Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332623a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363332623a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          ffpuoq8GXM5LU+4vZniMwAP7qUOqlOnaA2kZgMhjXfs=
Subject key identifier:   65:66:51:D7:90:D0:17:CA:9D:D8:1F:85:19:BF:63:FA:6B:EF:5A:E1
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       4A633641950C1FE76AD14953B05DB33EFEB1AB0A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332623a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Wed 21 May 2025 03:54:02 +0000
ROA not before:           Wed 21 May 2025 03:49:02 +0000
ROA not after:            Wed 20 May 2026 03:54:02 +0000
asID:                     401507
IP address blocks:        2a14:7584:632b::/48 maxlen: 48
Validation:               Failed, certificate revoked on Mon 26 May 2025 14:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:63:36:41:95:0c:1f:e7:6a:d1:49:53:b0:5d:b3:3e:fe:b1:ab:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 21 03:49:02 2025 GMT
            Not After : May 20 03:54:02 2026 GMT
        Subject: CN=656651D790D017CA9DD81F8519BF63FA6BEF5AE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:19:60:0d:7e:aa:cb:c4:81:db:b2:61:4a:67:
                    ac:63:3d:7c:92:bf:ed:fc:8f:83:5c:05:b7:5e:33:
                    58:ce:7a:c2:ba:fc:25:b3:1c:5a:28:ba:3f:af:fb:
                    91:a8:89:15:ff:4a:e8:6a:0e:e7:e8:43:d3:0e:1b:
                    a8:87:54:9e:08:61:ff:6f:74:c4:81:f2:3b:f5:09:
                    db:63:29:96:92:b7:7e:c6:52:77:1c:1f:81:77:0c:
                    36:72:e7:a3:c6:58:36:93:a1:16:52:c6:97:fb:04:
                    79:6d:81:d4:15:b5:60:fc:26:6b:59:e9:a1:49:ea:
                    80:79:6b:69:6e:6f:36:19:1c:4e:ad:e7:87:e6:6d:
                    2b:d5:02:9e:c1:d7:eb:90:5f:8f:d7:b7:af:3f:28:
                    3f:12:dd:e4:79:68:09:17:11:ec:93:b3:e0:24:21:
                    26:89:7e:db:dd:85:ff:ec:72:62:61:2f:41:f4:b4:
                    6a:f1:b2:ac:21:83:ca:49:13:78:57:93:a3:a4:df:
                    f4:b2:2c:13:1c:48:2a:1c:d5:4f:e9:60:b4:a1:e3:
                    06:23:97:d1:67:48:10:6a:bd:27:be:11:5d:f3:54:
                    ff:c7:b4:b6:a3:3a:f8:46:73:ce:6b:fc:eb:6e:b1:
                    28:48:e7:3b:0b:74:78:68:aa:d0:24:6e:0a:d5:a7:
                    6d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:66:51:D7:90:D0:17:CA:9D:D8:1F:85:19:BF:63:FA:6B:EF:5A:E1
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332623a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:632b::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:37:b6:2e:37:c6:e5:49:96:1d:4a:5b:9e:1a:7e:07:0b:4e:
         72:a3:d8:bf:3e:29:1b:97:80:a6:90:49:d1:cb:dc:c9:86:52:
         d5:0e:8d:69:c3:e2:54:d4:0f:00:53:84:a3:54:ea:2b:33:a1:
         c0:dd:59:60:51:3c:a9:64:f0:5d:21:09:e9:94:f3:0b:82:92:
         f0:3e:91:8b:2a:c4:cd:f2:25:f2:28:42:6c:a7:a0:a4:26:c0:
         a3:64:05:df:3b:ee:6a:70:ea:3d:a6:58:5a:dd:8d:2b:d1:fb:
         d5:b6:0c:a1:e5:2f:40:19:ae:b3:5d:a9:11:9f:64:ce:42:d5:
         90:20:97:eb:fa:fd:41:6f:8d:8c:8d:a1:94:9c:d7:df:53:47:
         a2:2c:e5:50:88:fa:54:dc:1b:50:0d:3e:4c:cf:b7:3b:7a:f6:
         cd:ff:30:27:27:63:18:e4:15:ee:2a:06:38:46:ee:06:de:a3:
         e5:72:e4:54:57:57:78:b7:dd:ca:15:0d:42:71:56:af:9e:db:
         94:4a:67:63:db:ae:5f:be:83:21:b3:bd:7f:04:98:a9:49:9b:
         c7:97:52:c9:c8:51:1e:4e:a7:c0:4d:87:e8:30:58:8f:5b:42:
         1c:03:a5:3d:ff:49:91:04:0a:94:22:4b:fb:c6:85:56:46:db:
         df:99:98:e6
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUSmM2QZUMH+dq0UlTsF2zPv6xqwowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjEwMzQ5MDJaFw0yNjA1MjAwMzU0MDJaMDMxMTAvBgNV
BAMTKDY1NjY1MUQ3OTBEMDE3Q0E5REQ4MUY4NTE5QkY2M0ZBNkJFRjVBRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiGWANfqrLxIHbsmFKZ6xjPXyS
v+38j4NcBbdeM1jOesK6/CWzHFoouj+v+5GoiRX/SuhqDufoQ9MOG6iHVJ4IYf9v
dMSB8jv1CdtjKZaSt37GUnccH4F3DDZy56PGWDaToRZSxpf7BHltgdQVtWD8JmtZ
6aFJ6oB5a2lubzYZHE6t54fmbSvVAp7B1+uQX4/Xt68/KD8S3eR5aAkXEeyTs+Ak
ISaJftvdhf/scmJhL0H0tGrxsqwhg8pJE3hXk6Ok3/SyLBMcSCoc1U/pYLSh4wYj
l9FnSBBqvSe+EV3zVP/HtLajOvhGc85r/OtusShI5zsLdHhoqtAkbgrVp22XAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUZWZR15DQF8qd2B+FGb9j+mvvWuEwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzMzMjYyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGMr
MA0GCSqGSIb3DQEBCwUAA4IBAQBdN7YuN8blSZYdSlueGn4HC05yo9i/Pikbl4Cm
kEnRy9zJhlLVDo1pw+JU1A8AU4SjVOorM6HA3VlgUTypZPBdIQnplPMLgpLwPpGL
KsTN8iXyKEJsp6CkJsCjZAXfO+5qcOo9plha3Y0r0fvVtgyh5S9AGa6zXakRn2TO
QtWQIJfr+v1Bb42MjaGUnNffU0eiLOVQiPpU3BtQDT5Mz7c7evbN/zAnJ2MY5BXu
KgY4Ru4G3qPlcuRUV1d4t93KFQ1CcVavntuUSmdj265fvoMhs71/BJipSZvHl1LJ
yFEeTqfATYfoMFiPW0IcA6U9/0mRBAqUIkv7xoVWRtvfmZjm
-----END CERTIFICATE-----