Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264643a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363264643a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          tAdI6eDGRmzTPBtZX3PD8rdeZMJLZYUB4WJZnX2o+q4=
Subject key identifier:   18:8A:EF:A7:3B:81:99:79:89:20:45:B2:9E:BD:34:23:24:11:1E:CB
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       4175C18C952A6FD20E67AC1558BD4DFC1C68A48F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264643a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Sun 18 May 2025 08:42:02 +0000
ROA not before:           Sun 18 May 2025 08:37:02 +0000
ROA not after:            Sun 17 May 2026 08:42:02 +0000
asID:                     401507
IP address blocks:        2a14:7584:62dd::/48 maxlen: 48
Validation:               Failed, certificate revoked on Thu 22 May 2025 16:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:75:c1:8c:95:2a:6f:d2:0e:67:ac:15:58:bd:4d:fc:1c:68:a4:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 18 08:37:02 2025 GMT
            Not After : May 17 08:42:02 2026 GMT
        Subject: CN=188AEFA73B819979892045B29EBD342324111ECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:31:78:23:ee:79:20:12:c6:54:86:19:16:cb:
                    32:59:c3:41:92:2e:c6:c4:56:27:dd:40:d0:26:93:
                    1f:70:ce:d0:0d:78:85:1d:7a:59:93:f9:05:c1:b6:
                    ed:ab:31:36:fa:0d:50:61:92:78:0c:af:a1:f6:10:
                    aa:cf:e6:40:18:ad:77:34:cb:2d:87:1e:01:dc:d9:
                    c9:80:5a:9f:f6:a8:66:6b:37:a5:67:f7:44:c8:55:
                    3a:b5:ad:8c:4d:8f:3c:29:61:1e:61:e6:de:b3:a9:
                    a2:a5:0b:1f:99:5d:f2:2d:23:14:cd:50:91:df:4b:
                    53:cf:28:e6:99:08:8b:d9:3e:a5:61:10:34:59:03:
                    f2:a9:c7:4b:3d:37:ea:01:28:83:f9:b8:ce:55:79:
                    ca:b2:08:30:0b:c9:5f:a9:48:ff:2e:1b:c3:b5:a6:
                    38:78:9b:f3:56:d7:19:e8:34:b3:cf:04:15:11:68:
                    fa:ec:9f:82:8c:bd:4e:6b:94:f3:dd:10:d8:f9:86:
                    71:c7:69:77:f7:e6:3b:a4:f7:66:05:53:29:8c:40:
                    0d:74:6f:9c:e8:c1:67:80:27:f1:16:05:dc:4c:bc:
                    ae:17:5f:3d:a2:5f:8b:f5:fd:f0:ff:3c:d9:a5:07:
                    de:6e:a5:e1:6a:e8:52:0d:c4:b4:1b:89:7c:12:83:
                    1b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8A:EF:A7:3B:81:99:79:89:20:45:B2:9E:BD:34:23:24:11:1E:CB
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264643a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:62dd::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:c0:c8:16:00:0e:64:86:a8:9c:74:46:00:6f:4f:32:5e:4d:
         f1:61:8c:f0:04:95:81:e9:b2:41:29:e3:16:42:4d:46:04:0a:
         dd:a9:37:9f:49:42:5e:68:ca:76:23:69:e5:64:38:4c:70:7d:
         dc:a2:8d:ee:bb:71:1b:aa:c9:99:47:c9:fe:a9:89:70:b1:ab:
         1c:bb:5b:a0:c0:e0:9b:52:b0:9a:79:bb:0d:a9:69:58:12:60:
         b1:62:2d:20:a6:3f:fc:b3:34:6d:07:18:03:c4:43:df:c5:36:
         59:3b:de:24:9b:21:e0:0c:0d:56:69:49:41:06:68:73:6d:09:
         76:b0:cd:a0:fb:7f:7f:d4:61:b8:44:42:5f:e9:de:17:da:c2:
         d1:66:c9:d8:18:af:bf:c0:64:28:37:f3:05:08:a1:b4:74:0a:
         ae:d1:e7:45:03:7a:52:11:b0:ec:03:73:bc:39:f5:7f:02:f5:
         b9:67:91:b0:59:1b:e1:ff:24:76:60:7d:47:c1:3b:c7:90:ef:
         bd:ee:74:a0:65:ba:d9:dc:85:2c:d0:f3:ab:05:d7:6a:c1:b7:
         9e:08:58:d2:cb:c4:f0:dd:54:82:81:9c:f3:94:7c:c0:d6:35:
         b8:45:30:bc:58:09:17:ab:18:d3:bc:8c:c7:93:b6:c8:d9:09:
         7f:91:c8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----