Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333633a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363333633a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          wkkWJELIz3jvxCgqKTGsWo5RligeHWuadGHpx4/mVes=
Subject key identifier:   38:B8:E3:3F:AD:0D:4D:27:FC:BE:F1:2E:E2:EC:9A:43:F2:5B:EE:49
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       7095FEBA04441DF7E0AFBD06493AD9BA827427A4
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333633a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Wed 21 May 2025 21:00:02 +0000
ROA not before:           Wed 21 May 2025 20:55:02 +0000
ROA not after:            Wed 20 May 2026 21:00:02 +0000
asID:                     401507
IP address blocks:        2a14:7584:633c::/48 maxlen: 48
Validation:               Failed, certificate revoked on Sat 24 May 2025 07:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:95:fe:ba:04:44:1d:f7:e0:af:bd:06:49:3a:d9:ba:82:74:27:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 21 20:55:02 2025 GMT
            Not After : May 20 21:00:02 2026 GMT
        Subject: CN=38B8E33FAD0D4D27FCBEF12EE2EC9A43F25BEE49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:14:9b:67:02:18:42:de:bf:45:8c:0a:97:58:
                    df:b4:80:de:66:78:25:9a:e7:7b:b0:4e:d7:2d:85:
                    90:ed:9b:ba:99:77:c5:df:c4:66:d2:2f:ec:79:dc:
                    b9:57:55:77:e6:07:02:73:54:6a:15:7a:f9:94:0f:
                    51:9f:23:09:90:cd:8f:5d:6f:44:36:29:b0:7a:23:
                    0b:d7:87:c1:dc:7c:6c:7f:04:a0:4b:2a:96:bb:21:
                    28:fe:3f:53:1c:99:36:41:e5:7e:19:be:38:36:e2:
                    85:ac:0b:3c:67:2c:59:29:fa:01:88:29:37:50:6d:
                    37:8d:51:92:65:e0:2c:65:8b:1b:11:87:58:22:bd:
                    37:bd:5e:ae:2d:b7:50:87:ae:ae:1a:29:b1:74:e1:
                    49:7f:7a:94:c1:9b:e2:96:22:85:73:7c:c4:0f:3f:
                    98:70:04:6c:2d:41:18:11:7a:66:f3:e7:95:75:16:
                    de:14:2e:cd:0a:99:2f:4c:ae:a6:85:65:f2:d0:72:
                    3b:af:ad:65:34:8e:ab:34:68:04:fd:1f:1d:16:32:
                    11:0d:72:6b:07:a6:2d:fc:52:6f:ed:79:63:b6:24:
                    06:a1:69:e9:f4:0a:a9:88:51:df:9a:3c:02:aa:a0:
                    c2:13:ba:1e:66:90:f7:88:46:29:ec:5c:16:47:47:
                    7d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B8:E3:3F:AD:0D:4D:27:FC:BE:F1:2E:E2:EC:9A:43:F2:5B:EE:49
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333633a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:633c::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:7d:66:31:ed:7c:39:24:58:08:e4:5b:88:81:48:79:bf:e5:
         99:d1:dd:81:8e:83:7e:c2:6c:31:be:b3:97:70:38:2d:2b:a2:
         93:93:a1:1b:88:03:f4:9b:95:df:2d:60:94:b8:0e:d8:ec:22:
         b0:87:55:a4:7b:cc:64:42:39:44:cc:3f:12:e2:b7:6d:c3:1f:
         99:72:fc:fb:2e:74:6c:6c:a0:66:c5:0e:96:01:b4:f7:32:81:
         5e:3a:80:b2:c6:0a:43:f6:74:5f:db:f5:5e:f4:51:7a:62:93:
         b8:ca:57:40:25:a5:09:1c:c0:10:15:d1:bd:fd:5c:ae:d3:23:
         ac:8f:0f:28:e1:db:dc:4e:30:21:aa:b0:47:86:74:7e:c6:b2:
         08:b9:dd:8b:40:35:64:14:df:43:3b:14:6e:e6:f2:0a:9b:26:
         4e:12:f9:4e:12:f1:da:7b:46:2d:f9:65:e3:70:31:4d:9f:3e:
         3d:22:41:f0:2a:dd:d2:91:f8:6b:2f:35:9b:71:02:07:72:94:
         98:c6:35:b6:f0:4d:25:92:7e:26:71:fa:fe:19:60:4c:e3:3e:
         d6:3e:ce:7f:19:9c:a5:e6:80:a0:a9:38:ed:23:7b:1e:7b:a2:
         c1:27:93:47:29:73:5c:5d:bd:77:dd:c9:4d:3a:2b:09:fb:1e:
         1a:57:bb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----