Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663466353a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a663466353a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          vRV41b3tMbT+S6cgMPYJ18BBtBUXwf3wFhC2iFmqvjc=
Subject key identifier:   B6:AD:55:32:74:CB:2F:20:C8:C0:C8:BC:5A:16:97:08:E0:5C:E5:26
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       1127598944E8F344BAAC5D1D18D70A08E8C3C6D7
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663466353a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Thu 26 Jun 2025 13:22:15 +0000
ROA not before:           Thu 26 Jun 2025 13:17:15 +0000
ROA not after:            Thu 25 Jun 2026 13:22:15 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f4f5::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 01 Jul 2025 03:27:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:27:59:89:44:e8:f3:44:ba:ac:5d:1d:18:d7:0a:08:e8:c3:c6:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jun 26 13:17:15 2025 GMT
            Not After : Jun 25 13:22:15 2026 GMT
        Subject: CN=B6AD553274CB2F20C8C0C8BC5A169708E05CE526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b5:9d:1e:52:15:a4:c6:ca:33:92:7c:c2:1e:
                    a6:1a:aa:0f:3e:16:0d:b6:ba:36:c2:d4:9c:6d:1c:
                    df:78:68:77:d9:16:77:d6:fc:73:ea:7b:53:9c:06:
                    73:7d:33:61:f9:37:c6:39:7d:ce:ac:21:64:26:72:
                    27:a5:9a:bf:a0:8b:5c:f1:ef:b4:b8:82:f4:d5:50:
                    8d:20:3d:82:c8:89:b7:1d:d1:a5:bb:70:dd:91:26:
                    c9:c6:35:e4:f2:c0:30:f4:87:5d:ae:36:55:d6:8f:
                    ea:52:4e:6d:dc:3e:ba:bf:97:11:c5:e6:f5:65:b2:
                    55:45:11:3b:5d:eb:51:90:1a:df:31:68:90:3c:45:
                    aa:a9:d9:7d:ca:dc:26:e5:34:19:a3:15:68:b7:c5:
                    f4:51:99:41:92:29:c4:de:ac:83:54:62:39:b9:f9:
                    14:96:bd:64:d4:28:5d:49:5c:dc:3b:fe:ea:61:36:
                    1f:ca:eb:3b:84:64:6f:6e:c0:4f:22:eb:25:ab:44:
                    93:8b:cd:f8:bb:a6:8e:71:8c:d3:34:33:0f:5d:d2:
                    cc:3e:ec:3a:5c:9b:40:a6:44:4f:99:a8:01:60:d5:
                    2f:01:32:00:1e:e3:8b:e8:2f:09:84:4e:3d:01:54:
                    4a:91:f4:60:fb:82:8f:22:79:d3:97:89:b6:59:25:
                    a3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AD:55:32:74:CB:2F:20:C8:C0:C8:BC:5A:16:97:08:E0:5C:E5:26
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663466353a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f4f5::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:70:39:8d:ee:4f:fc:d7:a3:8d:d6:a0:59:70:0e:3d:55:8c:
         f1:44:e9:64:15:20:8f:45:6e:48:68:19:33:3d:be:40:92:43:
         64:c1:58:95:fd:e4:c2:25:f6:0a:cd:01:6b:b8:24:e0:77:0f:
         e8:4d:ae:a2:aa:68:3d:9c:33:a6:9e:b5:33:28:8d:fe:d3:f4:
         aa:52:5d:ea:0d:48:62:fa:46:1c:ad:95:e6:f6:7e:d4:1f:2c:
         28:9f:50:37:d1:5d:46:5b:9e:de:88:b5:b8:3c:6d:a3:44:c5:
         ba:d0:75:7b:5a:f3:ef:dd:d0:e3:77:68:39:c3:aa:53:fd:bd:
         5d:ac:e0:06:ca:aa:11:03:38:9b:6f:92:22:8d:f8:72:90:06:
         c4:fd:e6:d0:89:9a:49:8a:a8:f8:bd:1b:75:27:2d:b6:83:e2:
         3b:17:88:0d:8a:70:65:7b:ef:ec:9b:b8:4f:5c:43:45:04:95:
         48:36:b9:9d:f9:b5:25:df:e8:7b:f6:34:fd:6e:5d:e7:2a:9e:
         14:2b:52:04:f5:2a:aa:46:6b:44:96:6e:a3:44:20:d5:11:6e:
         63:63:0c:a7:c5:29:cc:06:6e:d4:0c:cb:fd:24:a1:95:e2:99:
         7a:0f:25:8f:34:5a:99:34:81:fa:44:e9:ae:8a:64:b8:68:7c:
         58:ef:54:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----