Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS43260.roa
File:                     AS43260.roa (raw, json)
Hash identifier:          h3e5I/ei5aGB2RilhXsPlsbspJ+wrRT48+SSIRBK88M=
Subject key identifier:   D2:3E:E2:FE:E7:23:FA:A2:16:9D:81:96:56:27:32:F3:5D:0B:46:15
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1AE49679033CC929F6A25660EBDEBD793808894C
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS43260.roa
Signing time:             Wed 12 Apr 2023 14:54:34 +0000
ROA not before:           Wed 12 Apr 2023 14:49:34 +0000
ROA not after:            Wed 10 Apr 2024 14:54:34 +0000
asID:                     43260
IP address blocks:        208.76.40.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e4:96:79:03:3c:c9:29:f6:a2:56:60:eb:de:bd:79:38:08:89:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr 12 14:49:34 2023 GMT
            Not After : Apr 10 14:54:34 2024 GMT
        Subject: CN=D23EE2FEE723FAA2169D8196562732F35D0B4615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:79:cc:47:a0:56:a0:cc:b9:37:dc:a2:4f:6d:
                    d9:a6:58:2d:56:01:09:a9:c5:c8:36:6d:a7:e7:13:
                    ea:f7:41:d4:5f:e1:f9:cb:65:e0:d1:06:96:95:9d:
                    7c:37:63:59:c3:ab:7c:d4:9e:18:24:8a:04:f8:20:
                    85:ef:60:70:59:b2:89:ab:12:fc:1e:a5:8c:ab:b5:
                    b7:b5:b9:42:7a:82:7f:27:f3:7b:e2:39:5b:b7:06:
                    af:31:f4:3b:ef:33:4b:d0:78:c1:bf:4c:c7:17:70:
                    11:49:41:37:0a:ef:b4:98:33:90:dd:7d:9b:5a:d6:
                    1a:35:7e:a1:96:57:6e:ec:6d:2a:ac:3c:63:49:b1:
                    03:2b:85:54:2c:09:8c:43:c9:8e:cd:08:ae:4e:c2:
                    33:89:56:f1:be:a4:ec:78:17:6b:2f:6c:1a:1a:d5:
                    d7:9e:f1:07:c4:58:08:37:4b:4c:5b:83:3c:6c:6e:
                    2f:6c:55:4f:96:0e:1e:74:bc:a9:2c:91:df:f2:e1:
                    98:c2:d8:64:88:2a:d0:52:32:53:d1:53:57:f3:df:
                    8d:87:d5:2e:0c:90:19:25:58:3c:aa:95:c0:f0:c4:
                    ca:f7:88:01:bb:7f:bf:7c:b9:6e:78:c7:05:a0:58:
                    53:cb:15:57:76:c3:91:e7:92:7c:ef:ac:5b:85:34:
                    bd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3E:E2:FE:E7:23:FA:A2:16:9D:81:96:56:27:32:F3:5D:0B:46:15
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS43260.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:10:c6:1e:13:c7:92:00:5a:f6:14:e9:a3:2b:02:e0:8b:d9:
         37:23:41:b3:6c:85:32:86:fe:46:13:d6:68:eb:22:7c:f7:fe:
         98:83:fc:f5:c2:e1:19:52:3c:26:2d:a3:ef:f0:b1:aa:ff:65:
         fc:c7:c4:1f:ff:b6:ff:de:9e:76:6a:59:28:51:ae:81:b7:5d:
         5b:24:8a:59:97:a1:c1:db:94:e0:55:fe:3e:19:8a:ec:00:ec:
         a7:77:0c:a0:47:1d:ca:49:f1:ed:9d:7b:09:14:e3:a0:47:d5:
         2d:02:2c:57:bd:98:8a:df:bc:49:36:41:55:13:2f:d7:99:ba:
         d8:9f:b7:cb:2b:df:bf:bb:13:bb:48:d3:71:84:fc:17:7e:eb:
         7a:04:1a:de:fb:9a:61:38:71:ca:3e:4e:10:51:ca:8c:1d:63:
         59:2e:40:b9:fe:51:24:29:3d:25:a9:03:14:3a:07:bc:56:48:
         f8:74:76:24:90:2c:a8:e4:8c:92:ad:b8:ac:bc:8c:74:2c:e3:
         50:57:98:26:32:a4:76:06:f0:5f:4c:47:da:a4:60:a9:6b:c8:
         bc:99:96:7b:36:d0:14:62:79:5e:1e:2e:9a:1a:d6:6d:0c:2c:
         b3:f5:3e:db:c9:63:a7:1e:76:d4:c2:17:ee:69:53:2f:53:68:
         86:c1:89:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----