Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366639643a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a366639643a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          YNGZZT837KoEQT/gqRjr3csu12tSq86z3ICi0PqpkGI=
Subject key identifier:   FC:A4:FB:1C:D7:A1:3C:67:1E:E2:0C:54:89:16:BB:E2:0F:B4:A2:0C
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       57DDD9E74C1D8B2D002EF7588257E778E95E08D4
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366639643a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Sun 25 May 2025 00:12:02 +0000
ROA not before:           Sun 25 May 2025 00:07:02 +0000
ROA not after:            Sun 24 May 2026 00:12:02 +0000
asID:                     401507
IP address blocks:        2a14:7584:6f9d::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 30 May 2025 10:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:dd:d9:e7:4c:1d:8b:2d:00:2e:f7:58:82:57:e7:78:e9:5e:08:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 25 00:07:02 2025 GMT
            Not After : May 24 00:12:02 2026 GMT
        Subject: CN=FCA4FB1CD7A13C671EE20C548916BBE20FB4A20C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:25:13:81:63:2b:24:4c:8d:b6:cd:cf:58:2b:
                    7e:9e:c0:ed:f1:51:e1:3a:ca:b8:eb:c4:76:b4:b9:
                    25:2b:de:d2:c1:9e:7d:d9:dd:ad:2b:ae:08:32:cf:
                    d1:7d:84:07:12:e1:b6:e2:cd:ae:df:21:93:58:c2:
                    0f:9f:e2:ac:df:2c:16:6a:d5:c9:12:4f:8b:bf:65:
                    6d:17:f4:77:4f:74:71:57:ad:4b:82:e7:33:7c:1c:
                    64:d3:27:14:46:9f:42:90:4c:91:24:52:3b:45:6d:
                    b8:b1:44:f5:cb:e4:ec:8a:b7:c5:37:93:ae:ee:13:
                    1f:4f:8b:1a:c1:01:87:66:51:55:8a:78:f0:fc:b2:
                    f4:aa:31:5a:c6:c3:0d:03:00:72:b8:65:f2:a6:41:
                    3d:e3:d5:0f:e6:11:ef:1a:c7:93:5f:84:94:c3:8d:
                    b0:20:73:d7:9d:47:c9:e3:ba:9c:45:eb:6e:21:d9:
                    96:85:52:4d:00:17:89:55:a4:90:16:ea:26:09:a4:
                    0a:fe:7a:4e:cc:c8:e1:7b:3f:55:e1:49:5d:80:aa:
                    cb:84:56:da:04:58:39:0f:a9:34:4e:e7:3a:c5:1c:
                    27:38:36:02:ee:34:1e:ee:02:b4:82:9e:9f:07:e0:
                    71:a7:66:7f:2b:af:9a:48:64:a6:e9:63:d8:e7:31:
                    7d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A4:FB:1C:D7:A1:3C:67:1E:E2:0C:54:89:16:BB:E2:0F:B4:A2:0C
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366639643a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6f9d::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:9c:41:30:d8:61:30:ba:b7:04:e4:d0:40:d9:ec:40:0d:45:
         c4:a2:2a:fd:e6:5b:bc:80:8d:6d:3b:b2:54:2c:50:8c:7c:48:
         c0:29:3b:52:05:5f:74:6e:48:c1:8e:43:5c:7f:87:d0:e6:a2:
         57:51:70:85:02:48:10:c5:78:50:a5:5b:32:2a:e0:59:cb:41:
         ef:02:c0:fd:bf:59:30:95:d9:30:ad:74:8b:1f:a4:db:22:ea:
         42:ce:d0:d6:8f:e6:51:36:71:66:05:63:11:74:e1:2e:bb:06:
         d1:d3:28:d7:61:15:51:f1:f7:72:1d:c7:04:6d:0b:5d:ba:17:
         3d:ca:2d:45:88:02:63:ba:f3:47:3c:34:cb:fb:32:ab:79:0a:
         1e:d4:c5:a3:39:b2:4a:1b:b2:5b:b8:11:12:c3:10:0e:1e:6d:
         b9:31:47:4a:72:63:af:35:5c:38:2d:a9:75:e7:45:a0:54:00:
         7d:77:15:b6:11:cf:2f:84:30:7d:ff:92:5c:cb:bd:48:77:6f:
         5e:75:15:ed:b9:37:61:8d:b7:20:27:aa:85:e3:d9:ed:50:5f:
         a8:bd:a5:81:4f:09:e0:5c:4d:5a:16:da:0b:e7:d9:a6:c2:6f:
         e9:ab:a8:f2:42:dd:cd:bc:3a:8a:40:d0:7d:f6:b2:14:88:ca:
         7e:0c:37:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:33:08 2025 by rpki-client