Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336613a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363336613a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          mzjZwEh+GqkkALALY5xmcH/FJAi3jH3P3d6RRmjr/F4=
Subject key identifier:   D2:76:62:5D:BD:15:43:4E:73:EF:FD:8C:97:E0:3C:2A:1E:EC:7E:E9
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       47C4C10E06CCE0037D65EE9D331F240B5E4D70CD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336613a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Fri 23 May 2025 15:42:02 +0000
ROA not before:           Fri 23 May 2025 15:37:02 +0000
ROA not after:            Fri 22 May 2026 15:42:02 +0000
asID:                     401507
IP address blocks:        2a14:7584:636a::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 28 May 2025 05:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c4:c1:0e:06:cc:e0:03:7d:65:ee:9d:33:1f:24:0b:5e:4d:70:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 23 15:37:02 2025 GMT
            Not After : May 22 15:42:02 2026 GMT
        Subject: CN=D276625DBD15434E73EFFD8C97E03C2A1EEC7EE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a1:33:4a:dc:bf:3c:98:56:99:c9:9c:91:0f:
                    b7:89:6e:82:24:1b:28:6f:44:23:24:03:ac:e6:5e:
                    3e:bf:e1:27:6c:13:97:37:09:2d:8c:62:04:26:cf:
                    72:a1:4c:b1:b7:34:49:73:1a:e2:a1:91:8d:26:15:
                    1e:0d:89:f0:79:49:cc:08:20:9a:6c:25:85:92:85:
                    fa:71:6b:4b:e2:22:e8:2a:ee:98:c8:d8:d4:46:da:
                    9f:1b:08:1b:64:31:4b:ee:c5:dd:08:da:60:12:80:
                    a2:16:3b:fa:54:21:e1:ba:7d:b4:4d:28:42:f4:38:
                    08:c1:7a:39:e3:04:1f:f0:f9:34:73:97:e5:0b:3c:
                    da:a9:dd:6b:d1:8f:7a:e7:18:08:f5:22:15:88:f1:
                    58:6a:ca:79:11:d1:cc:5f:3c:af:43:f8:26:2c:8a:
                    c8:6b:80:4e:9c:3a:5a:19:c7:84:65:79:90:4d:f2:
                    c4:e0:b3:79:9f:d0:e1:ae:77:10:b8:fb:73:5c:b6:
                    47:51:13:7c:7a:92:2c:32:5c:97:2c:4f:29:fb:5e:
                    ea:aa:14:29:44:c0:dd:44:0e:20:87:8f:9e:0b:dc:
                    8d:ca:9f:86:f1:f5:59:23:fb:bc:b6:1b:3a:98:c3:
                    9d:09:41:cf:d2:f3:8b:52:c4:2c:01:fe:cc:2c:05:
                    02:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:76:62:5D:BD:15:43:4E:73:EF:FD:8C:97:E0:3C:2A:1E:EC:7E:E9
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336613a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:636a::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:26:da:10:aa:cd:a0:28:f9:da:a1:83:44:cc:d0:4c:49:d0:
         22:a5:8e:41:95:82:3f:bd:3c:2a:b5:3e:49:27:0a:79:7d:b8:
         56:89:2c:2f:86:e1:1e:57:55:86:a3:d5:44:c8:5e:2c:4e:e8:
         14:93:dd:18:4e:05:36:0a:a7:2f:9a:bf:a6:6c:84:d0:af:19:
         c0:8a:71:d9:a9:68:c4:f6:cf:9f:4b:ca:7c:35:f3:1e:23:93:
         6d:90:18:c9:15:e6:2c:9f:b3:02:21:ec:e1:d2:03:06:1e:f9:
         dc:1b:e1:14:ff:72:7b:ef:72:13:76:3c:98:48:0e:ba:a8:61:
         35:d5:6d:ad:61:7e:88:ce:72:16:77:fc:f0:0a:e3:4d:ea:a9:
         5f:84:f9:ed:a6:52:12:0b:03:3c:2a:3b:1d:09:09:8a:86:12:
         36:4b:35:98:ae:f4:66:04:a6:37:bf:7b:e8:fe:c9:f6:ea:cc:
         51:6e:68:a3:3e:6d:34:76:b1:31:ff:a5:a8:9d:97:3d:6f:b4:
         9c:3d:77:95:2d:d7:8b:3a:0a:a2:ca:77:7d:7f:f0:4b:0d:c1:
         1b:f9:1e:4c:d8:b5:72:ae:ca:d0:84:fa:99:be:18:18:a9:16:
         d5:a6:85:b5:2d:75:d2:19:22:9a:25:86:d6:f6:5b:f0:9b:3b:
         39:f7:0a:15
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUR8TBDgbM4AN9Ze6dMx8kC15NcM0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjMxNTM3MDJaFw0yNjA1MjIxNTQyMDJaMDMxMTAvBgNV
BAMTKEQyNzY2MjVEQkQxNTQzNEU3M0VGRkQ4Qzk3RTAzQzJBMUVFQzdFRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOoTNK3L88mFaZyZyRD7eJboIk
GyhvRCMkA6zmXj6/4SdsE5c3CS2MYgQmz3KhTLG3NElzGuKhkY0mFR4NifB5ScwI
IJpsJYWShfpxa0viIugq7pjI2NRG2p8bCBtkMUvuxd0I2mASgKIWO/pUIeG6fbRN
KEL0OAjBejnjBB/w+TRzl+ULPNqp3WvRj3rnGAj1IhWI8VhqynkR0cxfPK9D+CYs
ishrgE6cOloZx4RleZBN8sTgs3mf0OGudxC4+3NctkdRE3x6kiwyXJcsTyn7Xuqq
FClEwN1EDiCHj54L3I3Kn4bx9Vkj+7y2GzqYw50JQc/S84tSxCwB/swsBQJNAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQU0nZiXb0VQ05z7/2Ml+A8Kh7sfukwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzMzNjYxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGNq
MA0GCSqGSIb3DQEBCwUAA4IBAQALJtoQqs2gKPnaoYNEzNBMSdAipY5BlYI/vTwq
tT5JJwp5fbhWiSwvhuEeV1WGo9VEyF4sTugUk90YTgU2Cqcvmr+mbITQrxnAinHZ
qWjE9s+fS8p8NfMeI5NtkBjJFeYsn7MCIezh0gMGHvncG+EU/3J773ITdjyYSA66
qGE11W2tYX6IznIWd/zwCuNN6qlfhPntplISCwM8KjsdCQmKhhI2SzWYrvRmBKY3
v3vo/sn26sxRbmijPm00drEx/6WonZc9b7ScPXeVLdeLOgqiynd9f/BLDcEb+R5M
2LVyrsrQhPqZvhgYqRbVpoW1LXXSGSKaJYbW9lvwmzs59woV
-----END CERTIFICATE-----