Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131653a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363131653a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          Z5HqK/tpnJI09yQDNrayrwxwheHYsqabJmKNyDfzILw=
Subject key identifier:   5F:CE:76:B1:F8:53:F2:65:46:C2:72:74:71:86:69:21:DB:03:FE:81
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       0B4F7F67040CF71D54780069570AAB8A8359BF13
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131653a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Fri 11 Apr 2025 18:32:17 +0000
ROA not before:           Fri 11 Apr 2025 18:27:17 +0000
ROA not after:            Fri 10 Apr 2026 18:32:17 +0000
asID:                     401507
IP address blocks:        2a14:7584:611e::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 18 Apr 2025 18:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4f:7f:67:04:0c:f7:1d:54:78:00:69:57:0a:ab:8a:83:59:bf:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:27:17 2025 GMT
            Not After : Apr 10 18:32:17 2026 GMT
        Subject: CN=5FCE76B1F853F26546C2727471866921DB03FE81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:37:c5:c2:5a:d3:e6:fb:51:11:35:4a:c5:94:
                    c4:b9:63:16:83:19:13:13:ac:96:e9:2e:40:3f:4a:
                    c7:89:18:b3:01:4a:f8:32:40:3d:27:7c:fd:99:da:
                    ad:e5:b5:60:f2:6e:f0:36:2f:9b:34:b5:67:64:7c:
                    f0:37:e4:b4:63:24:6e:d1:26:37:71:5e:cd:06:4c:
                    ff:67:d5:1c:3d:ec:3b:36:4c:e7:df:30:95:a3:13:
                    7f:30:3a:6d:41:9f:36:2e:c1:32:22:8b:b2:71:1b:
                    2d:dc:e7:b2:a8:f8:61:a6:46:fc:6d:0d:bc:3c:b2:
                    f2:cc:07:6e:91:d1:ef:ab:0b:98:3f:12:6e:ba:c3:
                    3a:d6:e3:ff:1a:e5:5d:4a:d6:53:0c:84:32:6b:ea:
                    98:d7:c8:a1:c4:62:b6:34:6a:92:62:fb:c4:b0:8b:
                    67:7f:62:91:0c:d7:d2:1f:bb:53:87:33:5f:4d:67:
                    b6:cd:25:62:96:2c:5b:ca:98:6f:53:4e:7c:71:eb:
                    9a:e2:0c:60:c9:a9:c4:8e:79:1a:24:42:d6:33:83:
                    25:3c:4d:dc:2c:60:b1:3c:c3:71:0d:82:41:9f:de:
                    6d:f9:bc:80:4c:36:a0:d2:64:0a:d3:a9:75:3a:b5:
                    29:62:8e:ad:ec:1e:d1:ba:20:0f:58:9c:ad:ee:86:
                    c8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CE:76:B1:F8:53:F2:65:46:C2:72:74:71:86:69:21:DB:03:FE:81
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131653a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:611e::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:b7:ab:26:f0:30:01:3b:24:e5:e6:f3:cd:d7:06:40:74:0b:
         fe:53:f7:13:10:f0:db:7b:15:7f:70:73:6a:10:17:b2:ea:0f:
         6d:b4:85:17:d2:84:ae:72:8e:37:e1:ba:b9:bf:9d:55:dd:0c:
         a1:86:9a:21:a3:fc:62:c1:4e:46:21:1d:e5:2f:05:d4:8e:a9:
         2e:ce:ff:17:ca:4e:9e:1d:21:68:da:ba:0a:ef:67:2d:a9:51:
         60:68:82:e3:7e:fd:71:f0:f2:5f:65:bb:7f:06:fd:4f:c4:5c:
         ac:92:c5:ea:2f:a3:a0:cb:89:89:34:5a:8b:ad:55:e5:73:66:
         3a:81:24:95:b3:ff:a4:3e:27:05:56:75:63:50:71:b9:d7:22:
         bf:93:3e:fd:8f:51:42:02:ed:fc:09:40:52:3d:26:51:50:49:
         ae:69:ab:4b:73:db:cd:34:1b:29:db:36:fd:a3:98:1a:be:fd:
         10:9f:60:d1:ee:ce:b0:3c:d5:1f:92:d0:02:cd:9d:58:6d:cc:
         1e:6e:7f:ba:2c:c6:7f:68:09:43:63:15:c9:17:e4:51:a9:b3:
         a2:fe:65:f6:35:ff:c6:19:91:07:27:a5:75:cb:31:c0:02:f7:
         05:ec:84:42:41:f5:da:5f:f0:af:ff:b8:19:0f:14:f6:f7:0a:
         22:f5:e5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:44 2025 by rpki-client