Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS32526.roa
File:                     AS32526.roa (raw, json)
Hash identifier:          voWGNDXsPR7Ym9c7KnMsOJyGY1kNNlqv0KIO8qYKH40=
Subject key identifier:   3A:C6:06:31:BB:C2:9D:8E:FF:DB:13:B1:6C:30:58:F4:77:9C:F6:23
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7B84B1A46390784C6F9C6699E8F334AACFACFF21
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS32526.roa
Signing time:             Sun 26 May 2024 14:50:30 +0000
ROA not before:           Sun 26 May 2024 14:45:30 +0000
ROA not after:            Sun 25 May 2025 14:50:30 +0000
asID:                     32526
IP address blocks:        23.94.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 11 Jun 2024 15:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:84:b1:a4:63:90:78:4c:6f:9c:66:99:e8:f3:34:aa:cf:ac:ff:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May 26 14:45:30 2024 GMT
            Not After : May 25 14:50:30 2025 GMT
        Subject: CN=3AC60631BBC29D8EFFDB13B16C3058F4779CF623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b6:6f:a7:87:b0:eb:fc:8d:ab:d7:ce:08:b7:
                    7e:55:53:55:9f:f5:8c:86:57:b6:be:3b:71:bd:1c:
                    8f:7b:8b:c0:93:6f:0a:82:8f:bb:96:aa:67:c0:85:
                    22:ac:9a:da:18:12:c5:d3:81:f1:6a:0a:37:67:96:
                    c3:b5:e5:f8:a6:dd:e7:f8:70:4f:07:03:fe:1b:ee:
                    eb:51:75:50:b1:29:1e:e3:c7:8b:90:31:9f:ac:00:
                    5a:7c:b4:2f:47:24:d9:79:9f:14:b7:b2:3c:0f:7d:
                    0f:3a:d4:f2:f6:5d:35:e6:f8:b1:2b:62:e8:45:27:
                    07:90:4a:6a:10:a2:89:b3:a0:7f:68:78:db:a7:4d:
                    d0:61:88:19:36:82:77:c7:1e:b7:75:da:75:4b:5b:
                    e4:b1:9e:73:6d:e1:07:ce:23:7d:a5:93:96:82:1c:
                    59:4e:1e:9c:58:88:56:91:8f:95:f8:38:09:b5:d9:
                    94:42:f5:70:9c:c0:ac:21:15:88:a9:4b:10:8c:05:
                    2b:48:6a:3c:80:8a:d3:c2:36:76:8c:96:1b:c1:35:
                    dc:cd:43:0f:45:6c:03:b1:ea:4e:1d:9c:e7:15:0f:
                    e4:72:53:27:aa:9d:1e:7a:f0:f7:13:6c:3b:1a:00:
                    0b:05:69:e7:db:05:e5:af:d2:d5:30:a1:7a:5f:e0:
                    14:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C6:06:31:BB:C2:9D:8E:FF:DB:13:B1:6C:30:58:F4:77:9C:F6:23
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS32526.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:9b:13:20:ad:42:e6:13:01:d9:a4:d3:9a:f4:80:84:a9:73:
         86:e1:42:8a:1f:54:d1:79:e8:c2:5b:79:64:16:ca:b0:2e:11:
         92:a3:fc:22:e6:ee:3a:3f:94:e9:e4:f1:c1:45:43:4a:b8:5d:
         15:51:f4:2e:3b:6a:24:15:cd:23:d7:60:93:27:41:7a:de:0b:
         eb:6b:3c:cd:69:36:c2:34:fb:3d:b0:bc:bb:3d:37:0e:56:3e:
         70:9e:93:77:6e:6c:81:81:6b:25:96:bf:a6:59:38:37:84:71:
         ba:b0:17:b8:d4:29:b5:64:3d:f7:11:be:a8:1e:24:6c:5b:2a:
         79:de:a5:29:39:07:ae:00:ff:01:fb:9c:cc:5e:44:6f:50:39:
         88:ca:aa:2f:29:15:3d:bb:b2:44:48:97:cb:2d:0d:53:c7:ba:
         13:eb:e5:0f:2a:35:50:08:a1:d9:e7:ea:d7:4e:1d:8f:06:11:
         7e:24:78:22:e6:76:e1:50:68:29:a7:e7:6b:29:0f:43:4f:6f:
         56:cc:8c:a0:0f:f9:a7:d7:63:2f:fb:7c:7c:a2:e0:e8:34:99:
         2d:86:d9:e1:e5:c8:5f:26:4b:b4:25:73:16:4d:ab:e5:b3:0b:
         52:16:c4:f0:fd:35:0d:ab:82:0a:6c:a6:cb:14:3a:c9:e7:60:
         14:a8:f6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----