Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333643a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363333643a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          NQ5agtsm1nEzE1UX1Gk+ik2vDbGxfOW43byjDyerB0w=
Subject key identifier:   06:93:6F:A2:1F:F1:EC:BF:B9:46:D0:EE:CC:A5:3D:C7:5F:9C:B8:48
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       5FB627342202C574817A29A2008A35AB9AE220D5
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333643a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Wed 21 May 2025 21:00:02 +0000
ROA not before:           Wed 21 May 2025 20:55:02 +0000
ROA not after:            Wed 20 May 2026 21:00:02 +0000
asID:                     401507
IP address blocks:        2a14:7584:633d::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 28 May 2025 23:06:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b6:27:34:22:02:c5:74:81:7a:29:a2:00:8a:35:ab:9a:e2:20:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 21 20:55:02 2025 GMT
            Not After : May 20 21:00:02 2026 GMT
        Subject: CN=06936FA21FF1ECBFB946D0EECCA53DC75F9CB848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0e:9a:d5:6a:92:ac:63:93:d7:99:26:ea:ec:
                    65:18:51:fe:4f:a6:04:2b:e0:fc:49:0a:48:c5:e3:
                    5f:c7:1c:cd:6e:76:ac:6c:9e:cf:bc:3c:a0:38:48:
                    52:b0:35:9b:39:5b:e1:89:52:0b:f4:27:4f:37:04:
                    8e:7f:fd:a7:45:85:40:1f:3d:c9:7d:ed:b9:36:60:
                    1d:30:a5:66:eb:36:53:94:b9:df:7e:90:7a:c9:8a:
                    35:f8:74:a2:3d:c6:cf:c9:d5:1c:14:fd:58:a9:f5:
                    81:4d:2a:5a:7d:f6:bd:24:33:74:0e:de:33:4b:fe:
                    62:c9:ed:42:95:13:2d:66:5c:d2:e2:af:bb:9a:62:
                    65:c3:76:d2:69:ec:6d:a4:1b:34:0a:a0:e0:9a:2c:
                    0e:23:bc:5e:77:1b:15:4e:c2:5d:dd:29:06:b8:f8:
                    28:e4:47:1c:df:e2:f5:6a:8e:c6:4f:13:c1:cd:99:
                    77:3f:c2:c8:2c:d6:d5:d1:c9:09:64:e9:d9:70:26:
                    5e:d9:41:75:39:3f:d2:24:43:a0:6c:4f:d8:40:50:
                    0e:76:80:c2:d7:17:5c:2f:0c:90:2a:65:68:30:65:
                    41:f1:57:05:75:9d:e5:c9:53:58:82:3b:00:0a:aa:
                    65:92:76:d3:d2:c8:d6:37:6f:52:9a:02:29:76:fc:
                    7f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:93:6F:A2:1F:F1:EC:BF:B9:46:D0:EE:CC:A5:3D:C7:5F:9C:B8:48
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333643a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:633d::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:ba:18:12:27:01:37:91:57:e1:78:3a:40:a8:fc:f3:a0:29:
         6e:50:ce:16:f1:52:9f:e4:b8:d7:96:1b:72:f2:88:e7:0f:26:
         59:3c:84:85:5f:de:e3:5f:bf:24:8d:82:a7:10:2f:80:88:45:
         8d:f1:f9:94:8b:51:54:68:0e:10:a6:59:0f:af:6c:9c:04:f5:
         18:0a:6f:4b:80:73:91:33:c3:66:02:e9:ae:f6:53:fb:1b:ad:
         e3:ab:a2:2a:71:92:79:28:6d:52:ef:bb:39:2d:31:c6:c2:e3:
         a9:32:57:a2:ae:51:ea:bd:3a:44:53:2d:11:6d:92:9d:7c:d9:
         cb:9d:06:21:ba:01:9b:cc:38:4a:e5:f7:22:d0:ce:11:0c:d5:
         32:cf:16:86:68:ec:80:1b:0f:68:6c:cc:a3:11:03:a8:eb:b7:
         2f:33:78:e7:24:c0:fd:11:aa:45:d2:75:ce:c3:bd:4a:29:f3:
         1e:c0:55:7d:e6:b9:c0:e3:1a:b7:e5:03:8b:f9:97:9d:1c:42:
         dc:34:7d:17:92:a5:e0:a9:68:2b:90:89:5d:0c:8a:07:6e:d0:
         9a:b6:9b:db:b5:7e:d0:32:80:a1:8b:7e:5f:aa:15:fd:2a:4a:
         0b:37:91:86:b1:10:27:7c:ed:19:2a:93:55:e3:ba:a0:ce:14:
         47:f3:d4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:08:40 2025 by rpki-client