Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332613a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363332613a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          XSlHTK+bcnAEEg3HSK9ws66xl3fECiuhlG6ZDpQ4S1w=
Subject key identifier:   68:7E:F9:AF:F9:3E:58:81:94:9F:F6:7D:C6:67:4C:3B:63:DD:56:78
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       54FE21729E83C8DCAF4FD441AE1A7BC0C16AD697
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332613a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Wed 21 May 2025 03:54:02 +0000
ROA not before:           Wed 21 May 2025 03:49:02 +0000
ROA not after:            Wed 20 May 2026 03:54:02 +0000
asID:                     401507
IP address blocks:        2a14:7584:632a::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 27 May 2025 09:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fe:21:72:9e:83:c8:dc:af:4f:d4:41:ae:1a:7b:c0:c1:6a:d6:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 21 03:49:02 2025 GMT
            Not After : May 20 03:54:02 2026 GMT
        Subject: CN=687EF9AFF93E5881949FF67DC6674C3B63DD5678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:63:31:be:bb:0f:cc:e9:8b:03:a8:a4:89:5c:
                    0b:a2:a5:62:a6:e1:bb:bd:56:8b:fb:32:55:82:8f:
                    71:1c:1b:0d:83:01:75:72:9e:f5:19:77:ce:e0:71:
                    38:a9:c6:2b:e1:b5:c8:94:6d:53:3d:c3:1e:f8:77:
                    22:db:ef:d4:cd:a3:0b:45:93:cc:44:f0:6b:b1:59:
                    3a:ce:b1:9b:ab:01:24:42:8d:29:e5:8e:6c:09:4f:
                    92:f4:72:7a:ff:ba:45:09:6b:7a:21:99:6b:2f:14:
                    fc:48:18:cd:b6:9d:21:e2:62:20:34:05:75:2b:97:
                    27:35:af:58:3b:ca:87:92:a3:13:ee:9c:aa:95:cb:
                    46:f6:c4:c2:dd:2a:18:2e:a8:d1:74:1b:ed:1f:ba:
                    9e:59:cc:e7:17:f8:95:84:00:dc:f1:f9:15:03:20:
                    e1:9f:fa:b4:da:f9:08:29:5d:b8:ca:b1:4f:53:1f:
                    07:e9:71:e2:60:6e:1d:06:22:d8:e2:84:8c:be:71:
                    2a:27:c1:69:62:f8:93:fc:36:65:50:72:ed:73:eb:
                    0a:54:62:71:04:d2:50:b2:4b:03:26:4f:75:31:84:
                    6b:e7:56:c6:0b:13:48:15:39:c6:0a:40:d3:dc:c7:
                    42:16:6d:6c:fb:88:1d:81:3c:e9:54:ee:47:87:0b:
                    c8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7E:F9:AF:F9:3E:58:81:94:9F:F6:7D:C6:67:4C:3B:63:DD:56:78
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332613a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:632a::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:15:bb:62:07:26:98:fd:24:42:a3:a9:52:9e:10:60:63:6b:
         b1:91:a8:3a:b7:92:1f:98:68:06:3b:9b:70:77:85:4c:f2:fb:
         c8:00:4a:17:9c:66:bd:8d:9e:6b:2d:77:e4:e4:4e:f4:6b:dd:
         35:79:cc:9d:9c:7e:68:1e:73:06:c1:c3:f2:c3:5e:ec:bc:a1:
         7a:8c:b1:a2:cb:b0:73:88:de:0b:bd:5d:f6:e8:53:3b:93:ff:
         24:24:67:b4:3b:92:bd:a6:1e:5f:70:9a:0b:10:c8:54:32:7a:
         35:37:a6:9a:d9:91:02:3d:39:c6:4a:8d:4d:ae:e9:43:a5:64:
         ff:a2:02:11:79:a7:ca:3c:41:82:56:2c:8d:ae:41:73:1c:0f:
         f0:77:6c:f8:90:2d:7a:9b:68:3f:d5:bc:16:c1:c0:38:d1:52:
         1a:c0:98:b9:d7:04:24:ff:1b:fa:27:d5:2e:22:1e:dc:23:fb:
         32:f5:48:82:05:92:71:12:a9:ee:fd:cf:81:05:a4:9f:57:40:
         4a:53:3f:bb:bf:b4:1f:1c:33:81:92:ac:0a:77:a7:eb:5e:d1:
         80:75:7d:de:52:c3:15:14:dc:6f:72:b1:17:b1:62:ef:c4:94:
         05:98:83:c8:cf:0d:05:48:ee:d0:02:8c:75:4b:ae:07:55:70:
         63:71:e0:78
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUVP4hcp6DyNyvT9RBrhp7wMFq1pcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjEwMzQ5MDJaFw0yNjA1MjAwMzU0MDJaMDMxMTAvBgNV
BAMTKDY4N0VGOUFGRjkzRTU4ODE5NDlGRjY3REM2Njc0QzNCNjNERDU2NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvYzG+uw/M6YsDqKSJXAuipWKm
4bu9Vov7MlWCj3EcGw2DAXVynvUZd87gcTipxivhtciUbVM9wx74dyLb79TNowtF
k8xE8GuxWTrOsZurASRCjSnljmwJT5L0cnr/ukUJa3ohmWsvFPxIGM22nSHiYiA0
BXUrlyc1r1g7yoeSoxPunKqVy0b2xMLdKhguqNF0G+0fup5ZzOcX+JWEANzx+RUD
IOGf+rTa+QgpXbjKsU9THwfpceJgbh0GItjihIy+cSonwWli+JP8NmVQcu1z6wpU
YnEE0lCySwMmT3UxhGvnVsYLE0gVOcYKQNPcx0IWbWz7iB2BPOlU7keHC8hRAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUaH75r/k+WIGUn/Z9xmdMO2PdVngwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzMzMjYxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGMq
MA0GCSqGSIb3DQEBCwUAA4IBAQA+FbtiByaY/SRCo6lSnhBgY2uxkag6t5IfmGgG
O5twd4VM8vvIAEoXnGa9jZ5rLXfk5E70a901ecydnH5oHnMGwcPyw17svKF6jLGi
y7BziN4LvV326FM7k/8kJGe0O5K9ph5fcJoLEMhUMno1N6aa2ZECPTnGSo1NrulD
pWT/ogIReafKPEGCViyNrkFzHA/wd2z4kC16m2g/1bwWwcA40VIawJi51wQk/xv6
J9UuIh7cI/sy9UiCBZJxEqnu/c+BBaSfV0BKUz+7v7QfHDOBkqwKd6frXtGAdX3e
UsMVFNxvcrEXsWLvxJQFmIPIzw0FSO7QAox1S64HVXBjceB4
-----END CERTIFICATE-----