Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263363a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363263363a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          u3B0J5Pbk6+bQYtDrL5JVqVI81NF9Z9SnSNf9Vuwv/A=
Subject key identifier:   35:5C:BB:D9:FA:64:19:F2:10:E7:85:8D:EC:A2:83:DA:E0:45:94:CE
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       05F230C030ED0773C64214D51C58A3186A32B933
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263363a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Sat 17 May 2025 15:12:02 +0000
ROA not before:           Sat 17 May 2025 15:07:02 +0000
ROA not after:            Sat 16 May 2026 15:12:02 +0000
asID:                     401507
IP address blocks:        2a14:7584:62c6::/48 maxlen: 48
Validation:               Failed, certificate revoked on Thu 22 May 2025 03:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f2:30:c0:30:ed:07:73:c6:42:14:d5:1c:58:a3:18:6a:32:b9:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 17 15:07:02 2025 GMT
            Not After : May 16 15:12:02 2026 GMT
        Subject: CN=355CBBD9FA6419F210E7858DECA283DAE04594CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2d:14:e9:8a:17:b5:01:fa:a2:07:2e:39:91:
                    f3:29:ea:10:48:2e:65:12:cc:5e:52:a1:90:42:5a:
                    de:b2:f1:41:64:31:ce:8b:88:24:75:51:98:3c:a6:
                    6d:04:f4:b2:bd:d5:64:fe:8d:40:8f:aa:06:14:d0:
                    d3:f0:d7:78:de:44:f3:58:6c:c9:20:02:32:f7:77:
                    10:f9:98:b4:11:3a:28:22:0e:89:6a:42:7e:f2:a8:
                    cc:8f:70:19:df:9c:d0:f8:f2:16:9c:df:b6:5c:e9:
                    1b:21:16:d8:87:02:90:b0:fd:1d:61:7e:91:8f:0c:
                    7b:8f:8f:e6:ce:5e:e7:0f:0b:e1:5e:03:2b:1c:0a:
                    c3:0d:62:96:45:a0:25:a2:e9:27:f0:a7:0e:1a:15:
                    f1:bd:46:16:c4:e6:ce:c2:bf:f1:14:61:f7:ee:33:
                    ec:22:22:cf:f0:de:5c:3a:9a:08:c0:10:0d:f8:76:
                    8e:87:b1:53:cb:e2:5d:7c:6d:9d:1c:68:ba:47:81:
                    e1:c4:b1:aa:02:a1:65:bb:57:de:2c:91:33:3f:f1:
                    bb:ea:fc:39:62:81:53:be:e7:1e:43:16:f5:74:e4:
                    b4:0b:e9:d8:0b:87:c5:9a:6c:53:6d:fb:d6:64:69:
                    89:f4:2d:66:0f:eb:7e:fa:b6:dd:09:9e:57:03:5e:
                    69:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5C:BB:D9:FA:64:19:F2:10:E7:85:8D:EC:A2:83:DA:E0:45:94:CE
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263363a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:62c6::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:18:47:96:83:85:f3:39:1d:02:9c:8c:23:52:cb:2f:d0:0a:
         ee:24:46:a0:7a:93:01:ed:db:b5:f0:2b:e5:38:8f:f7:9c:5d:
         df:7f:28:5d:36:e5:66:d5:00:d6:18:66:cc:21:81:90:55:54:
         51:29:02:7e:b7:4c:ac:4e:77:ec:8d:dc:14:7f:cd:b5:d0:08:
         1b:54:e2:62:61:0c:cb:03:f2:bb:d7:7b:29:35:0b:4c:ff:33:
         23:4e:0f:78:16:19:37:85:f5:90:ce:d7:75:62:3e:77:4c:be:
         fe:0e:99:a0:9c:27:8a:aa:8a:c1:00:30:94:ab:fc:c4:f5:4b:
         7c:f2:87:5f:fa:4d:66:81:44:40:0a:5c:3d:df:87:2e:6d:82:
         e6:08:e4:18:f6:0f:8f:7f:1e:04:31:a8:ed:7a:0c:b8:39:c7:
         9d:37:f3:26:6e:98:ac:f6:08:92:c1:65:07:14:88:78:95:04:
         6c:ea:91:92:7a:4f:55:e8:34:98:7e:18:fe:3e:79:ad:99:a6:
         f2:62:f0:53:df:cb:20:b3:de:00:da:36:0c:79:5d:7c:7e:52:
         bc:89:ee:df:90:24:cb:5b:8e:80:0f:89:b9:8b:2a:a2:eb:83:
         24:16:35:61:27:d6:7b:e4:91:30:08:7a:e5:8e:ff:34:93:24:
         ee:90:41:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:01:59 2025 by rpki-client