Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264633a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363264633a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          OHh/4TWcLjUwJrRFyn/CHEKQSfK7vIfWzv79fLNryBY=
Subject key identifier:   AA:7F:27:88:91:80:3F:3F:30:CC:69:BA:00:2A:16:B3:BE:6B:00:16
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       779E6DB95DDBDAAC96334013670A398A37791B29
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264633a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Sun 18 May 2025 08:42:02 +0000
ROA not before:           Sun 18 May 2025 08:37:02 +0000
ROA not after:            Sun 17 May 2026 08:42:02 +0000
asID:                     401507
IP address blocks:        2a14:7584:62dc::/48 maxlen: 48
Validation:               Failed, certificate revoked on Thu 22 May 2025 10:42:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9e:6d:b9:5d:db:da:ac:96:33:40:13:67:0a:39:8a:37:79:1b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 18 08:37:02 2025 GMT
            Not After : May 17 08:42:02 2026 GMT
        Subject: CN=AA7F278891803F3F30CC69BA002A16B3BE6B0016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a2:6b:aa:da:97:dd:c2:34:49:bf:cc:81:27:
                    b3:4f:98:06:13:9d:a3:05:c7:a1:69:ac:f9:45:6f:
                    fa:5f:6d:59:3d:2a:eb:fc:58:17:42:13:e9:50:05:
                    38:b5:4b:c4:cf:5f:0a:95:b9:ab:18:08:22:d8:e9:
                    4c:c9:1f:ae:f1:06:a4:53:8a:fa:ca:7b:42:70:ed:
                    9a:9e:11:2f:36:c9:45:82:0b:80:bc:26:8e:37:b4:
                    23:7a:e2:c7:3a:e3:de:22:59:91:eb:2e:d8:c2:35:
                    48:91:06:2e:83:ad:bb:7b:be:92:df:28:24:20:b8:
                    60:8f:13:d1:b0:5a:a1:37:1f:9c:ac:2b:bd:32:7c:
                    d8:5c:93:f1:72:29:c2:63:cf:f9:f8:52:82:44:5b:
                    49:88:f3:fe:7f:15:7a:84:42:0f:34:f0:91:36:32:
                    8c:11:3d:da:f2:9e:18:20:a6:b3:6d:23:3e:e6:70:
                    6d:30:6a:c7:a1:3f:f9:4b:eb:c6:84:40:f7:0b:94:
                    b0:5c:9d:2d:4d:09:ca:e2:1f:41:95:97:8b:e9:e1:
                    68:4d:f6:7b:34:d9:95:4e:ea:ab:91:b2:4e:a3:2b:
                    84:b2:0e:55:28:89:ec:c3:1e:8d:d5:88:dc:0f:35:
                    22:fd:a7:24:55:27:af:7a:5d:71:3d:06:4b:de:a6:
                    c9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7F:27:88:91:80:3F:3F:30:CC:69:BA:00:2A:16:B3:BE:6B:00:16
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264633a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:62dc::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:aa:a1:7c:75:f1:3d:fa:71:57:6e:6b:e1:0c:69:d9:1f:b9:
         bb:ac:88:b5:5f:2a:55:cc:c4:a3:4e:46:e2:c6:a2:d8:64:f7:
         87:88:61:af:fc:36:c6:0f:1e:98:84:1f:5d:32:44:33:51:9b:
         89:75:9c:37:dc:b1:10:b7:0c:a4:6f:fa:49:e4:d3:48:88:9f:
         a3:16:71:19:bb:75:2c:43:08:23:cc:3c:0e:72:81:fd:4b:61:
         1e:04:2d:80:ea:69:3b:62:4f:19:e9:2c:1c:c1:63:c8:8e:9d:
         b6:a0:4c:52:5f:6e:bc:2d:4f:77:1d:4b:d6:5f:aa:dd:a3:b6:
         13:9d:9f:d0:08:f2:89:9d:24:56:6c:6f:bd:3f:e1:b5:18:31:
         d1:57:77:00:3f:ea:da:24:a6:bb:85:3f:3c:95:a8:ad:98:5c:
         d2:05:9a:48:3b:1c:7e:8c:dc:20:75:b9:b5:c8:f0:38:d0:1e:
         62:35:7f:35:bb:21:15:93:93:29:a6:59:7b:ec:4b:7d:d9:11:
         a3:41:24:cf:a5:55:7f:86:71:b6:62:b7:69:07:89:34:d2:d4:
         7b:dd:48:99:7f:85:f0:1a:e1:5c:c3:ea:ca:6a:3f:73:2a:2b:
         7d:3d:21:b3:b2:ae:94:65:20:64:3e:ac:7f:33:ed:04:49:5c:
         ce:8a:dd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----