Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330333a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363330333a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          7K2zDa/CTzasZL3H/rKnJJLsQcMWp4/IGTkIaiSuAiw=
Subject key identifier:   7C:A6:B6:EE:06:FE:94:FD:55:F6:46:C0:2A:30:67:62:4B:77:01:7E
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       6F5D80EC82BCBFE61A7224D8F770A62E27781E64
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330333a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Mon 19 May 2025 18:18:01 +0000
ROA not before:           Mon 19 May 2025 18:13:01 +0000
ROA not after:            Mon 18 May 2026 18:18:01 +0000
asID:                     401507
IP address blocks:        2a14:7584:6303::/48 maxlen: 48
Validation:               Failed, certificate revoked on Thu 22 May 2025 16:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:5d:80:ec:82:bc:bf:e6:1a:72:24:d8:f7:70:a6:2e:27:78:1e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 19 18:13:01 2025 GMT
            Not After : May 18 18:18:01 2026 GMT
        Subject: CN=7CA6B6EE06FE94FD55F646C02A3067624B77017E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:01:15:32:1c:46:fd:9e:40:f4:82:52:4f:20:
                    99:78:18:4f:42:ca:2a:51:40:f4:e8:f7:4b:c3:98:
                    54:e1:fa:5f:dd:f2:a2:ba:02:13:23:a2:87:21:11:
                    ca:b8:1f:aa:f3:c0:d4:78:96:d5:0e:87:f0:1c:3d:
                    ac:07:93:40:ea:4f:08:58:a5:cb:c8:0b:09:4b:74:
                    ae:68:f6:49:19:ab:f4:32:57:33:9b:f2:50:f4:4e:
                    9e:30:08:89:99:e8:ab:ac:74:14:62:8f:b8:1b:2f:
                    98:7b:2f:86:44:96:df:1e:53:d6:56:38:48:ee:e2:
                    c8:e0:4f:6a:34:02:12:db:4b:46:50:90:26:c2:b2:
                    59:37:6a:b3:bb:8c:ae:de:eb:52:87:eb:cb:63:22:
                    7a:5f:34:58:c3:4c:09:a2:25:a7:86:72:56:e2:4a:
                    6f:c3:53:2b:ed:25:69:db:d3:b5:ee:7d:ee:13:1f:
                    ed:0d:d3:c9:30:a8:0a:66:dc:01:8a:a7:a4:d3:82:
                    78:31:b7:94:0e:88:9d:6b:1b:ed:dd:cf:8d:42:11:
                    fb:43:51:9f:c3:52:f4:06:26:d5:94:ab:5c:04:cf:
                    5e:3e:40:16:cb:0f:a4:42:fe:9b:86:19:28:4c:21:
                    7a:4d:08:6d:fa:4f:92:e0:8e:0a:1b:6a:02:74:b2:
                    d1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A6:B6:EE:06:FE:94:FD:55:F6:46:C0:2A:30:67:62:4B:77:01:7E
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330333a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6303::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:9d:6b:83:85:eb:df:13:0a:46:ab:49:18:79:c0:3e:75:27:
         e2:4c:47:4f:2c:a1:79:d2:c8:e3:ed:c1:63:b5:df:2e:6b:b8:
         06:88:c1:10:6d:69:e9:d2:d0:69:77:8b:93:3d:67:2b:6e:5d:
         15:a0:50:fe:f0:69:33:8a:a9:23:c2:7b:02:4c:b2:53:5e:7b:
         72:e2:39:e6:4e:f0:5b:a2:21:27:1a:c9:de:14:42:82:1b:69:
         6e:e7:23:fb:76:ff:72:9a:9b:86:ad:16:40:bd:61:91:68:68:
         bc:17:4d:94:a5:32:b2:f2:3e:3c:ec:00:4f:c2:e9:35:9f:7a:
         5e:25:c2:18:79:e8:46:47:b0:10:a8:85:e0:cc:de:13:b6:08:
         56:36:87:8e:36:37:cd:c1:d4:45:73:11:56:b7:a5:a5:a8:e8:
         63:8a:4a:6d:bd:7f:d1:d5:60:ef:01:d0:9c:d9:f7:e0:23:d3:
         c3:af:4d:91:43:b4:19:9b:45:67:64:82:19:09:b5:e6:e3:52:
         09:1f:86:e1:4b:64:e7:8c:8d:dc:77:81:de:89:ab:ae:8a:4d:
         e8:55:cc:1f:f7:ea:9c:57:21:d6:0f:4b:92:d3:83:96:df:5f:
         65:2f:90:6a:5a:4f:ae:9a:45:58:34:61:e7:2b:53:0c:50:31:
         52:d0:8f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----