Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40156.roa
File:                     AS40156.roa (raw, json)
Hash identifier:          AtT8JztDEePPhdyRgGFIAv1mzALdDqsr21XBM/rsT2c=
Subject key identifier:   01:73:1A:A0:B3:1E:80:1F:9D:02:11:B9:41:C8:6D:59:09:82:C4:A0
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       320B523B930A21A97A9A2FF39CACFAE07E235420
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40156.roa
Signing time:             Tue 01 Oct 2024 21:58:24 +0000
ROA not before:           Tue 01 Oct 2024 21:53:24 +0000
ROA not after:            Tue 30 Sep 2025 21:58:24 +0000
asID:                     40156
IP address blocks:        23.95.45.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 04 Oct 2024 08:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:0b:52:3b:93:0a:21:a9:7a:9a:2f:f3:9c:ac:fa:e0:7e:23:54:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Oct  1 21:53:24 2024 GMT
            Not After : Sep 30 21:58:24 2025 GMT
        Subject: CN=01731AA0B31E801F9D0211B941C86D590982C4A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d4:ff:bf:9b:09:69:3e:b2:6b:e6:76:2e:65:
                    65:d2:e3:a0:8f:ee:e1:cb:be:6d:bf:e2:11:2c:b5:
                    14:ff:73:be:92:5f:43:52:54:7e:f7:04:0b:35:fa:
                    7b:73:1e:fb:51:93:cc:13:9e:5c:0d:04:e9:07:86:
                    32:e0:84:72:1f:ad:70:10:08:b9:e0:7c:c5:c1:ef:
                    cd:50:15:ba:6d:39:9e:d2:e5:c7:5a:84:93:a7:5e:
                    b7:28:f0:b8:b4:ea:f0:ea:0d:a1:35:9a:70:43:5a:
                    a5:d6:b0:6a:92:48:62:a8:20:5f:29:a9:fd:e8:25:
                    01:ed:14:b2:5e:dc:55:09:e6:5c:20:4b:6d:df:61:
                    bb:08:80:cd:72:20:98:f0:8e:8a:c0:5d:bf:da:ab:
                    d0:8e:12:28:25:3d:7d:27:68:ee:7b:a2:e1:7b:fe:
                    2c:b9:38:6a:af:38:fe:81:e1:7a:c2:de:98:52:8b:
                    a4:4d:af:50:9b:8d:33:ed:bc:f7:d3:1a:a2:d6:19:
                    52:b3:15:15:67:2c:90:1f:28:a0:04:3f:11:04:86:
                    e0:ec:17:20:00:95:1a:0b:f6:46:40:f8:ef:f8:1f:
                    de:50:5d:5b:7c:3e:7c:bf:8f:e0:d8:ee:16:79:dd:
                    96:53:39:f4:94:f3:62:24:5f:5b:df:3c:8a:36:3a:
                    f6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:73:1A:A0:B3:1E:80:1F:9D:02:11:B9:41:C8:6D:59:09:82:C4:A0
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40156.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:57:67:de:51:39:15:cd:04:36:07:7f:45:bd:c7:74:4a:76:
         99:4c:ce:c1:08:d5:79:29:ab:72:57:9b:e5:77:85:1e:c9:86:
         9d:2d:a6:3a:9c:56:89:bc:06:0e:5a:b6:25:e6:79:94:31:57:
         61:fb:80:df:83:a4:83:1e:33:4b:6d:74:d1:04:d0:1c:73:55:
         68:76:4a:ca:8b:60:d2:17:31:05:ec:34:3a:80:76:b1:fc:13:
         5c:39:28:aa:45:82:aa:f6:5a:37:8f:98:cf:31:50:ea:dd:13:
         b8:1f:84:42:35:d1:26:72:35:7e:49:d5:6c:c1:6c:c7:b4:a1:
         75:23:08:88:ae:db:67:ae:93:7c:fc:27:c7:50:04:78:9e:fa:
         57:bc:1d:a2:03:3b:df:c1:50:5a:d1:38:68:ed:88:e3:3b:fc:
         00:5b:ea:3c:6d:9f:f0:e7:3a:26:8c:61:10:65:73:6f:b6:8f:
         c6:2c:75:7b:2b:92:d4:b8:f6:ef:59:20:46:22:8c:45:78:98:
         c3:79:f4:92:7d:4b:7d:1b:5a:99:01:38:a8:e1:82:5d:51:33:
         48:a0:07:93:e9:55:dc:cf:97:8a:64:06:79:fc:47:da:cf:a8:
         10:81:2a:57:9a:6d:64:ac:9d:ba:da:8e:2a:fd:36:64:fe:c1:
         80:6c:7d:30
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUMgtSO5MKIal6mi/znKz64H4jVCAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjQxMDAxMjE1MzI0WhcNMjUwOTMwMjE1ODI0
WjAzMTEwLwYDVQQDEygwMTczMUFBMEIzMUU4MDFGOUQwMjExQjk0MUM4NkQ1OTA5
ODJDNEEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtT/v5sJaT6y
a+Z2LmVl0uOgj+7hy75tv+IRLLUU/3O+kl9DUlR+9wQLNfp7cx77UZPME55cDQTp
B4Yy4IRyH61wEAi54HzFwe/NUBW6bTme0uXHWoSTp163KPC4tOrw6g2hNZpwQ1ql
1rBqkkhiqCBfKan96CUB7RSyXtxVCeZcIEtt32G7CIDNciCY8I6KwF2/2qvQjhIo
JT19J2jue6Lhe/4suThqrzj+geF6wt6YUoukTa9Qm40z7bz30xqi1hlSsxUVZyyQ
HyigBD8RBIbg7BcgAJUaC/ZGQPjv+B/eUF1bfD58v4/g2O4Wed2WUzn0lPNiJF9b
3zyKNjr2gwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFAFzGqCzHoAfnQIRuUHIbVkJ
gsSgMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzQwMTU2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF18tMA0GCSqGSIb3DQEBCwUAA4IB
AQByV2feUTkVzQQ2B39Fvcd0SnaZTM7BCNV5KatyV5vld4UeyYadLaY6nFaJvAYO
WrYl5nmUMVdh+4Dfg6SDHjNLbXTRBNAcc1VodkrKi2DSFzEF7DQ6gHax/BNcOSiq
RYKq9lo3j5jPMVDq3RO4H4RCNdEmcjV+SdVswWzHtKF1IwiIrttnrpN8/CfHUAR4
nvpXvB2iAzvfwVBa0Tho7YjjO/wAW+o8bZ/w5zomjGEQZXNvto/GLHV7K5LUuPbv
WSBGIoxFeJjDefSSfUt9G1qZATio4YJdUTNIoAeT6VXcz5eKZAZ5/Efaz6gQgSpX
mm1krJ262o4q/TZk/sGAbH0w
-----END CERTIFICATE-----