Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363662303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363662303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          SSuZq+EivFAuuzn+dbQcp9L9SYgDdnalRG1t6PNoz7w=
Subject key identifier:   51:A3:F8:8C:66:38:25:4B:D9:F7:23:CB:69:94:96:AA:41:5B:5F:64
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       7E9753344D5845A743B7DE480844BE7700BE11FF
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363662303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 16 Jan 2025 19:31:40 +0000
ROA not before:           Thu 16 Jan 2025 19:26:40 +0000
ROA not after:            Thu 15 Jan 2026 19:31:40 +0000
asID:                     16909
IP address blocks:        2a14:7584:66b0::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 22 Jan 2025 12:32:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:97:53:34:4d:58:45:a7:43:b7:de:48:08:44:be:77:00:be:11:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jan 16 19:26:40 2025 GMT
            Not After : Jan 15 19:31:40 2026 GMT
        Subject: CN=51A3F88C6638254BD9F723CB699496AA415B5F64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:24:51:f4:8c:1f:c2:31:74:f8:9d:34:5c:b3:
                    7e:95:71:dd:c7:82:56:f1:24:63:a4:5a:06:1c:a2:
                    3e:0b:43:bb:bf:88:2f:d2:d4:b5:23:23:61:c1:6f:
                    a6:8b:eb:90:92:6c:02:c6:c8:b2:ea:e3:63:ff:10:
                    68:ed:95:7a:f4:e6:7b:37:09:3d:89:8b:a2:a0:13:
                    e3:92:02:0f:96:67:f1:38:ff:d8:9d:1d:ef:6d:44:
                    36:08:a8:4e:f1:28:29:c1:f9:76:92:c3:3f:af:ad:
                    c2:35:07:d2:c9:08:a5:44:c3:59:25:ed:dc:52:e2:
                    5a:ea:16:e3:77:85:60:a6:9e:cb:8d:3f:a5:c9:90:
                    a1:d2:ab:67:2c:2f:3b:c1:88:0a:f3:76:75:5f:fd:
                    86:a9:b7:77:1c:2b:9b:e7:ee:a2:72:29:84:36:1c:
                    10:64:b6:19:fc:fd:2c:0d:f2:64:3c:a7:58:67:4d:
                    b4:c4:6a:a4:c8:88:7c:b8:64:0a:29:ca:2b:83:bb:
                    08:38:2e:be:11:15:f2:b2:04:a6:bd:50:1f:f0:2d:
                    37:73:ba:01:95:92:d6:3a:22:cc:87:e3:f8:52:fe:
                    29:e8:87:31:c1:ad:e5:76:05:6c:0b:bb:08:2c:ca:
                    1a:b9:7b:09:ed:e9:d9:55:9b:06:7b:4b:9c:5e:f8:
                    4c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A3:F8:8C:66:38:25:4B:D9:F7:23:CB:69:94:96:AA:41:5B:5F:64
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363662303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:66b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:c2:12:77:17:b4:01:4c:14:b6:89:97:50:23:44:ee:d3:2e:
         ce:20:7d:24:f2:a7:7f:93:8b:1d:eb:ce:45:9b:ce:1b:74:d4:
         fc:ce:cc:e7:6a:0c:a6:b8:15:f8:15:da:bc:5b:d0:4d:5e:29:
         a2:c8:6e:1c:6d:25:42:38:5d:b9:e2:43:57:60:0f:2a:8c:9c:
         e8:4c:0b:8a:1d:4b:3c:f2:bc:62:1a:48:8e:4b:48:c8:a5:94:
         0b:a8:14:98:57:c7:7a:a2:3b:44:e8:d5:31:98:92:d4:66:33:
         72:52:76:77:74:20:7d:3d:24:da:95:86:6d:35:5b:20:46:b7:
         37:ce:05:f8:60:e4:e7:a1:8b:2a:7f:b3:a1:05:9e:f8:01:23:
         ca:4f:96:c6:99:41:75:14:82:c0:93:ad:da:55:3b:ba:68:e1:
         2c:44:27:ab:8e:7a:8c:52:cd:dd:cc:d5:15:ae:e8:42:a5:19:
         c0:db:ac:43:a2:c8:42:b3:75:3b:6a:c5:4f:bc:08:42:5a:d5:
         cd:b3:d0:7d:72:bd:c8:92:70:1d:28:2d:f0:20:39:25:89:66:
         64:4a:1c:ca:83:47:18:78:36:93:32:1c:eb:f4:d2:61:9c:93:
         8e:2f:39:5f:8c:5b:5c:32:2c:75:d6:e6:32:9b:cc:2a:6d:89:
         4c:c3:9b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----