Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332633a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363332633a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          VDEKUAo/uRq8beuCH0FAto7HqHWdLocbsMTa8QmveV4=
Subject key identifier:   5F:99:51:51:5A:93:CD:13:42:AD:62:BD:20:B7:7D:7C:58:2D:FF:10
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       6C31F768F306AA6B276E21BB9D38998A2A60B617
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332633a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Wed 21 May 2025 03:54:01 +0000
ROA not before:           Wed 21 May 2025 03:49:01 +0000
ROA not after:            Wed 20 May 2026 03:54:01 +0000
asID:                     401507
IP address blocks:        2a14:7584:632c::/48 maxlen: 48
Validation:               Failed, certificate revoked on Mon 26 May 2025 00:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:31:f7:68:f3:06:aa:6b:27:6e:21:bb:9d:38:99:8a:2a:60:b6:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 21 03:49:01 2025 GMT
            Not After : May 20 03:54:01 2026 GMT
        Subject: CN=5F9951515A93CD1342AD62BD20B77D7C582DFF10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fd:03:ca:e6:f1:79:36:47:f3:8a:31:f8:73:
                    0f:58:51:df:57:5c:65:a7:9e:34:21:e4:16:25:34:
                    ad:b1:02:ba:29:9e:7d:bc:5b:86:7c:a4:16:e0:ac:
                    7e:73:7e:63:19:e8:2b:88:0e:53:62:c0:b9:f7:07:
                    3e:2d:6b:d0:e1:36:0c:5d:ce:5a:73:de:bd:d7:a6:
                    f6:f5:1e:9c:e3:40:b9:be:d3:92:ba:80:3b:04:ea:
                    e6:b7:ba:74:91:59:99:1f:dc:7f:43:eb:11:f1:cf:
                    d7:78:b3:33:7c:72:26:9a:8d:3b:21:36:a4:bc:a3:
                    1b:18:a2:0e:e0:aa:a7:b8:c3:71:b0:9f:86:2f:40:
                    2f:a1:23:99:de:42:92:97:8d:12:2d:a7:54:36:c5:
                    cd:fa:ec:73:64:27:d9:ea:73:72:0d:f5:7b:f5:e7:
                    b4:c4:d2:a4:83:85:db:6e:53:b3:94:70:56:fb:a8:
                    12:12:bd:dc:da:80:19:c1:fc:78:2a:b5:dd:28:df:
                    9f:0e:78:e6:f3:b8:9d:8f:ff:ec:09:4c:fc:6f:a2:
                    2e:2f:2a:7c:c5:a5:39:74:83:44:6c:bd:b9:3d:43:
                    1a:8f:26:60:66:ed:da:81:db:34:98:af:57:f1:a3:
                    73:2c:ac:f1:61:32:63:1d:24:bb:8a:b9:f8:b7:54:
                    61:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:99:51:51:5A:93:CD:13:42:AD:62:BD:20:B7:7D:7C:58:2D:FF:10
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332633a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:632c::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:60:39:da:66:15:17:c6:d8:32:27:e4:88:e3:ec:98:86:bd:
         7f:65:b7:52:07:9f:e1:3e:1e:48:80:29:8f:37:9b:a1:e7:1a:
         f2:dc:1b:b2:fe:40:6b:37:77:ed:a6:6e:25:0f:65:1e:25:a3:
         2a:54:be:f2:c6:a6:ba:6a:26:7e:2e:f2:7f:98:04:01:74:18:
         46:94:4e:19:13:a3:61:23:8d:ff:7b:b3:5f:55:ec:3e:d9:bf:
         2a:5e:7a:3b:c9:1d:ed:e5:c2:4d:a0:30:47:cf:d5:95:bc:03:
         0a:35:8d:01:a1:9d:47:a9:40:e2:49:2a:32:a1:a5:b5:e0:14:
         54:19:1d:b7:5f:22:aa:3a:0c:6e:d5:52:5a:00:e2:55:00:33:
         d4:9e:34:ff:9f:fe:b7:03:99:6b:27:aa:ba:a9:0b:03:02:36:
         13:c2:8f:c7:91:9a:02:dc:e1:a2:1b:5d:12:d6:93:9c:64:9d:
         a1:61:b0:4c:39:e6:11:c9:eb:c9:9c:a4:d5:e4:0f:ce:41:53:
         5e:2f:ed:98:c0:93:ce:eb:1b:89:ff:f5:53:8a:f6:f5:f5:69:
         ba:03:8b:cf:1b:81:f3:6e:f1:e7:28:33:8d:81:e8:71:2c:67:
         5c:64:e4:d6:e2:8d:74:64:c0:2f:60:32:5b:bb:5e:93:56:2e:
         2c:62:6e:5e
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUbDH3aPMGqmsnbiG7nTiZiipgthcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjEwMzQ5MDFaFw0yNjA1MjAwMzU0MDFaMDMxMTAvBgNV
BAMTKDVGOTk1MTUxNUE5M0NEMTM0MkFENjJCRDIwQjc3RDdDNTgyREZGMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1/QPK5vF5NkfzijH4cw9YUd9X
XGWnnjQh5BYlNK2xAropnn28W4Z8pBbgrH5zfmMZ6CuIDlNiwLn3Bz4ta9DhNgxd
zlpz3r3Xpvb1HpzjQLm+05K6gDsE6ua3unSRWZkf3H9D6xHxz9d4szN8ciaajTsh
NqS8oxsYog7gqqe4w3Gwn4YvQC+hI5neQpKXjRItp1Q2xc367HNkJ9nqc3IN9Xv1
57TE0qSDhdtuU7OUcFb7qBISvdzagBnB/Hgqtd0o358OeObzuJ2P/+wJTPxvoi4v
KnzFpTl0g0Rsvbk9QxqPJmBm7dqB2zSYr1fxo3MsrPFhMmMdJLuKufi3VGEdAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUX5lRUVqTzRNCrWK9ILd9fFgt/xAwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzMzMjYzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGMs
MA0GCSqGSIb3DQEBCwUAA4IBAQALYDnaZhUXxtgyJ+SI4+yYhr1/ZbdSB5/hPh5I
gCmPN5uh5xry3Buy/kBrN3ftpm4lD2UeJaMqVL7yxqa6aiZ+LvJ/mAQBdBhGlE4Z
E6NhI43/e7NfVew+2b8qXno7yR3t5cJNoDBHz9WVvAMKNY0BoZ1HqUDiSSoyoaW1
4BRUGR23XyKqOgxu1VJaAOJVADPUnjT/n/63A5lrJ6q6qQsDAjYTwo/HkZoC3OGi
G10S1pOcZJ2hYbBMOeYRyevJnKTV5A/OQVNeL+2YwJPO6xuJ//VTivb19Wm6A4vP
G4HzbvHnKDONgehxLGdcZOTW4o10ZMAvYDJbu16TVi4sYm5e
-----END CERTIFICATE-----