Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131613a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363131613a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          mL40swCkvngx9sZxGanLOn4yhS80TiKzwfm5pPg+gsc=
Subject key identifier:   DB:74:C6:0B:32:06:1B:19:87:3F:24:71:DC:E4:A8:3D:F9:46:EC:0F
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       46F0303274103096946996F186F1385E4F85A205
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131613a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Fri 11 Apr 2025 18:32:13 +0000
ROA not before:           Fri 11 Apr 2025 18:27:13 +0000
ROA not after:            Fri 10 Apr 2026 18:32:13 +0000
asID:                     401507
IP address blocks:        2a14:7584:611a::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 18 Apr 2025 18:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f0:30:32:74:10:30:96:94:69:96:f1:86:f1:38:5e:4f:85:a2:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:27:13 2025 GMT
            Not After : Apr 10 18:32:13 2026 GMT
        Subject: CN=DB74C60B32061B19873F2471DCE4A83DF946EC0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f1:e3:e5:22:26:c9:fb:3c:54:77:b5:cd:6e:
                    f2:14:55:df:9c:dc:c0:1c:9c:7d:51:bb:99:8c:74:
                    6d:a3:4d:a4:db:3c:b3:ea:0b:91:c9:ae:1e:00:9c:
                    d3:a0:ae:51:7f:e1:87:09:db:2a:77:68:10:74:fa:
                    71:87:bd:af:bf:7a:d8:a2:23:9e:1e:15:16:2f:51:
                    88:2a:e7:3c:ad:9a:76:0c:fb:53:7d:65:c2:2e:32:
                    05:b2:76:64:2b:6e:df:b0:54:d7:79:58:57:eb:5c:
                    32:c5:7d:69:1c:60:72:5d:2e:1e:da:00:43:62:38:
                    2f:b3:4e:4f:65:cf:a1:e4:53:cc:6e:3a:5a:a7:e9:
                    9f:bf:1e:b2:a2:9c:bd:e9:f9:c8:b0:59:16:18:32:
                    f1:0d:10:ce:6d:17:41:1b:3b:6c:d0:1b:65:f0:8b:
                    e3:78:c3:f2:31:c7:cd:f5:64:22:3a:34:04:72:2e:
                    8b:fa:ab:28:88:b4:3d:d9:c1:37:23:f2:77:35:14:
                    cf:67:fa:53:58:a8:2f:75:86:f0:cf:19:0a:a5:35:
                    9d:d8:31:2e:81:c0:a7:75:69:f6:61:fb:47:9f:c8:
                    1d:ba:18:3a:e5:24:7d:b3:32:18:39:28:63:a2:53:
                    02:97:41:93:a3:80:64:de:cb:ab:52:aa:ae:d0:3c:
                    d6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:74:C6:0B:32:06:1B:19:87:3F:24:71:DC:E4:A8:3D:F9:46:EC:0F
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131613a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:611a::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:ac:38:37:79:42:6f:d6:d5:f0:69:4a:fa:d7:7f:8d:c8:ca:
         6d:97:e3:e3:0f:74:b2:1f:3b:c2:4f:2b:e1:59:bf:af:af:72:
         5b:4e:65:77:e7:26:86:f0:7a:42:be:35:24:bf:18:f3:fa:20:
         ba:73:fd:0e:77:27:8d:08:f0:87:69:22:ff:3f:41:58:3d:69:
         f1:b2:98:80:b5:20:c9:c5:a1:3a:d1:cb:8a:ac:2c:d4:ef:a2:
         00:fb:ea:c1:cc:e7:3e:da:38:a8:60:5a:d4:a3:43:7a:a1:96:
         b6:9d:d1:36:24:95:66:5f:a3:9f:25:9c:a7:29:52:ac:ec:c2:
         eb:70:69:25:13:fa:aa:6a:76:74:8c:47:2a:a3:c3:ad:2d:10:
         3b:37:5b:3f:3b:90:34:15:2e:fe:3c:d1:af:0e:e1:63:d2:96:
         83:db:a5:11:27:3f:b6:3f:78:c7:79:41:e8:0e:d8:8b:0b:b9:
         e9:37:aa:e1:95:69:9e:31:74:c4:f5:aa:8f:84:37:e5:b2:4c:
         f7:0b:0e:e0:c3:e4:1d:7a:ef:bd:c8:15:63:ea:ab:a3:3c:27:
         40:60:80:69:21:4e:66:ce:13:5b:19:90:88:8c:14:4c:ff:61:
         65:13:09:b8:78:ed:f1:60:09:6e:7d:79:4f:37:aa:5b:57:2e:
         1d:96:02:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:10 2025 by rpki-client