Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363439643a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363439643a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          lX6Li8mDBw6Bz/70qcdpTU72c9/HX1mAUeZMZPilqpQ=
Subject key identifier:   3D:D3:FE:83:A2:5C:8A:F5:B0:81:27:F4:DB:D2:2E:5C:EA:3B:DC:40
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       073F6BCFEF956B5C14D44F43BBE1225C8E43BC17
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363439643a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Thu 29 May 2025 16:18:02 +0000
ROA not before:           Thu 29 May 2025 16:13:02 +0000
ROA not after:            Thu 28 May 2026 16:18:02 +0000
asID:                     401507
IP address blocks:        2a14:7584:649d::/48 maxlen: 48
Validation:               Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:3f:6b:cf:ef:95:6b:5c:14:d4:4f:43:bb:e1:22:5c:8e:43:bc:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 29 16:13:02 2025 GMT
            Not After : May 28 16:18:02 2026 GMT
        Subject: CN=3DD3FE83A25C8AF5B08127F4DBD22E5CEA3BDC40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:70:e8:12:1d:8c:7b:88:ee:1e:a0:00:e2:8f:
                    c8:d9:fd:4b:c0:30:60:cc:10:69:8e:10:1d:38:74:
                    0b:61:24:42:f9:d0:ae:41:81:0c:63:8e:e4:71:0b:
                    12:4f:7f:70:3e:5b:44:0b:07:6d:9f:f4:84:d3:14:
                    10:f3:07:9d:5f:44:c7:68:55:3a:31:98:4d:3a:f2:
                    b3:3b:43:c1:39:ee:1a:83:2a:50:f8:f3:b1:d2:81:
                    31:a9:e7:b6:d7:dd:c5:14:0c:c7:34:50:22:4d:8e:
                    7e:67:7b:4d:a4:b2:29:a6:4c:52:20:09:62:92:af:
                    8c:e8:cc:3d:aa:6d:a1:40:7e:3b:69:e2:47:fb:e2:
                    56:a0:9d:4a:cb:7a:94:59:2d:e6:4e:2d:7f:d8:13:
                    8a:bf:58:06:c3:67:38:74:dc:b0:44:fe:21:03:99:
                    66:22:92:dc:df:2b:07:8b:1b:4a:6c:12:7f:4f:c4:
                    1b:e7:cb:8d:4d:0d:83:13:99:93:cc:2c:a7:21:28:
                    e6:94:53:79:86:24:83:88:23:7c:ce:f0:5f:ab:c8:
                    36:c3:e6:9e:6a:96:f2:76:ca:9f:ef:dc:d7:3c:17:
                    af:85:8d:0d:c3:2e:c6:96:88:cc:a4:b6:4f:b0:6c:
                    f1:08:d9:e9:1f:3a:a1:18:6f:54:f1:ab:9a:77:d1:
                    20:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D3:FE:83:A2:5C:8A:F5:B0:81:27:F4:DB:D2:2E:5C:EA:3B:DC:40
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363439643a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:649d::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:e6:0f:87:0d:02:28:75:ee:22:50:94:4d:fe:09:c7:5b:45:
         5e:ba:45:c7:8d:51:5d:59:2a:1c:1d:59:bf:5c:66:d4:1a:8c:
         83:7a:c7:e3:e0:e5:1f:5d:c7:5d:03:93:b2:56:51:ae:1f:55:
         96:9f:8a:a8:dd:23:8b:4c:c1:b3:92:cd:81:51:59:95:cd:9b:
         b4:e3:e6:d0:a4:64:7f:7f:06:18:cd:39:18:01:88:21:32:f3:
         52:b6:64:c2:c1:be:0b:e2:54:4f:6b:55:25:92:e1:fd:72:d4:
         43:a1:1f:43:73:0b:70:be:48:a7:f8:86:91:9d:94:fe:a7:3e:
         ed:df:2b:9c:f0:bc:c8:26:1d:05:76:5e:61:38:bc:ab:b4:1d:
         09:7c:2d:b1:8a:ea:5b:01:29:45:ad:94:bc:33:2b:a2:45:9e:
         99:c6:bf:c2:ac:23:44:51:e8:93:08:c7:77:5e:b7:90:ed:5d:
         b4:bd:22:dd:79:cf:f6:a3:08:f5:7e:0a:94:b1:a6:80:c8:2a:
         86:4f:08:33:fb:1d:ec:d8:8c:24:cc:eb:7c:34:12:33:3d:46:
         05:b5:07:e2:9c:21:95:e0:7c:3f:b7:14:90:50:31:35:0e:15:
         b6:10:30:84:7f:ff:8c:ee:9b:8a:58:39:64:e0:31:b0:92:16:
         40:96:72:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:00:00 2025 by rpki-client