:c5:ec:3a:20:bf:
         50:f3:34:b0:a2:e6:7e:af:bd:c2:35:a2:69:98:77:9a:7c:30:
         f0:8e:74:69:a8:4b:79:ff:0b:4c:ba:7d:2a:85:8c:6b:b5:a3:
         25:b2:27:fc:89:b4:52:f7:58:3a:f3:d7:51:bd:6e:b1:94:12:
         9d:56:6d:db:40:1d:29:ba:31:05:1e:5a:50:d9:e3:f3:3a:e0:
         4d:78:69:b6:4d:e7:b6:79:c3:5e:17:8f:ac:c9:13:6c:3b:a0:
         f5:03:49:a5
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIULefvZhKyyTYpgiRjZMF4wQEpLXEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTcxNTA3MDJaFw0yNjA1MTYxNTEyMDJaMDMxMTAvBgNV
BAMTKDhFOEI0MTQwODY0MURCMjNFNTMzNkM1NTc0NUJENjA5MTcxNjRDMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZNDKhZYM0h+nTzsHKc7YrRxO3
4FNCoVcjb+W0+RtNvZhVZJc5KOUjJibxxGFPp0gB2SMT9Mn/XlKtCGM0iQwOTX+V
wC4nvKICYt79Y6DUDAFQ7hmdUmY9pXyxp/EbmVSU5yTWWtDj7fH7fddGRfMY+n7y
JLXlEnfI7f1wpm134XMyyVj6dKMG4cQi3i4AH9zCYohkt7YtXo+ADKEEZ/Hmyo69
OmMk33HHf2SXIsJ34JWv/opyx8yjzonTygs6VgdnNSWJKDoixB+JnQtyyH1/gRyp
TeErnK1tFnXfCIcNSwWOOILa858NIDaAYCnXSsMDUWGr3i1GHVZ4rFAOthKhAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUjotBQIZB2yPlM2xVdFvWCRcWTC8wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzI2MzM1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGLF
MA0GCSqGSIb3DQEBCwUAA4IBAQB0TAu91d3+rdAS7ukuk2THBiAiRQvgSDcvAeOy
9dYS1r6N2ckVSrAGvlb5uzcSZenOvyQwrcEOtnPzoj7Kj9Nlb1pRX+v4+Lse0mIv
vWzEr+mQE1tkyULjmKwZALiT6TLbxXIRTubotFb/8eoelK4oxH4pkLcM5fLIs79X
2G+UcTZHopG+mcotzlYhsUt8lEkrXxseYorCiEJdE2Vxxew6IL9Q8zSwouZ+r73C
NaJpmHeafDDwjnRpqEt5/wtMun0qhYxrtaMlsif8ibRS91g689dRvW6xlBKdVm3b
QB0pujEFHlpQ2ePzOuBNeGm2Tee2ecNeF4+syRNsO6D1A0ml
-----END CERTIFICATE-----