Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234323a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363234323a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          V2EzuMcsYfklcaGSdyOUn8u6x/vm3uYiK7UsKC6Vv8E=
Subject key identifier:   8D:8C:93:B4:F7:1D:22:05:05:B6:A4:18:FA:01:B2:C3:0F:C0:7C:C0
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       27BA48005B02130611268B4E6DF6005298E27A64
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234323a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Mon 12 May 2025 16:18:03 +0000
ROA not before:           Mon 12 May 2025 16:13:03 +0000
ROA not after:            Mon 11 May 2026 16:18:03 +0000
asID:                     401507
IP address blocks:        2a14:7584:6242::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 14 May 2025 16:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ba:48:00:5b:02:13:06:11:26:8b:4e:6d:f6:00:52:98:e2:7a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 12 16:13:03 2025 GMT
            Not After : May 11 16:18:03 2026 GMT
        Subject: CN=8D8C93B4F71D220505B6A418FA01B2C30FC07CC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ca:32:27:db:17:fb:1e:a6:7a:f7:b9:85:a8:
                    c6:08:f3:0c:54:10:0a:80:35:2e:69:58:c6:60:67:
                    ff:6d:58:10:73:37:9a:27:2e:ce:59:6e:a2:23:8f:
                    ec:e5:2f:c9:d2:8b:3c:76:fa:0b:c1:cf:9a:03:bf:
                    5b:13:13:27:c2:50:5e:75:f9:d8:36:4b:2e:c8:50:
                    e9:b9:0e:4e:6f:da:56:4b:c2:af:ff:41:8d:13:7a:
                    a2:43:3a:29:40:da:5d:54:c6:c8:f3:ad:68:9c:67:
                    18:17:f0:6e:9a:a8:0e:fe:25:19:59:29:8e:e1:22:
                    92:d7:ab:7b:b3:5e:3a:fe:d1:19:8c:33:d0:2f:e4:
                    c9:89:b5:ee:5f:c1:b0:ba:06:38:72:53:fa:37:06:
                    ef:0d:4d:42:62:06:77:a2:37:81:c7:c1:44:f2:27:
                    a8:53:6e:7e:b5:69:30:1a:62:51:30:93:61:7c:69:
                    a0:fa:f7:2f:ff:2c:27:cb:42:e5:46:df:88:89:bc:
                    2d:97:fb:c2:92:21:e1:18:1a:89:36:90:1c:33:33:
                    38:73:dc:92:32:9f:8b:c4:ae:20:45:8d:8d:e0:26:
                    f2:62:2e:b5:a5:b8:b5:53:9f:7e:9b:f4:f9:73:f2:
                    ae:e5:5d:fe:10:b2:37:a5:f8:68:14:5e:b3:22:84:
                    2e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8C:93:B4:F7:1D:22:05:05:B6:A4:18:FA:01:B2:C3:0F:C0:7C:C0
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234323a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6242::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:48:08:bc:c5:8a:ec:d7:e7:df:4b:73:bf:a6:ae:46:2d:97:
         08:d1:12:04:56:05:45:58:09:46:12:ed:d0:9d:04:bf:2a:fa:
         da:94:aa:bc:1e:de:85:3a:58:67:aa:bc:8e:cf:66:f1:eb:1e:
         8f:55:4b:03:df:24:1b:f0:09:c2:4a:bf:19:07:ce:df:3f:ea:
         5e:70:e0:c8:e4:af:50:53:7f:1e:e7:b9:95:ac:ef:82:b1:d6:
         a8:71:3e:26:82:42:b8:08:0c:0c:fd:55:94:49:8f:0a:52:33:
         4c:af:f9:a3:6b:65:d3:da:cf:c0:cb:79:b0:d4:a8:71:87:dc:
         a3:dd:2f:bc:5c:60:5b:b1:e6:b4:05:89:bd:9e:5b:80:ba:7d:
         9d:f8:96:b8:6f:9c:1e:0d:25:16:e1:f0:b6:5b:78:e6:e0:56:
         56:ec:69:7a:2f:29:09:80:41:87:6a:52:8f:5a:b3:f2:4c:13:
         70:7c:86:ad:dc:73:67:20:73:30:5e:ed:0a:33:50:db:e6:f2:
         d7:1d:37:79:fa:3a:93:51:ea:bb:fb:ec:a8:f9:1a:62:48:96:
         f8:43:c2:84:f4:5a:9b:c4:71:c2:df:53:70:00:8a:f5:6c:17:
         5a:51:67:c5:8f:ca:5b:1e:9a:a3:1a:55:74:db:cc:4c:18:c6:
         3d:fd:88:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:57:40 2025 by rpki-client