Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32362e302f32342d3234203d3e20343030383636.roa
File:                     3136322e3231382e32362e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier:          nhUgQk3eLrM3XHvSMk68z2obA6odUoIvnkw+xenqXUs=
Subject key identifier:   52:DE:CD:4B:3A:76:EA:F9:E1:71:68:32:01:46:55:57:62:48:E7:C4
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       59378A02338F614ABACFE20D86F76322ADC2ED77
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32362e302f32342d3234203d3e20343030383636.roa
Signing time:             Tue 21 May 2024 06:04:12 +0000
ROA not before:           Tue 21 May 2024 05:59:12 +0000
ROA not after:            Tue 20 May 2025 06:04:12 +0000
asID:                     400866
IP address blocks:        162.218.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 00:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:37:8a:02:33:8f:61:4a:ba:cf:e2:0d:86:f7:63:22:ad:c2:ed:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: May 21 05:59:12 2024 GMT
            Not After : May 20 06:04:12 2025 GMT
        Subject: CN=52DECD4B3A76EAF9E1716832014655576248E7C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:32:93:71:04:2b:3a:8e:6a:a1:78:0a:dc:3b:
                    2d:c2:7c:ad:88:56:c2:ac:cc:e6:19:3d:9f:9e:55:
                    7f:ff:a4:50:1c:24:72:18:a0:de:70:6e:81:98:49:
                    05:ff:63:bb:d5:eb:ca:c7:9e:1d:37:be:ff:19:78:
                    c4:41:8b:e5:c1:8b:10:e9:26:0c:66:59:d1:8f:d0:
                    d0:71:ae:d1:12:49:21:28:a4:e9:d6:cc:12:04:3c:
                    13:15:68:db:7d:0f:83:9b:32:b1:df:f4:7a:24:b6:
                    8e:63:94:15:de:78:08:4d:40:14:d3:51:f6:3a:95:
                    54:ae:9f:5b:02:0c:1f:63:0b:9c:ff:51:65:06:71:
                    ef:1a:69:34:1d:b5:e1:9e:76:8a:4d:c8:c9:37:54:
                    d2:55:f2:73:f5:d2:ce:cf:2b:d9:dc:a1:9a:68:6e:
                    ec:cd:fa:6c:3f:2a:41:21:b1:0f:c3:48:0f:24:fa:
                    c7:90:b1:45:92:2b:6e:c4:5d:49:77:16:6a:32:d6:
                    a8:d5:e2:fd:35:33:23:10:d2:8d:4c:36:6b:3d:00:
                    70:7f:58:57:c4:e9:1e:91:3f:7a:b1:04:24:32:f2:
                    28:27:28:44:4a:7e:8f:32:34:7d:4a:8f:0e:77:96:
                    8a:52:9c:d3:27:04:ff:83:cb:48:5b:82:db:60:f2:
                    96:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DE:CD:4B:3A:76:EA:F9:E1:71:68:32:01:46:55:57:62:48:E7:C4
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32362e302f32342d3234203d3e20343030383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:f3:63:83:6f:13:a0:55:d0:ef:89:fe:78:5d:11:1f:1c:a5:
         7f:42:5c:64:65:e6:34:d9:08:58:f5:70:59:31:1d:66:89:51:
         ee:81:c5:c1:33:ba:7e:18:32:9b:19:df:8c:65:c5:35:a6:7f:
         9c:9f:52:fd:cf:66:e1:73:28:ac:58:c5:92:82:61:3f:dc:73:
         ea:85:64:46:a8:55:b3:11:eb:50:8a:20:40:f6:d8:ce:60:f8:
         e5:03:2d:39:a8:75:7f:81:42:a4:c4:e8:7e:47:e3:c1:72:a9:
         4d:81:9d:f3:47:80:7d:23:01:2b:c2:44:98:aa:e3:2a:f1:81:
         6e:5c:5a:c4:63:25:b2:64:b2:1a:99:f3:1a:17:7a:e8:67:1f:
         d3:b4:58:a5:e9:4d:47:ba:fb:16:ce:81:76:48:cf:03:8c:1f:
         74:45:b9:28:87:a4:7e:f8:0e:ee:cf:da:db:c0:be:5c:a5:22:
         83:1c:6d:92:48:70:da:9e:ed:25:07:93:22:93:5e:14:4f:78:
         8b:a3:02:64:42:49:78:90:6c:a7:6c:54:ca:64:0d:6b:46:89:
         8f:ac:45:d1:5b:b8:fe:c0:8b:cd:e0:c4:30:6b:56:1b:46:75:
         d8:51:3f:ca:3c:95:a2:89:82:68:91:64:c7:00:ec:41:10:1e:
         19:b2:c9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----