Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401195.roa
File:                     AS401195.roa (raw, json)
Hash identifier:          5l02k6sgHcJPem3zmIPnBzMKG2Ug3oq9eGg4tb10m5A=
Subject key identifier:   D8:97:4F:90:2D:4D:73:A4:F2:EA:7B:00:C3:C6:21:13:92:12:9F:0D
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       3AFB657F1DB93954B027722EE7BCFD13B4F8B97C
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401195.roa
Signing time:             Sat 22 Jun 2024 07:00:47 +0000
ROA not before:           Sat 22 Jun 2024 06:55:47 +0000
ROA not after:            Sat 21 Jun 2025 07:00:47 +0000
asID:                     401195
IP address blocks:        23.94.88.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 25 Jun 2024 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:fb:65:7f:1d:b9:39:54:b0:27:72:2e:e7:bc:fd:13:b4:f8:b9:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun 22 06:55:47 2024 GMT
            Not After : Jun 21 07:00:47 2025 GMT
        Subject: CN=D8974F902D4D73A4F2EA7B00C3C6211392129F0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c6:47:fc:d0:5f:9e:3f:49:1d:05:38:5e:b8:
                    8f:c0:c1:67:28:ab:ff:d6:18:ed:6b:3c:6b:12:a0:
                    e9:b7:05:1f:7e:37:96:9f:d9:e3:6d:d5:00:83:72:
                    45:ef:bf:a6:fb:6f:36:de:14:25:aa:07:fd:18:31:
                    82:3f:3c:5d:84:f1:58:4b:d0:1e:8c:bc:32:59:f6:
                    2a:14:ca:70:8e:b9:77:93:96:2f:16:81:f2:d4:7b:
                    9b:ba:5c:8a:67:a3:98:d2:06:34:17:a6:85:da:8a:
                    0c:e8:a3:b5:97:a6:f5:bf:a9:13:b7:62:f4:72:b2:
                    b6:a9:7a:d1:ce:00:1e:5e:38:a9:8c:ea:a7:59:d1:
                    83:bb:8e:7d:89:47:a1:c3:7b:41:37:88:12:10:41:
                    da:a4:eb:55:59:44:11:6f:de:da:e3:a8:e5:a1:95:
                    f6:48:6b:5f:8d:2a:69:35:9e:fc:8d:14:1d:6c:37:
                    0b:ff:9a:6b:cf:7c:2b:5e:c3:18:fc:47:7b:ba:18:
                    66:f7:10:14:9b:83:e7:91:e1:8d:30:16:1f:a9:d9:
                    b6:fe:17:5a:4a:05:de:2f:b7:a4:07:64:f7:1f:72:
                    59:a2:28:84:fd:fe:e7:d6:69:e2:18:e0:f4:02:90:
                    82:ff:fd:87:a9:cd:da:08:a0:9b:72:67:49:ab:04:
                    41:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:97:4F:90:2D:4D:73:A4:F2:EA:7B:00:C3:C6:21:13:92:12:9F:0D
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401195.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:1a:0e:a6:80:c1:87:d6:ed:57:94:6d:bc:24:3c:ac:41:2b:
         ec:a4:53:93:d9:93:19:f7:44:29:22:0a:b5:c9:d4:54:6b:2c:
         c6:6a:26:48:6d:1d:ba:d5:e8:88:6b:6c:f2:0a:bf:68:1e:cc:
         40:1b:60:ff:52:cc:0e:c8:a6:01:86:f1:79:8d:2e:18:a0:59:
         0a:df:11:11:58:42:63:55:bc:f0:12:96:c8:34:6f:fb:05:66:
         4b:b8:63:30:7e:e8:2c:16:52:67:7f:75:30:60:40:bd:a1:09:
         db:6f:42:1e:ee:ea:4d:f7:99:ac:19:0c:86:16:01:2b:18:29:
         58:54:f0:6f:a0:c8:ac:40:91:39:7d:2c:05:6e:50:a8:e4:61:
         62:c6:d8:aa:b0:45:8a:69:33:33:53:c5:5a:48:c1:22:d6:f9:
         dc:03:9f:89:94:7c:db:47:dc:df:a2:dd:2e:ad:fb:a1:e0:68:
         00:13:09:45:0c:d9:80:28:39:69:08:dd:9f:be:1e:ce:ec:cf:
         ff:df:51:67:ba:b2:09:df:24:9a:70:87:58:7f:ec:02:e7:e7:
         3e:40:b9:77:0d:95:14:0b:12:b8:5e:07:2f:fe:63:25:a2:59:
         81:d0:27:1e:72:89:19:f9:72:81:d9:27:be:1a:78:e2:e2:0d:
         fb:fd:50:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----