Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20057.roa
File:                     AS20057.roa (raw, json)
Hash identifier:          alR9Wgf80NhT3Joeiq05JLcfKGtzz8cV1LGDlRrx9P8=
Subject key identifier:   6B:70:69:A0:61:C0:6C:B8:D3:05:C2:FD:C4:B8:C6:06:E8:4A:0E:C4
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       0C36986E014CCB58DF1A6E2751B5DD9B5E3194EC
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20057.roa
Signing time:             Thu 19 Sep 2024 06:29:58 +0000
ROA not before:           Thu 19 Sep 2024 06:24:58 +0000
ROA not after:            Thu 18 Sep 2025 06:29:58 +0000
asID:                     20057
IP address blocks:        23.95.161.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 10 Oct 2024 00:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:36:98:6e:01:4c:cb:58:df:1a:6e:27:51:b5:dd:9b:5e:31:94:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep 19 06:24:58 2024 GMT
            Not After : Sep 18 06:29:58 2025 GMT
        Subject: CN=6B7069A061C06CB8D305C2FDC4B8C606E84A0EC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:34:cc:16:bc:58:24:b7:b6:f7:c3:9f:84:86:
                    aa:2d:eb:ce:f5:7d:57:f3:f7:dd:88:78:4e:fe:af:
                    6b:2b:d3:51:5f:00:17:dc:6c:92:3c:e0:a3:15:22:
                    18:fd:5f:44:4f:d4:ae:0a:77:9a:ef:fc:69:3f:3d:
                    8c:b7:e6:c7:cb:b3:db:74:17:96:0a:f5:88:d7:d3:
                    c2:8b:3e:e3:e8:84:2f:80:99:94:ea:22:9d:64:38:
                    0c:bb:b2:e6:cc:55:80:34:46:e9:bf:af:a6:f0:da:
                    8c:8a:20:32:e7:36:7b:2c:56:b0:c6:1c:e0:07:35:
                    3c:2f:46:4c:4f:45:0c:0e:94:81:a3:ae:b1:a8:cd:
                    ee:35:de:f0:e2:e8:fd:87:cf:a0:6b:26:49:95:1f:
                    ad:e2:54:30:5a:d6:6a:ae:55:58:43:e8:46:ca:6e:
                    47:83:83:85:92:6a:14:97:8a:5e:66:1e:d0:4d:8a:
                    cb:1c:f5:77:a7:17:08:1b:e7:c5:bf:8b:8e:de:86:
                    ba:23:71:ff:ed:3c:6b:27:61:69:81:b8:0d:e0:3f:
                    4a:74:88:c2:42:6a:6d:4d:06:d6:58:33:66:43:46:
                    82:2c:93:b5:a3:f0:b5:93:e7:5b:ce:34:de:0d:f1:
                    1a:75:58:0d:1a:3b:65:68:e6:85:b4:b5:e6:8b:9a:
                    1e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:70:69:A0:61:C0:6C:B8:D3:05:C2:FD:C4:B8:C6:06:E8:4A:0E:C4
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20057.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:1c:d6:29:73:c9:6d:bf:c6:5b:3a:48:63:ae:1b:8a:97:d2:
         56:a3:1d:32:3a:f4:8f:44:40:4a:13:14:27:75:5f:4b:7b:36:
         5f:f8:b6:f9:96:3c:62:78:24:40:c6:f9:2c:2b:fb:85:51:67:
         6c:ff:80:d4:d8:66:f5:ef:7b:d6:06:ac:95:74:27:bd:2a:a5:
         ef:3a:ef:a2:3f:a8:c9:25:73:8a:55:6e:5d:35:d7:4b:bc:47:
         a8:81:10:41:13:66:33:71:a8:96:2f:17:c1:37:75:6e:fb:93:
         f9:b1:16:0c:53:21:a2:21:de:b8:c1:72:7b:cb:ff:c0:c7:d8:
         62:89:2d:10:e2:58:c3:b3:b8:7e:bb:a0:f9:56:c0:8d:e7:9f:
         c5:1a:75:04:6a:bc:3a:8c:16:61:c8:32:ab:f0:e0:34:01:6b:
         30:c6:8a:ad:aa:5f:a1:f9:9a:7f:43:a6:b5:31:39:3c:ea:35:
         c9:aa:28:13:fd:00:cb:d2:c4:85:f0:d5:8a:76:3e:21:bc:6d:
         57:a5:95:53:a8:ba:aa:f7:ee:70:ef:b7:57:d4:7d:22:ac:d2:
         1e:08:1b:26:e2:ce:1d:d9:44:49:39:84:17:5e:4d:99:b2:92:
         f7:56:06:32:c8:fc:dc:60:90:4a:de:1d:cb:82:d4:bf:dc:ec:
         63:cc:06:14
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUDDaYbgFMy1jfGm4nUbXdm14xlOwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjQwOTE5MDYyNDU4WhcNMjUwOTE4MDYyOTU4
WjAzMTEwLwYDVQQDEyg2QjcwNjlBMDYxQzA2Q0I4RDMwNUMyRkRDNEI4QzYwNkU4
NEEwRUM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTTMFrxYJLe2
98OfhIaqLevO9X1X8/fdiHhO/q9rK9NRXwAX3GySPOCjFSIY/V9ET9SuCnea7/xp
Pz2Mt+bHy7PbdBeWCvWI19PCiz7j6IQvgJmU6iKdZDgMu7LmzFWANEbpv6+m8NqM
iiAy5zZ7LFawxhzgBzU8L0ZMT0UMDpSBo66xqM3uNd7w4uj9h8+gayZJlR+t4lQw
WtZqrlVYQ+hGym5Hg4OFkmoUl4peZh7QTYrLHPV3pxcIG+fFv4uO3oa6I3H/7Txr
J2FpgbgN4D9KdIjCQmptTQbWWDNmQ0aCLJO1o/C1k+dbzjTeDfEadVgNGjtlaOaF
tLXmi5oeMQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFGtwaaBhwGy40wXC/cS4xgbo
Sg7EMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzIwMDU3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1+hMA0GCSqGSIb3DQEBCwUAA4IB
AQBKHNYpc8ltv8ZbOkhjrhuKl9JWox0yOvSPREBKExQndV9LezZf+Lb5ljxieCRA
xvksK/uFUWds/4DU2Gb173vWBqyVdCe9KqXvOu+iP6jJJXOKVW5dNddLvEeogRBB
E2YzcaiWLxfBN3Vu+5P5sRYMUyGiId64wXJ7y//Ax9hiiS0Q4ljDs7h+u6D5VsCN
55/FGnUEarw6jBZhyDKr8OA0AWswxoqtql+h+Zp/Q6a1MTk86jXJqigT/QDL0sSF
8NWKdj4hvG1XpZVTqLqq9+5w77dX1H0irNIeCBsm4s4d2URJOYQXXk2ZspL3VgYy
yPzcYJBK3h3LgtS/3OxjzAYU
-----END CERTIFICATE-----