Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331653a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363331653a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          OzyPRFV8uQSsua3+9kwEIoDzNCWkXH6nyu6nPpQRVdY=
Subject key identifier:   10:63:60:36:CE:59:CE:D9:94:95:95:24:7C:60:F9:5A:88:DF:3E:E2
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       44F2B0D6041859924A2563D10FDB12DE80E641D3
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331653a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Tue 20 May 2025 10:24:02 +0000
ROA not before:           Tue 20 May 2025 10:19:02 +0000
ROA not after:            Tue 19 May 2026 10:24:02 +0000
asID:                     401507
IP address blocks:        2a14:7584:631e::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 23 May 2025 09:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f2:b0:d6:04:18:59:92:4a:25:63:d1:0f:db:12:de:80:e6:41:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 20 10:19:02 2025 GMT
            Not After : May 19 10:24:02 2026 GMT
        Subject: CN=10636036CE59CED9949595247C60F95A88DF3EE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e7:e2:04:8e:a6:14:8d:17:f0:b0:20:55:a8:
                    d9:92:18:71:22:c7:61:6d:07:d0:03:13:c3:18:8f:
                    14:9e:ca:11:88:d1:89:f4:68:03:3e:68:77:e1:da:
                    8d:59:12:5b:a9:1f:72:a2:c0:9a:e6:65:03:75:6e:
                    e2:1a:a6:7a:67:c1:35:e8:a1:93:c8:60:e4:21:d3:
                    70:29:91:da:8f:a5:2b:40:64:93:d2:76:d9:07:d0:
                    56:80:f3:13:81:35:e4:12:9a:56:91:3b:12:c4:97:
                    38:ee:df:ac:5c:f8:e3:30:92:c9:9b:ee:ae:34:8d:
                    06:2f:ee:b4:45:f2:b7:87:a8:28:c7:f4:0f:26:0e:
                    a5:27:c6:87:ef:01:49:99:d7:7e:09:98:78:11:10:
                    d0:75:60:c3:38:54:1a:3c:c5:e1:fb:04:01:4d:37:
                    ae:87:44:9e:fa:e5:da:14:50:37:0a:d1:d7:85:bc:
                    2d:f7:46:41:e1:f3:81:1e:d8:c9:2f:32:2d:ca:df:
                    9b:ae:d7:67:4d:78:35:80:a4:7f:d9:f0:74:49:8d:
                    e2:6e:05:92:b0:8e:8d:e9:eb:fe:ad:0b:52:c1:12:
                    3d:f4:b9:d6:a6:c9:36:34:50:5f:73:d9:46:53:ed:
                    bc:61:c2:84:85:66:52:d3:43:ad:75:82:34:27:c6:
                    e7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:63:60:36:CE:59:CE:D9:94:95:95:24:7C:60:F9:5A:88:DF:3E:E2
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331653a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:631e::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:1d:85:fd:fc:e6:84:5b:de:23:92:96:c3:45:a8:4c:c6:a3:
         86:59:e8:15:88:0d:17:22:3c:0e:9a:72:6b:85:4b:5d:b5:e4:
         aa:61:5a:78:d7:0d:4e:9c:29:bd:88:e1:9f:18:a1:e6:20:d9:
         aa:6b:4a:81:64:d5:87:70:53:23:04:e2:d0:1a:92:cc:6f:36:
         99:68:14:91:b5:ce:e6:9c:ff:65:dc:cd:a2:27:43:dc:15:1d:
         60:c3:e5:4c:ea:50:db:a3:7b:6e:d0:ee:5c:ad:b2:5b:1c:36:
         a4:ec:24:13:bb:22:09:56:e9:7b:96:bd:af:ed:9c:22:8a:11:
         9c:21:56:15:58:99:f3:4b:e0:f2:fa:2e:ef:20:9f:81:69:96:
         45:e5:c8:59:3a:0e:2b:2b:90:d0:cd:af:b3:27:5f:7b:0c:ae:
         70:e3:1f:71:41:d7:d6:d5:bf:67:82:d0:b8:f5:b1:48:b0:94:
         0c:af:46:f6:5d:75:42:08:7b:8a:00:24:1e:a1:33:78:ee:90:
         60:07:a3:32:12:84:52:5a:de:4d:86:6f:41:fe:f0:bb:51:69:
         56:7f:25:32:58:de:2c:74:4d:6e:8a:18:c5:06:52:18:b1:fa:
         a2:4b:94:2d:aa:53:f0:2d:c6:69:18:79:1f:64:0b:26:75:82:
         d8:e9:ba:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----