Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32362e302f32342d3234203d3e20313339343832.roa
File:                     3136322e3231382e32362e302f32342d3234203d3e20313339343832.roa (raw, json)
Hash identifier:          biIabrq6GLkGb35teKjnwssLXrrZw4518rfShobyZqw=
Subject key identifier:   6B:75:EF:B5:1C:50:98:C6:4C:DA:07:9F:AB:0E:A5:FE:46:68:7D:EB
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       25831FDD0589014FC403142F95AAF558652C6AF3
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32362e302f32342d3234203d3e20313339343832.roa
Signing time:             Tue 26 Sep 2023 13:14:45 +0000
ROA not before:           Tue 26 Sep 2023 13:09:45 +0000
ROA not after:            Tue 24 Sep 2024 13:14:45 +0000
asID:                     139482
IP address blocks:        162.218.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 20 Apr 2024 00:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:83:1f:dd:05:89:01:4f:c4:03:14:2f:95:aa:f5:58:65:2c:6a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Sep 26 13:09:45 2023 GMT
            Not After : Sep 24 13:14:45 2024 GMT
        Subject: CN=6B75EFB51C5098C64CDA079FAB0EA5FE46687DEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:15:f4:62:c1:de:20:4b:48:c6:03:b0:58:d9:
                    f7:e0:cd:51:da:10:9a:3b:cc:43:42:43:5b:64:12:
                    2a:0b:0e:80:18:31:f4:8d:82:94:5b:8d:ca:84:c0:
                    cb:b3:49:72:59:c2:c2:e7:2c:c9:88:0b:d2:c2:f0:
                    89:3c:81:74:aa:9f:0b:a0:98:5e:35:77:f0:0d:23:
                    07:87:c6:13:69:ff:3e:81:87:44:5e:7d:43:70:45:
                    4a:c0:45:a9:2d:3a:45:84:5f:a1:21:8f:f2:67:cd:
                    c9:d3:90:a3:2d:04:aa:7b:3b:ea:cb:d0:63:7a:29:
                    d3:c5:b1:4f:25:2e:bc:a9:95:7c:3f:56:c2:b7:52:
                    ad:ee:62:81:35:6e:39:fe:aa:6e:d5:bb:32:d8:d1:
                    21:f7:5d:54:2e:88:ba:37:03:17:98:fb:14:3f:a0:
                    b8:b8:c6:17:97:08:85:63:d1:cc:0d:a6:44:bc:64:
                    0e:1c:ef:bb:93:89:43:a8:fa:00:66:2d:bd:b1:e7:
                    43:ee:c8:4e:d7:da:9e:8b:71:47:58:9c:8e:d9:2a:
                    21:c8:31:35:02:6c:ca:22:da:74:5d:fc:07:05:5e:
                    fd:1d:0d:72:fd:d6:16:45:c2:d5:77:4e:8d:1b:21:
                    94:91:f6:d8:50:55:05:4a:b0:77:b2:da:6a:a1:0c:
                    b5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:75:EF:B5:1C:50:98:C6:4C:DA:07:9F:AB:0E:A5:FE:46:68:7D:EB
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32362e302f32342d3234203d3e20313339343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:b0:24:5d:19:97:de:4a:ac:1d:78:51:f9:1b:d2:fb:23:51:
         55:46:b0:22:a8:e9:8d:07:71:52:50:bb:4a:e6:16:16:90:a1:
         9b:da:f0:0b:6b:78:f6:12:5d:82:16:51:fc:16:10:24:51:c8:
         d6:7e:3d:60:1f:54:33:7b:b1:8b:a4:38:43:0a:52:01:7d:e6:
         58:b0:9d:10:8d:c5:20:57:dc:75:0c:ee:63:0d:44:bc:c8:50:
         6a:51:a3:40:ac:d4:a1:1b:72:d1:3a:4f:eb:ec:0f:26:07:e5:
         77:e0:b4:05:3c:6f:b0:d4:40:d3:40:de:3c:5f:a7:64:b0:87:
         5f:3b:27:1d:fd:ec:70:f1:7d:67:e9:19:e8:d6:72:4a:9e:fb:
         05:c5:6f:96:0e:8c:62:a6:62:17:f5:f7:66:95:6c:cd:31:23:
         29:44:61:05:bd:be:be:e8:82:45:11:bb:39:50:15:7f:47:1f:
         71:63:db:df:36:8c:b7:04:54:57:65:d4:0f:e0:9d:e0:d7:99:
         a1:09:38:8b:ce:39:e4:a4:6c:60:97:71:1a:1f:9c:bf:61:fa:
         9c:9e:ae:b4:a8:fb:8d:5e:98:14:47:f2:66:58:33:91:20:86:
         6c:14:f5:e1:7c:1d:67:ff:33:68:14:c9:f9:8a:76:76:34:ac:
         7d:40:e8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----