Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363164343a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363164343a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          vDvaMFPZkJ3O8pIV+zSog1G4mPUHLgDhhBzwpOhX+gU=
Subject key identifier:   19:8B:EF:9D:A0:C5:EE:62:98:2C:38:75:D8:09:C7:C0:EB:C9:E1:E9
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       79E1C763F3506470E35F40486E270798D7063C5B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363164343a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Mon 12 May 2025 16:18:09 +0000
ROA not before:           Mon 12 May 2025 16:13:09 +0000
ROA not after:            Mon 11 May 2026 16:18:09 +0000
asID:                     401507
IP address blocks:        2a14:7584:61d4::/48 maxlen: 48
Validation:               Failed, certificate revoked on Thu 15 May 2025 18:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e1:c7:63:f3:50:64:70:e3:5f:40:48:6e:27:07:98:d7:06:3c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 12 16:13:09 2025 GMT
            Not After : May 11 16:18:09 2026 GMT
        Subject: CN=198BEF9DA0C5EE62982C3875D809C7C0EBC9E1E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:31:87:e0:61:99:70:27:40:29:57:44:9e:92:
                    f0:b6:30:02:7a:cb:57:dc:2b:1e:c9:f1:40:94:e7:
                    d0:ba:be:dc:ea:58:a6:3b:44:f0:c3:31:8c:27:7c:
                    75:de:42:9a:f4:b6:5b:75:8d:96:cb:93:cb:8d:28:
                    0e:90:80:ff:b6:ce:9d:85:ce:5b:94:01:28:65:ee:
                    b0:96:51:d4:69:22:b3:c3:19:07:55:95:04:25:bc:
                    04:2b:3a:7f:22:70:a7:d5:6f:26:8b:46:63:33:7d:
                    7f:dc:47:be:8a:62:c6:05:ff:60:8b:53:2f:f0:c8:
                    07:49:33:e5:a6:e5:89:4a:cd:bb:b4:de:0d:54:15:
                    69:55:4c:f5:8d:6c:b1:4f:45:e7:e3:4c:6a:38:97:
                    bd:f5:10:13:76:3c:9d:ec:d7:2e:7f:9a:e9:b7:1d:
                    96:e2:20:c6:2a:f1:9c:d5:24:98:96:c4:13:0a:44:
                    35:56:e0:05:7c:0d:a8:92:fb:07:c7:e8:07:e4:03:
                    23:ae:01:39:78:da:7e:4f:89:9e:1d:28:de:50:88:
                    ae:58:3c:60:c7:c2:fd:11:f6:d1:28:bb:d9:4c:b5:
                    1d:01:23:12:10:07:35:8b:b3:36:ac:79:c0:f0:8f:
                    94:28:66:cc:da:37:c2:b4:2c:a6:34:21:03:1b:f7:
                    73:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8B:EF:9D:A0:C5:EE:62:98:2C:38:75:D8:09:C7:C0:EB:C9:E1:E9
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363164343a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:61d4::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:b9:46:f6:e5:12:d9:38:e9:6b:bb:82:9c:5c:26:ce:14:75:
         2f:78:30:7b:49:fb:e3:d8:44:91:9c:e2:51:53:19:e4:59:52:
         c7:16:ed:96:94:c1:e2:39:1d:e0:37:d1:36:a0:9a:93:26:ad:
         eb:8d:4d:ba:fa:71:e5:d2:df:c5:9c:32:28:02:5e:63:e6:31:
         89:30:7f:86:1d:43:28:20:f9:b3:49:d6:e7:0f:fb:f7:ea:46:
         e6:eb:21:f2:f6:95:d8:44:22:76:91:66:29:ef:83:7c:78:0b:
         ff:be:fa:13:7f:b5:2f:9d:73:43:2f:ea:8e:09:3c:81:fd:2f:
         6b:90:26:4c:fc:5b:86:58:4d:a8:26:54:93:44:14:ab:9b:31:
         25:cb:ef:c3:61:9e:2d:78:b2:f0:79:be:84:fb:f7:52:c2:07:
         30:8a:9b:c6:f5:1c:65:ae:92:6d:a3:fd:05:03:f2:bc:94:8b:
         7f:cd:21:99:c1:d0:78:27:85:da:61:32:15:5f:fe:9f:ec:47:
         89:3e:4a:0f:0b:76:f0:25:a5:35:d8:01:96:fa:ff:95:c6:77:
         a1:89:1e:9c:40:4d:a9:9d:4c:7f:ad:9b:26:a4:2c:b5:62:22:
         73:cf:1a:7a:7b:96:32:37:16:98:ea:f3:9e:1b:1d:0d:d7:15:
         a2:81:61:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:31:29 2025 by rpki-client