Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366533313a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a366533313a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          ThLddCi74W+fgQ7Nk8Yxiw9YYgEOPpASw2Cr3nvszOA=
Subject key identifier:   4B:2A:D2:A1:1B:34:BD:FD:F8:36:76:A0:1E:2C:6B:F4:2B:07:96:FD
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       4D516ADA212C3392F5BEBE69632F4C75167C4E8A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366533313a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Wed 28 May 2025 12:48:01 +0000
ROA not before:           Wed 28 May 2025 12:43:01 +0000
ROA not after:            Wed 27 May 2026 12:48:01 +0000
asID:                     401507
IP address blocks:        2a14:7584:6e31::/48 maxlen: 48
Validation:               Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:51:6a:da:21:2c:33:92:f5:be:be:69:63:2f:4c:75:16:7c:4e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 28 12:43:01 2025 GMT
            Not After : May 27 12:48:01 2026 GMT
        Subject: CN=4B2AD2A11B34BDFDF83676A01E2C6BF42B0796FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ca:c7:d9:4e:e2:d0:5d:05:7a:74:37:41:cb:
                    78:fd:82:ff:29:ec:25:cb:c3:bd:95:1a:05:72:7f:
                    44:e6:0f:1d:d1:b3:10:2b:fc:04:4a:a7:b6:e2:2f:
                    0f:31:11:bc:ab:77:24:ac:87:a4:48:88:0a:63:e0:
                    1a:12:fe:e3:fd:68:17:9b:a5:cc:c4:3d:aa:9b:82:
                    79:76:29:1a:57:53:8f:71:89:37:c8:43:b0:22:93:
                    5a:5b:d0:d7:c4:53:29:a5:73:0a:d2:ce:d6:8c:3d:
                    63:bb:c1:b5:c3:79:21:1f:b8:a2:4b:4b:6f:ec:83:
                    6f:4c:fd:b3:3f:22:20:90:7f:d7:5a:f8:23:14:bd:
                    a8:d5:1b:61:1c:70:2e:f2:ec:4a:08:11:91:79:b9:
                    29:ec:47:1e:ac:de:1e:b5:d4:d3:66:f8:13:af:07:
                    fc:3d:39:c2:88:61:82:07:d8:7f:bf:13:10:06:31:
                    e6:cb:f0:97:5f:fe:72:19:3b:ae:40:91:ca:b9:4e:
                    da:3d:2f:53:aa:74:8f:a4:97:e1:5e:3a:a8:fe:6e:
                    0d:dc:8d:c9:8a:be:12:d1:9a:a5:81:46:1f:32:81:
                    2e:3c:7e:99:8f:0b:88:2b:ab:d3:71:30:ba:91:a2:
                    01:2a:ae:81:e5:14:d1:ae:60:ac:0e:de:19:4b:0c:
                    af:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2A:D2:A1:1B:34:BD:FD:F8:36:76:A0:1E:2C:6B:F4:2B:07:96:FD
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366533313a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6e31::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:67:81:0c:b7:f3:00:45:34:00:cb:eb:8e:1e:54:5f:bf:d0:
         c8:a9:ac:a2:b8:1d:2d:49:d7:2c:54:ed:2f:9a:ac:22:00:48:
         95:34:98:5c:63:87:00:ce:52:53:cb:04:7c:e4:c7:e5:95:6d:
         a3:14:78:a1:49:99:cc:d2:a6:cf:ed:73:8e:2b:94:5d:b2:9c:
         0e:57:23:e7:84:92:fe:55:89:6d:c1:a4:03:7d:fb:35:4e:b1:
         8a:25:e9:ab:34:1b:40:bc:eb:99:2c:e0:e7:d3:28:b7:32:ba:
         d2:f5:88:4e:45:30:0c:bd:4e:13:f5:72:e5:55:35:0b:50:b9:
         30:e4:18:79:6d:9b:e4:17:a2:58:69:a1:9c:1d:49:1b:ad:7b:
         2f:d4:41:3e:4f:a1:9c:88:a0:b2:74:a8:c2:45:b6:e5:99:b4:
         ca:cc:41:54:5b:59:7d:ed:a8:eb:9c:18:62:4c:63:35:1e:5a:
         9e:3f:dd:d9:c3:9b:58:51:ea:39:7f:a7:1f:51:a9:2f:03:f6:
         c8:a5:ce:bf:22:b0:79:66:11:ea:21:61:c2:fb:31:24:07:27:
         0b:a0:af:28:43:fe:a9:f0:54:d7:37:6c:92:4d:c5:65:75:c5:
         37:84:27:47:ec:db:68:69:67:f9:4b:75:b9:04:28:0e:b7:4e:
         af:9b:e5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----