Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32362e302f32342d3234203d3e203130373533.roa
File:                     3136322e3231382e32362e302f32342d3234203d3e203130373533.roa (raw, json)
Hash identifier:          zuJTGF21XNixe4HLX1+Wku+o7eMBKxbHno8fPUyuxSE=
Subject key identifier:   8C:7D:55:75:8A:2F:06:40:A1:46:80:72:F1:61:CC:05:26:74:EC:34
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       5790698F97885237BF4A4E588AED8E50255CB496
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32362e302f32342d3234203d3e203130373533.roa
Signing time:             Sun 30 Jun 2024 23:08:50 +0000
ROA not before:           Sun 30 Jun 2024 23:03:50 +0000
ROA not after:            Sun 29 Jun 2025 23:08:50 +0000
asID:                     10753
IP address blocks:        162.218.26.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 30 Dec 2024 10:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:90:69:8f:97:88:52:37:bf:4a:4e:58:8a:ed:8e:50:25:5c:b4:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Jun 30 23:03:50 2024 GMT
            Not After : Jun 29 23:08:50 2025 GMT
        Subject: CN=8C7D55758A2F0640A1468072F161CC052674EC34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3c:ba:f0:b9:ce:ec:1f:97:b1:4f:52:16:7c:
                    7b:36:74:7c:9d:98:2c:a5:6f:62:b1:86:ef:51:91:
                    09:31:cf:62:72:97:87:69:b3:d5:b1:2f:61:61:e1:
                    0f:31:29:df:6e:ce:48:01:08:ac:38:f9:e5:53:8a:
                    c5:33:9d:66:4e:4a:bf:ab:2a:da:0e:ea:51:fa:41:
                    7f:a7:50:f0:bf:85:68:69:60:85:54:67:e4:a1:6b:
                    07:70:ed:68:c3:d7:00:1d:40:01:da:b1:0c:32:be:
                    1b:46:e0:72:11:d2:a1:5c:7b:19:e5:29:90:64:a0:
                    f3:0f:02:5a:98:6e:c2:f5:30:1c:78:ab:86:d0:45:
                    ec:11:db:d9:2e:57:cd:b4:fa:84:e8:86:98:d3:79:
                    53:f0:8c:4e:71:e3:30:71:14:07:06:42:70:d6:e0:
                    83:ff:be:8d:4d:81:4d:fc:34:47:51:8a:9c:5e:e5:
                    fb:79:b8:fb:0b:ee:0c:b5:b7:2a:de:46:86:e8:26:
                    17:83:13:1d:ae:50:f4:6d:b2:ca:99:b9:64:72:00:
                    c9:f9:91:c1:c3:45:1b:03:f0:40:a7:ef:46:77:72:
                    eb:51:74:56:97:a4:df:fa:c8:d0:21:93:08:49:d7:
                    17:01:7a:ba:56:e3:98:b0:aa:96:9a:80:48:af:b8:
                    b6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7D:55:75:8A:2F:06:40:A1:46:80:72:F1:61:CC:05:26:74:EC:34
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32362e302f32342d3234203d3e203130373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:48:40:15:b9:4d:57:73:f5:10:be:4e:de:c9:14:7b:b5:ec:
         3d:27:6c:12:7d:ee:38:d7:d1:fa:f1:77:35:e6:96:3f:19:c8:
         de:1d:86:93:e5:f3:35:78:99:ea:d3:4f:03:9e:53:4f:c0:23:
         81:3e:f4:c5:96:11:48:ec:c9:f9:53:cc:09:61:a2:ec:c8:87:
         5b:ea:80:0d:f6:6f:b3:64:08:70:06:f9:eb:7c:6c:5c:30:7b:
         d2:b3:ec:ff:44:c9:e1:3e:9d:e5:97:cf:6e:90:f5:15:82:60:
         68:e8:83:79:8d:07:55:49:56:de:05:3a:64:2c:b2:0b:c9:12:
         a0:ab:1c:61:2d:f7:44:31:8d:98:54:f6:18:53:ce:3a:c6:4a:
         66:07:51:1e:c4:16:99:c6:cf:b4:6c:2f:bf:e9:69:00:41:c3:
         fc:f7:f0:73:dd:d2:85:bb:15:e3:37:e0:5f:99:c1:af:a5:80:
         45:bf:55:fc:92:a3:13:26:de:fc:7a:2a:22:c7:29:6e:3a:b0:
         dd:07:9a:e6:f2:a4:e3:c4:53:fc:ed:ba:cc:76:0f:3d:13:8c:
         04:55:d9:eb:63:84:12:e5:33:a9:b0:b7:6e:32:fd:ad:a3:1e:
         6c:9b:a2:65:e2:35:65:f5:85:71:52:c3:45:85:3d:3b:39:1c:
         d3:f3:25:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:57:48 2025 by rpki-client