Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363831313a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363831313a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          amJKoKb+mfzwApYEuz6Jrku06FjCd9g9OQdEb1O5wBo=
Subject key identifier:   E0:52:B9:05:DA:9D:D3:EB:58:A9:0D:5D:5F:BB:78:8C:94:B3:7D:73
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       6F8A741AA0DB1A1DEF39DB47738AC266437221F9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363831313a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Wed 28 May 2025 23:12:01 +0000
ROA not before:           Wed 28 May 2025 23:07:01 +0000
ROA not after:            Wed 27 May 2026 23:12:01 +0000
asID:                     401507
IP address blocks:        2a14:7584:6811::/48 maxlen: 48
Validation:               Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:8a:74:1a:a0:db:1a:1d:ef:39:db:47:73:8a:c2:66:43:72:21:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 28 23:07:01 2025 GMT
            Not After : May 27 23:12:01 2026 GMT
        Subject: CN=E052B905DA9DD3EB58A90D5D5FBB788C94B37D73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7c:81:a0:dc:1f:73:bf:2b:79:16:f9:c4:b4:
                    28:24:27:ec:25:06:e1:0b:97:d2:b7:0d:19:86:9a:
                    32:80:c5:fb:c4:18:51:e5:12:06:c2:41:e1:81:58:
                    8a:45:4e:c4:cf:c1:e1:34:d2:72:3a:fd:b4:49:f2:
                    ef:e3:de:22:df:02:1b:1c:56:90:3c:2f:4a:5a:66:
                    17:33:90:8d:89:ef:74:24:20:cc:53:6e:ff:40:85:
                    42:3a:c5:47:4f:b4:b8:4e:92:e1:5b:fc:64:b2:33:
                    da:cd:ea:c1:be:5e:4d:12:a7:08:65:ce:6d:8e:44:
                    6d:d7:8a:13:06:08:13:03:25:f0:bd:82:3e:76:a3:
                    17:77:b1:e6:3b:43:e3:a9:a8:76:1b:18:cf:dd:f5:
                    b8:99:18:1d:aa:a4:01:3c:4c:3d:e3:e4:53:b9:36:
                    03:50:34:dd:2b:e9:ea:64:74:f7:1d:07:3f:1a:02:
                    62:61:b4:53:a8:ef:27:cb:e6:87:b4:2e:69:e3:5c:
                    c4:66:a1:8e:45:eb:95:32:e3:83:11:1f:79:e6:c2:
                    ef:8e:9c:69:7e:c5:4a:fc:95:03:f8:53:ae:42:f9:
                    9c:f7:fe:4b:55:9b:c4:3b:b4:66:04:97:3c:45:12:
                    08:3d:cc:a6:28:c0:50:12:c4:97:33:80:45:21:08:
                    4e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:52:B9:05:DA:9D:D3:EB:58:A9:0D:5D:5F:BB:78:8C:94:B3:7D:73
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363831313a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6811::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:61:86:08:c6:ee:20:97:df:c5:d4:42:f3:48:49:41:01:6e:
         57:99:2c:c3:eb:c6:4e:ba:1f:a2:39:c8:a9:c3:38:81:26:34:
         1b:21:86:36:d8:10:0a:af:97:a0:dd:e4:9d:c2:60:76:90:fa:
         e5:71:4e:73:3d:65:b7:cc:11:eb:67:cb:d0:91:08:16:38:a0:
         72:0e:32:af:8c:d2:dc:09:db:be:7f:61:0e:5f:c9:fe:20:82:
         7d:eb:de:e8:dc:79:70:f1:8f:74:7f:04:1e:1a:9d:e1:73:ec:
         7f:2c:be:18:d8:0d:9b:f0:02:40:2f:58:6b:f5:42:f7:1d:ec:
         5d:3f:23:5e:23:39:71:59:9f:0f:ba:13:c2:cf:24:ed:8a:21:
         f0:ac:0f:cb:af:62:15:91:ed:9d:9e:c0:23:54:c6:3e:04:23:
         39:39:b1:f2:5d:ca:69:d2:28:b6:c2:14:19:93:7a:c3:c8:bd:
         28:8c:ef:c8:3c:da:ee:4f:7a:3c:24:8b:4b:86:de:c2:72:47:
         ea:4e:2f:74:93:c5:36:3d:e0:85:a4:26:64:ee:41:91:96:d2:
         94:1c:54:d1:b7:3d:43:f7:55:ad:df:7a:22:9c:33:05:69:ec:
         3b:50:9c:d7:bf:5e:29:67:c7:5f:9a:27:1e:0e:80:f7:1e:de:
         dc:8b:5b:22
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUb4p0GqDbGh3vOdtHc4rCZkNyIfkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjgyMzA3MDFaFw0yNjA1MjcyMzEyMDFaMDMxMTAvBgNV
BAMTKEUwNTJCOTA1REE5REQzRUI1OEE5MEQ1RDVGQkI3ODhDOTRCMzdENzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4fIGg3B9zvyt5FvnEtCgkJ+wl
BuELl9K3DRmGmjKAxfvEGFHlEgbCQeGBWIpFTsTPweE00nI6/bRJ8u/j3iLfAhsc
VpA8L0paZhczkI2J73QkIMxTbv9AhUI6xUdPtLhOkuFb/GSyM9rN6sG+Xk0Spwhl
zm2ORG3XihMGCBMDJfC9gj52oxd3seY7Q+OpqHYbGM/d9biZGB2qpAE8TD3j5FO5
NgNQNN0r6epkdPcdBz8aAmJhtFOo7yfL5oe0LmnjXMRmoY5F65Uy44MRH3nmwu+O
nGl+xUr8lQP4U65C+Zz3/ktVm8Q7tGYElzxFEgg9zKYowFASxJczgEUhCE7FAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQU4FK5Bdqd0+tYqQ1dX7t4jJSzfXMwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzgzMTMxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGgR
MA0GCSqGSIb3DQEBCwUAA4IBAQCrYYYIxu4gl9/F1ELzSElBAW5XmSzD68ZOuh+i
OcipwziBJjQbIYY22BAKr5eg3eSdwmB2kPrlcU5zPWW3zBHrZ8vQkQgWOKByDjKv
jNLcCdu+f2EOX8n+IIJ9697o3Hlw8Y90fwQeGp3hc+x/LL4Y2A2b8AJAL1hr9UL3
HexdPyNeIzlxWZ8PuhPCzyTtiiHwrA/Lr2IVke2dnsAjVMY+BCM5ObHyXcpp0ii2
whQZk3rDyL0ojO/IPNruT3o8JItLht7CckfqTi90k8U2PeCFpCZk7kGRltKUHFTR
tz1D91Wt33oinDMFaew7UJzXv14pZ8dfmiceDoD3Ht7ci1si
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:56:50 2025 by rpki-client