Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS43641.roa
File:                     AS43641.roa (raw, json)
Hash identifier:          +q2JMCaslMPOZs4nB7txs+BI4uKaiQgeAN53PZ4LIio=
Subject key identifier:   1B:5C:ED:69:57:E6:09:64:E9:B3:66:43:8E:A9:9C:0C:36:A2:B4:26
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       3722B1ABA55B8F5F50C2492B87DF487EF67012FA
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS43641.roa
Signing time:             Wed 27 Sep 2023 15:38:52 +0000
ROA not before:           Wed 27 Sep 2023 15:33:52 +0000
ROA not after:            Wed 25 Sep 2024 15:38:52 +0000
asID:                     43641
IP address blocks:        209.200.226.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Oct 2023 10:58:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:22:b1:ab:a5:5b:8f:5f:50:c2:49:2b:87:df:48:7e:f6:70:12:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep 27 15:33:52 2023 GMT
            Not After : Sep 25 15:38:52 2024 GMT
        Subject: CN=1B5CED6957E60964E9B366438EA99C0C36A2B426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9b:1b:fe:79:c7:53:18:ea:84:b2:6d:f6:36:
                    15:d2:04:bf:43:49:8c:d2:36:51:cb:09:90:cc:15:
                    c9:d0:51:7b:d9:eb:bb:b5:20:66:3d:74:9c:c5:58:
                    e6:0e:b0:1a:3d:18:48:de:8b:f2:00:6e:75:9f:fc:
                    ae:4b:e3:b9:15:bc:41:b8:05:f6:89:5f:fa:6e:41:
                    d1:93:d8:cd:3f:02:5a:23:f1:82:4a:91:22:cf:23:
                    a6:30:a7:6a:7c:20:ee:46:4f:9b:23:c1:e0:66:3b:
                    bc:fe:02:38:b8:8b:fa:0a:c2:62:17:cf:f8:41:27:
                    26:48:5b:1a:26:d4:88:64:53:65:d1:d7:44:ef:c4:
                    89:3a:0c:f8:22:25:74:c6:ff:c2:63:dd:05:7d:7e:
                    fb:19:a7:5e:9d:13:8b:44:11:4d:b8:f5:5d:8d:41:
                    10:32:7e:0c:42:72:c4:bb:9d:13:63:5e:a0:46:aa:
                    b8:9d:96:91:41:f3:39:0a:d6:9d:ec:97:16:98:22:
                    c7:ca:61:37:f6:f4:61:30:ec:b9:e7:df:83:2e:2c:
                    e0:73:cf:82:88:39:94:0c:f6:2e:8a:3a:0d:6d:ea:
                    0b:1c:5b:20:3e:6f:b9:ac:b6:c9:65:b9:5f:c2:55:
                    a0:7f:e0:ab:00:09:97:1c:29:03:c3:fa:2c:4d:16:
                    0c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5C:ED:69:57:E6:09:64:E9:B3:66:43:8E:A9:9C:0C:36:A2:B4:26
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS43641.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:78:0a:9f:d6:12:da:0a:0b:4b:c3:70:66:86:e5:be:af:51:
         a5:5e:f5:5d:80:b3:21:bb:f1:54:06:34:70:ba:ec:c0:f3:20:
         a9:c0:44:6a:e4:d5:a0:c9:20:97:e5:23:28:0e:81:aa:6a:62:
         fe:8d:ae:69:03:1d:b9:27:ea:a0:40:97:70:5f:05:6d:2c:64:
         92:ac:f6:58:26:07:94:78:bf:09:f2:8c:91:e6:43:d1:6b:23:
         9b:b0:9a:16:4e:40:28:56:76:33:a1:83:68:20:18:91:da:8f:
         94:54:4d:c4:c3:34:ca:19:0b:73:9b:61:73:f6:fb:65:5b:30:
         f3:7a:a9:13:c1:0a:ea:91:6f:b2:d1:85:99:8a:b9:a0:40:d9:
         58:6c:d3:ea:c2:c1:85:69:de:e9:d3:f8:2e:57:82:e2:d3:e9:
         4a:f3:21:5f:3d:41:86:f3:a7:e0:ed:f2:7d:9d:0e:da:26:b6:
         07:d0:f7:e2:c4:2a:41:83:d6:ad:31:62:7e:a1:b2:eb:d0:f9:
         82:83:0c:76:3f:1c:ae:89:ac:2c:ce:02:77:c4:78:01:e5:05:
         56:b0:03:c3:5a:8f:0c:40:39:3c:91:3e:44:23:b2:02:5d:c5:
         44:da:aa:13:32:5b:0d:ab:ed:26:1c:32:a0:13:28:c5:0e:eb:
         f2:e4:ce:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----