Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366531623a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a366531623a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          q5hFBy7WpypUHacVwmRVL2Jeu1e4tNPNZI2ZdjArQxE=
Subject key identifier:   5F:4B:F8:9F:C6:48:1A:60:BD:8D:3A:81:46:7C:A2:61:92:19:EC:70
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       5B530A390C504E8149134E3635614B7EFA513FAE
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366531623a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Wed 28 May 2025 00:42:02 +0000
ROA not before:           Wed 28 May 2025 00:37:02 +0000
ROA not after:            Wed 27 May 2026 00:42:02 +0000
asID:                     401507
IP address blocks:        2a14:7584:6e1b::/48 maxlen: 48
Validation:               Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:53:0a:39:0c:50:4e:81:49:13:4e:36:35:61:4b:7e:fa:51:3f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 28 00:37:02 2025 GMT
            Not After : May 27 00:42:02 2026 GMT
        Subject: CN=5F4BF89FC6481A60BD8D3A81467CA2619219EC70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:61:6f:72:d3:76:cd:62:ee:0e:99:29:4e:dc:
                    ef:d6:47:e9:7c:0e:75:e9:0b:96:aa:7d:98:be:68:
                    75:2a:19:06:27:56:9d:45:4b:a3:c0:bd:1b:fd:32:
                    f1:57:1e:5e:ce:23:9d:a4:6a:a0:23:ca:7d:82:78:
                    9b:e8:80:22:d3:79:1c:db:f0:a3:a6:be:d6:b9:3a:
                    44:45:ec:cd:79:6a:50:d0:08:8b:0f:40:cd:40:3d:
                    19:5f:55:68:58:2e:b7:8c:e8:85:0e:5b:cb:5f:8a:
                    5e:1f:77:a3:63:82:af:23:97:18:c6:3d:5e:c0:f8:
                    bb:6d:77:13:8f:eb:4c:c2:b3:89:e2:13:eb:f4:6c:
                    eb:44:26:58:3c:9d:c4:b7:fb:b5:5b:70:cc:00:77:
                    6b:1b:52:0b:ce:68:a9:1b:ea:73:e8:23:2a:de:65:
                    ee:07:95:07:2a:ba:53:a3:59:fa:ea:34:9a:f5:94:
                    f7:b1:9a:f7:60:b6:5a:64:ec:c5:95:88:bc:12:ff:
                    01:63:28:d4:31:43:b5:b1:37:02:df:20:5c:44:c4:
                    a3:91:84:5c:1b:0a:4b:87:36:ef:ed:b9:8c:9c:d9:
                    2f:cc:da:03:ee:a5:76:d0:c2:8d:b0:42:16:f2:d7:
                    2f:28:03:04:e2:0f:db:b1:38:b4:d4:4a:24:4c:12:
                    4a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4B:F8:9F:C6:48:1A:60:BD:8D:3A:81:46:7C:A2:61:92:19:EC:70
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366531623a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6e1b::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:97:00:b8:39:ea:61:0d:71:68:f8:87:a6:cd:6d:0f:14:2d:
         6c:fa:c1:50:d2:81:1d:ec:85:ef:17:c4:0d:f8:f0:7d:48:bb:
         f3:35:c0:15:65:09:ce:6d:a5:f6:bd:74:7d:2b:a9:5f:9e:4a:
         71:a5:f7:90:fe:91:8c:8c:de:5c:4e:1b:6a:91:da:c8:2b:a1:
         3b:bb:08:8f:08:1a:6f:4a:62:9e:8e:b6:48:54:db:68:b8:49:
         af:00:88:3e:e6:c0:d4:7f:12:86:66:ac:b5:60:61:ee:c0:da:
         7e:04:9c:db:ae:d5:e2:08:a1:59:17:b0:11:c0:ad:4f:7e:39:
         a5:c5:f7:e9:b4:da:61:bb:1b:40:d3:4b:07:c7:c3:25:ce:90:
         08:96:c3:0d:56:e5:7f:94:5e:5b:d4:f0:d1:4e:bd:ce:31:7f:
         d7:a3:0c:3d:e2:d1:e3:ba:08:39:43:47:31:44:83:85:cc:6d:
         27:59:57:2e:be:b1:8a:6e:e8:da:ee:f0:bc:e8:7c:84:1f:15:
         f1:0f:c7:77:6c:60:4b:b4:79:9a:83:07:6d:32:53:fd:05:22:
         1b:32:bf:3c:d7:6d:86:8b:21:88:f3:bb:98:c2:9d:75:f7:d9:
         70:65:32:51:bb:79:96:c8:42:e8:42:57:61:68:3f:5b:92:b8:
         b5:40:b2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----