Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32362e302f32342d3234203d3e20383334.roa
File:                     3136322e3231382e32362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          CaaPwzExk78VbZYiRCRTc+6Okxv+/fetDddZZGrBLAU=
Subject key identifier:   25:9D:97:BE:A8:9F:93:88:85:8C:E6:9A:17:D0:79:87:3D:A4:BE:7B
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       687CBBE0D4D457967D4B98076CEC8DDA505122F2
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32362e302f32342d3234203d3e20383334.roa
Signing time:             Thu 16 May 2024 15:58:05 +0000
ROA not before:           Thu 16 May 2024 15:53:05 +0000
ROA not after:            Thu 15 May 2025 15:58:05 +0000
asID:                     834
IP address blocks:        162.218.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 21 May 2024 06:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:7c:bb:e0:d4:d4:57:96:7d:4b:98:07:6c:ec:8d:da:50:51:22:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: May 16 15:53:05 2024 GMT
            Not After : May 15 15:58:05 2025 GMT
        Subject: CN=259D97BEA89F9388858CE69A17D079873DA4BE7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f3:09:db:fb:88:a3:34:74:b7:f4:c9:51:2e:
                    e5:58:b3:ba:ab:78:76:2a:4b:97:ff:66:be:e7:aa:
                    6c:3b:ea:5d:87:bd:5e:8c:c1:d5:44:73:d7:3c:25:
                    4b:49:00:60:26:49:4a:a2:7b:33:87:26:2a:64:5a:
                    8e:4d:81:46:15:60:9d:05:de:d4:fc:48:1b:5e:c3:
                    45:67:e0:b0:f4:35:60:8a:e9:22:8e:44:3d:c7:c0:
                    e7:58:fb:b1:34:b5:e8:d7:bd:cb:a8:3e:cd:71:cd:
                    81:c2:a7:31:73:f3:ca:ac:6f:63:aa:7b:71:7a:50:
                    5c:a1:0b:fe:5a:9e:88:7a:98:51:60:a9:69:63:2f:
                    f1:8f:84:db:61:65:f3:4d:e0:45:39:19:96:39:a8:
                    38:37:50:64:90:2e:7a:8f:71:94:cf:b4:47:e4:dd:
                    33:40:c9:de:59:49:4a:cf:e5:84:35:a6:00:7b:7d:
                    1b:7b:f6:a3:de:e2:3d:db:b8:f8:3b:eb:e3:03:fa:
                    b3:cf:37:17:d5:13:ca:96:2c:cf:f1:e8:af:9e:48:
                    f7:54:cb:86:68:07:2a:f4:d7:5f:14:78:c5:b7:b5:
                    60:93:a2:66:3b:2e:63:a6:59:b7:ed:27:b1:b5:24:
                    b0:32:bb:e1:33:a6:2c:cc:e9:db:a6:b3:62:7d:e7:
                    bd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9D:97:BE:A8:9F:93:88:85:8C:E6:9A:17:D0:79:87:3D:A4:BE:7B
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:79:2d:04:8b:5d:c8:5b:f5:04:6f:a2:1d:6d:81:1c:ac:48:
         ee:7f:32:6d:60:68:0b:9e:26:86:d0:2c:a8:51:b4:da:44:27:
         00:39:0a:5a:88:6f:02:21:96:11:f1:fa:0e:26:e0:e7:07:3b:
         22:0d:1d:ae:45:6e:9d:cc:10:ff:2e:38:ca:26:ef:80:4d:1e:
         a1:f2:dc:ad:e9:60:68:1e:f4:3d:d3:45:93:ab:af:96:86:2f:
         78:14:5e:8b:aa:47:b0:bb:10:6b:50:66:91:4a:a4:b2:c0:26:
         ea:5e:33:73:5e:d2:75:75:65:f5:1c:7d:01:4c:f1:5d:be:07:
         07:29:db:d2:a1:36:d7:3b:94:34:94:72:0d:6d:ed:3f:7a:bc:
         f8:0b:6b:cf:a9:6f:8b:dc:d4:59:12:ea:5b:dd:a8:2e:be:cb:
         f2:95:5f:6c:d4:56:f8:11:c5:ee:8e:4e:60:c7:79:cd:0f:d7:
         a5:72:e9:ce:9f:ad:71:35:83:a5:a7:7d:79:eb:a0:22:a0:42:
         46:4e:8b:4d:ce:5c:b2:76:2b:c1:bd:51:9a:0c:36:53:24:41:
         49:37:46:4d:a4:5f:7e:78:02:28:09:88:bd:4b:80:e1:4f:74:
         17:d8:59:57:90:4e:17:b0:fa:63:cf:07:cc:e2:19:40:5d:2f:
         b0:35:61:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----