Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS18779.roa
File:                     AS18779.roa (raw, json)
Hash identifier:          AVdjyiCcByGIhwd075xAVdfV3GFGWdwmEPwiUDXcMy8=
Subject key identifier:   85:D7:2F:73:6F:05:84:D7:EA:68:5A:FF:BC:1C:D0:EF:98:E6:F9:62
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       562731CA1AA951B7CA0B61C6D262C24FDA261978
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS18779.roa
Signing time:             Wed 13 Mar 2024 00:00:15 +0000
ROA not before:           Tue 12 Mar 2024 23:55:15 +0000
ROA not after:            Wed 12 Mar 2025 00:00:15 +0000
asID:                     18779
IP address blocks:        192.228.122.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 19 Jun 2024 00:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:27:31:ca:1a:a9:51:b7:ca:0b:61:c6:d2:62:c2:4f:da:26:19:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar 12 23:55:15 2024 GMT
            Not After : Mar 12 00:00:15 2025 GMT
        Subject: CN=85D72F736F0584D7EA685AFFBC1CD0EF98E6F962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9d:31:d6:c1:bd:d9:9c:41:83:ec:3e:19:d8:
                    01:e2:34:ea:ec:68:66:7d:84:c9:3a:fb:f7:0f:02:
                    66:51:76:3b:96:8c:24:cb:13:92:ee:a4:85:57:ff:
                    3a:ef:0d:8b:fc:78:22:57:cc:e1:15:1c:18:d3:99:
                    de:fa:96:6d:e6:1d:fb:47:1b:5b:7d:b9:d3:c5:59:
                    ad:07:9d:3b:2b:20:08:a7:d1:8f:45:15:05:11:30:
                    7c:39:24:4f:a3:ee:04:74:b2:38:5b:60:05:2a:ab:
                    d4:08:79:c6:a2:94:8c:c3:9e:5c:f0:44:83:a5:ec:
                    ba:39:49:d0:ae:12:bc:4a:3d:b4:97:00:6f:36:86:
                    56:a9:8c:9e:27:48:f6:e9:cc:fd:ed:95:ac:bb:c5:
                    78:9d:dd:e9:41:da:86:eb:34:bd:94:81:b6:41:ec:
                    cd:0e:7f:78:db:f6:38:3a:19:db:13:6a:e6:83:76:
                    f1:72:77:a6:88:60:ac:35:13:65:48:2a:78:7c:18:
                    ea:bb:23:fe:ce:a8:f1:77:2c:6d:ba:49:bc:77:f0:
                    eb:37:ea:fd:ad:94:6f:d8:e9:f7:e0:26:48:47:f8:
                    b6:65:67:a2:85:56:b4:9b:b9:52:43:61:0c:29:09:
                    ed:f6:1e:35:48:ba:c7:c0:42:b4:c2:64:f1:e4:da:
                    0a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D7:2F:73:6F:05:84:D7:EA:68:5A:FF:BC:1C:D0:EF:98:E6:F9:62
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS18779.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:6e:a7:6b:0e:ea:7f:8d:aa:0f:f2:65:7b:ce:d9:42:b6:5b:
         6a:d2:30:fb:26:3d:0b:0b:50:e7:2c:9a:34:22:24:b2:89:77:
         7e:df:27:ec:70:72:ee:1e:ae:07:0d:b9:64:f6:7b:3a:f2:5b:
         64:1d:90:d1:24:42:8a:7f:c8:75:d2:56:8e:e1:5e:4b:05:01:
         bc:6a:66:4c:a3:ba:82:e7:96:05:57:f1:4e:55:f5:83:aa:52:
         76:43:05:2a:99:41:69:f9:ae:ae:02:50:0d:dc:fe:b5:e0:0a:
         2f:3e:c1:ad:64:d1:72:74:d1:1c:ab:75:b9:29:9d:6d:91:01:
         ee:dc:49:8d:31:e3:f3:34:dc:78:3f:32:0a:97:df:79:1b:1e:
         b6:2c:e2:9d:dd:4d:10:bb:73:c5:88:b8:f7:68:c8:07:bb:b8:
         da:f7:e8:d6:d7:e9:77:e2:7c:19:dc:ba:81:36:64:72:b0:9e:
         f2:08:29:d2:6e:da:df:47:e5:c3:cb:cf:89:45:74:31:49:36:
         06:1e:8d:bc:64:b5:b8:d6:42:19:29:59:d6:ce:37:4c:98:80:
         ee:c6:a4:ff:10:1f:08:47:bb:9c:28:47:55:48:81:98:e6:92:
         73:12:95:a0:bd:a8:a5:ed:d7:e1:f4:23:83:15:20:6e:49:01:
         3e:5e:b0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----