Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS18779.roa
File:                     AS18779.roa (raw, json)
Hash identifier:          yprTts5933Y6AXUnSqLHtuuFNq7300QIcuyejKrxFmg=
Subject key identifier:   6F:28:8C:22:EB:57:93:70:08:5D:E3:E6:8A:85:F5:73:7B:2F:13:5E
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       0A41FE9CFEA1445EFCEEAF8FABC851298805819E
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS18779.roa
Signing time:             Wed 14 Feb 2024 20:55:27 +0000
ROA not before:           Wed 14 Feb 2024 20:50:27 +0000
ROA not after:            Wed 12 Feb 2025 20:55:27 +0000
asID:                     18779
IP address blocks:        23.142.96.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 14 Mar 2024 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:41:fe:9c:fe:a1:44:5e:fc:ee:af:8f:ab:c8:51:29:88:05:81:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Feb 14 20:50:27 2024 GMT
            Not After : Feb 12 20:55:27 2025 GMT
        Subject: CN=6F288C22EB579370085DE3E68A85F5737B2F135E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:f1:7e:04:f4:c0:82:4f:1f:f8:e7:56:e8:
                    3f:8e:80:f9:07:59:fc:00:05:14:ad:9c:df:d5:ad:
                    e1:08:59:7e:66:9a:18:09:60:3e:39:c1:9c:2a:a8:
                    45:8a:6d:f4:80:60:3a:4a:9a:61:ce:69:55:30:81:
                    c3:33:6c:45:05:cd:30:a8:e6:43:b6:46:5e:d3:14:
                    ad:9f:19:74:77:4e:4e:3c:ba:d5:a8:0a:f7:c3:f0:
                    c1:22:8f:39:b2:74:eb:bf:68:86:1b:cc:35:29:03:
                    a8:4f:7e:fd:9e:22:b3:ac:e4:60:60:17:d1:12:56:
                    34:f3:92:50:63:a6:bc:09:2f:8f:59:4e:b5:5f:83:
                    41:70:57:d9:8e:61:6e:87:36:86:51:91:ba:a2:33:
                    b1:69:fe:b7:b3:fc:75:97:ee:0a:dd:69:45:fc:fe:
                    84:6a:82:69:6c:25:b9:a4:67:08:1a:89:c2:d0:c9:
                    e0:34:85:44:2a:51:77:dd:f7:b8:30:83:f9:b7:b4:
                    63:8f:ef:33:b6:99:64:fe:0f:0a:0d:8d:10:41:d8:
                    19:f0:3b:4f:80:c1:8a:ba:c4:99:59:ae:f5:93:01:
                    87:f2:04:f6:10:ef:f7:c0:df:3b:90:a1:92:b8:9b:
                    74:4c:d2:59:80:94:88:42:6f:71:87:85:f5:be:70:
                    a8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:28:8C:22:EB:57:93:70:08:5D:E3:E6:8A:85:F5:73:7B:2F:13:5E
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS18779.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:23:62:db:4d:03:43:1a:04:16:ae:81:ec:59:e5:81:ee:a7:
         d7:e7:ce:aa:d4:37:43:ba:e3:98:aa:7a:df:dc:9f:05:66:09:
         45:65:10:0d:dc:30:22:a2:31:0b:bb:e8:18:1c:c1:3f:23:0b:
         d8:33:3c:be:14:17:b6:84:ad:49:12:b9:f4:fd:94:fc:76:5e:
         e6:f3:94:8d:8e:77:fd:a2:54:b9:42:6e:71:e3:0b:17:6b:bf:
         3d:b8:a5:f8:8a:41:35:e2:59:8b:a4:18:2d:35:88:11:18:fc:
         34:6b:37:c9:d8:3a:f9:90:01:3f:8d:4b:83:82:ce:ae:68:10:
         2b:4f:93:3d:bb:44:e1:a7:6e:81:5a:77:2a:29:c2:b8:b9:dc:
         1a:bc:f3:dd:84:40:2c:48:ac:6e:35:01:1c:0f:26:5d:74:f1:
         04:2c:81:bb:3e:b3:e7:aa:ed:99:2a:49:0c:ab:79:1e:9b:03:
         3c:e2:24:89:5c:7c:33:b2:29:0a:b5:76:bf:4e:4b:56:b3:85:
         b7:ba:b0:40:0e:7f:a9:73:86:9d:f9:f7:3d:25:af:92:d2:6f:
         59:7b:43:15:73:35:b8:3f:77:48:ba:80:c9:7b:95:69:f9:64:
         cc:30:53:fd:1b:7f:73:e5:f8:d8:c7:b0:23:82:47:5e:7d:76:
         86:fa:78:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----