Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS22773.roa
File:                     AS22773.roa (raw, json)
Hash identifier:          DQGxHeqyVxZe+izQ1Al7LBnuTnT0i8uZh9+916bc4WU=
Subject key identifier:   2B:73:FF:A4:53:A3:AE:BF:D2:37:23:FB:B3:04:86:8B:7B:2B:E9:30
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       4FAF184A4EC7541F520FFD1640C9CE597A4440CA
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS22773.roa
Signing time:             Tue 08 Aug 2023 08:19:32 +0000
ROA not before:           Tue 08 Aug 2023 08:14:32 +0000
ROA not after:            Tue 06 Aug 2024 08:19:32 +0000
asID:                     22773
IP address blocks:        208.76.40.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Sep 2023 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:af:18:4a:4e:c7:54:1f:52:0f:fd:16:40:c9:ce:59:7a:44:40:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug  8 08:14:32 2023 GMT
            Not After : Aug  6 08:19:32 2024 GMT
        Subject: CN=2B73FFA453A3AEBFD23723FBB304868B7B2BE930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ae:e7:14:42:38:db:5c:72:6e:f5:6e:95:35:
                    6b:f7:47:83:db:e0:fe:ac:de:aa:68:f7:9c:3a:e0:
                    99:17:bb:7c:a2:c4:3e:c9:6d:43:43:ea:a6:87:c3:
                    61:93:01:ea:e0:4f:81:3a:b3:45:07:ae:13:5b:7f:
                    f2:76:b3:25:78:64:63:72:e3:a1:78:b5:a0:2f:4c:
                    09:0d:46:24:6e:87:c7:1a:00:36:39:9f:cc:3f:fd:
                    aa:e8:a2:74:bf:7a:55:4e:86:96:4e:86:ae:f8:0a:
                    95:50:70:26:3f:4f:b2:86:95:23:f3:bc:34:28:b7:
                    76:bf:90:83:31:b1:85:7a:11:f2:55:30:be:32:ed:
                    f0:a1:1a:77:63:f8:7a:41:ac:f9:1e:75:e4:ab:58:
                    76:db:5e:2a:ba:2e:ed:bf:da:b8:67:40:d1:b4:29:
                    3c:7b:5e:46:10:24:4d:05:c2:f5:e1:35:8f:09:a0:
                    f2:fc:8a:c9:ab:f2:4c:dd:53:61:45:e0:7d:3f:ba:
                    ff:10:df:97:1c:2d:15:61:6b:ce:dd:f7:83:8f:98:
                    97:0c:5e:5c:d9:af:d1:d1:ce:f8:d8:47:a0:f2:6b:
                    56:0d:7e:ea:fb:40:50:6c:08:06:2d:73:36:05:e5:
                    ae:31:b7:12:9b:68:d4:11:e8:8c:e4:06:bc:c6:d9:
                    74:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:73:FF:A4:53:A3:AE:BF:D2:37:23:FB:B3:04:86:8B:7B:2B:E9:30
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS22773.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:2e:fe:ca:cc:50:cb:8c:aa:60:33:38:c3:ba:ae:d9:e1:e1:
         ab:f3:ab:36:c9:3e:11:2c:8f:46:24:2d:ef:f1:3b:a8:31:52:
         3b:17:83:1e:f9:59:68:11:7a:fe:c7:e7:23:de:9c:34:d8:1f:
         10:5e:ec:7b:9b:08:1a:e0:80:4d:bb:f1:84:07:05:d0:38:70:
         92:ec:b1:76:e8:64:e7:03:67:d9:56:12:8a:f6:20:aa:f9:de:
         ec:c0:45:27:f0:e1:f1:25:eb:46:72:0a:a7:34:59:36:2a:f0:
         27:cd:74:16:2b:a2:54:56:91:4a:88:f8:a7:2f:d8:91:db:03:
         e6:0c:1b:20:73:35:86:c4:84:05:a6:16:9b:93:9d:1b:9d:d6:
         30:de:2b:b5:d0:3b:71:c5:cd:02:9a:0a:67:cc:eb:d9:54:70:
         ab:b5:14:4a:00:12:c5:b8:e0:7f:ad:1e:a4:7e:95:b7:1b:e1:
         7e:62:82:ec:fa:21:94:2f:86:ab:0b:87:d1:03:79:86:c2:d4:
         ba:1c:71:d4:0c:2e:7c:d9:26:71:38:fb:5a:08:11:fe:dc:96:
         56:52:2a:40:bd:5b:17:ae:07:0b:da:4f:d6:e5:0e:85:3e:50:
         2c:7a:e8:62:d4:01:88:32:a8:28:d7:85:27:92:9a:f3:eb:1f:
         75:8f:f9:82
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUT68YSk7HVB9SD/0WQMnOWXpEQMowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjMwODA4MDgxNDMyWhcNMjQwODA2MDgxOTMy
WjAzMTEwLwYDVQQDEygyQjczRkZBNDUzQTNBRUJGRDIzNzIzRkJCMzA0ODY4QjdC
MkJFOTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA367nFEI421xy
bvVulTVr90eD2+D+rN6qaPecOuCZF7t8osQ+yW1DQ+qmh8NhkwHq4E+BOrNFB64T
W3/ydrMleGRjcuOheLWgL0wJDUYkbofHGgA2OZ/MP/2q6KJ0v3pVToaWToau+AqV
UHAmP0+yhpUj87w0KLd2v5CDMbGFehHyVTC+Mu3woRp3Y/h6Qaz5HnXkq1h2214q
ui7tv9q4Z0DRtCk8e15GECRNBcL14TWPCaDy/IrJq/JM3VNhReB9P7r/EN+XHC0V
YWvO3feDj5iXDF5c2a/R0c742Eeg8mtWDX7q+0BQbAgGLXM2BeWuMbcSm2jUEeiM
5Aa8xtl0JQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFCtz/6RTo66/0jcj+7MEhot7
K+kwMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzIyNzczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EwoMA0GCSqGSIb3DQEBCwUAA4IB
AQC8Lv7KzFDLjKpgMzjDuq7Z4eGr86s2yT4RLI9GJC3v8TuoMVI7F4Me+VloEXr+
x+cj3pw02B8QXux7mwga4IBNu/GEBwXQOHCS7LF26GTnA2fZVhKK9iCq+d7swEUn
8OHxJetGcgqnNFk2KvAnzXQWK6JUVpFKiPinL9iR2wPmDBsgczWGxIQFphabk50b
ndYw3iu10Dtxxc0CmgpnzOvZVHCrtRRKABLFuOB/rR6kfpW3G+F+YoLs+iGUL4ar
C4fRA3mGwtS6HHHUDC582SZxOPtaCBH+3JZWUipAvVsXrgcL2k/W5Q6FPlAseuhi
1AGIMqgo14Unkprz6x91j/mC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org