Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666563623a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a666563623a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          JuqbdViRsbBcPI+o1qlVUAxiEGC5mjZdTfj0OuGfIjs=
Subject key identifier:   EE:78:1F:23:17:EB:8D:4E:28:FE:CF:DB:0D:FC:27:92:02:F5:25:CB
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       46AC8F50E24D84820984833E8412592EBC335EC9
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666563623a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Thu 26 Jun 2025 12:36:21 +0000
ROA not before:           Thu 26 Jun 2025 12:31:21 +0000
ROA not after:            Thu 25 Jun 2026 12:36:21 +0000
asID:                     396968
IP address blocks:        2a0f:6287:fecb::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 01 Jul 2025 03:27:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ac:8f:50:e2:4d:84:82:09:84:83:3e:84:12:59:2e:bc:33:5e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jun 26 12:31:21 2025 GMT
            Not After : Jun 25 12:36:21 2026 GMT
        Subject: CN=EE781F2317EB8D4E28FECFDB0DFC279202F525CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8b:85:f9:87:5b:c5:74:ce:49:72:5a:8b:14:
                    c9:d7:fa:42:a0:8e:6d:d8:71:ae:c8:d2:0e:f8:86:
                    27:90:62:5d:e0:bd:87:67:e1:03:73:6e:7f:f5:80:
                    df:ab:85:a6:99:f2:53:1d:8d:fd:f8:c6:13:2a:63:
                    7c:3c:cf:18:7d:af:54:aa:94:84:c1:fa:21:ec:e7:
                    7f:51:b2:4d:b4:28:48:6e:72:7c:83:7f:09:b9:df:
                    11:b4:88:81:4e:6b:14:5d:30:05:17:e6:72:1f:0f:
                    06:1d:a4:90:c0:fa:eb:08:26:35:f6:34:c0:31:6f:
                    10:3c:fa:b7:5e:a6:12:7b:c2:32:7f:96:41:d1:28:
                    c4:cb:20:fd:c1:7b:6d:ed:48:f6:ba:aa:f0:81:66:
                    37:6d:92:e3:51:93:b9:10:a8:9b:dd:74:db:a0:f1:
                    3f:aa:a5:c5:f1:57:97:46:25:a9:f5:62:29:d3:a2:
                    06:23:a2:69:8e:08:81:9e:62:d1:d1:fa:05:ba:24:
                    80:3c:98:45:0b:de:ba:53:38:54:f4:02:79:d6:d6:
                    5f:c0:e8:45:4d:a6:1b:27:56:42:d3:50:5b:c0:56:
                    cc:59:10:ef:54:d1:56:c8:c9:bc:1d:f0:af:e7:ef:
                    a9:6e:22:6f:c6:ab:d5:38:b2:2d:46:f3:e0:60:f5:
                    0a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:78:1F:23:17:EB:8D:4E:28:FE:CF:DB:0D:FC:27:92:02:F5:25:CB
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666563623a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:fecb::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:91:6b:4c:1c:ae:d8:11:39:7d:48:33:23:f1:e9:2f:92:85:
         78:0a:43:cb:6f:ba:12:96:f4:c8:70:e6:2e:b8:de:62:cb:e3:
         0c:18:d7:3c:41:7f:b2:cf:fa:93:5e:35:ef:af:3c:c9:21:21:
         2b:b8:11:ac:fe:c7:7f:4e:62:a8:c0:2d:54:cc:5d:f7:67:f1:
         40:be:bc:bb:76:1f:04:8d:5e:b0:16:3c:1f:98:53:18:40:3b:
         af:7f:53:ca:4b:0e:62:30:66:7e:be:d2:50:6c:62:dc:83:26:
         3f:3b:1c:9a:63:23:c6:15:0e:7b:86:3d:e0:42:35:2e:46:bb:
         f0:b6:31:ee:0f:06:d7:53:b8:1d:f9:aa:41:c6:67:90:8b:dc:
         d1:c2:f6:e4:94:2a:42:b2:ab:b4:e6:fd:b6:6c:34:d6:c3:5b:
         db:34:1e:e1:01:5b:ba:33:24:a1:23:02:50:ef:15:49:e1:52:
         68:42:29:6e:2c:98:2e:77:96:14:da:f3:cb:59:ca:5c:da:d4:
         3f:ce:ad:92:c8:14:c4:a8:5e:c7:bf:36:60:36:ae:56:1e:9a:
         f0:0b:11:0f:8b:ca:1b:de:3e:49:00:86:8d:24:7c:37:45:9c:
         9c:41:48:84:0c:b4:a6:b5:56:47:6a:b8:3e:c5:a7:a0:9d:58:
         59:a0:5e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:04:41 2025 by rpki-client