Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS46844.roa
File:                     AS46844.roa (raw, json)
Hash identifier:          QHBgsXDStp/DSTDFd7etZJoiMl98o9fF7+PWg/cXLxc=
Subject key identifier:   C7:09:64:F2:1D:FD:5D:4C:3F:4B:5C:1F:81:68:79:3C:D4:D0:05:88
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       0E916BCE4693F5E268A3799B888E61C724488021
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS46844.roa
Signing time:             Sun 26 Nov 2023 00:00:04 +0000
ROA not before:           Sat 25 Nov 2023 23:55:04 +0000
ROA not after:            Sun 24 Nov 2024 00:00:04 +0000
asID:                     46844
IP address blocks:        64.50.173.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 24 Dec 2023 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:91:6b:ce:46:93:f5:e2:68:a3:79:9b:88:8e:61:c7:24:48:80:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 25 23:55:04 2023 GMT
            Not After : Nov 24 00:00:04 2024 GMT
        Subject: CN=C70964F21DFD5D4C3F4B5C1F8168793CD4D00588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c5:ba:97:b1:9a:ef:c7:92:16:a5:4f:4f:33:
                    68:72:f5:ef:9a:29:a1:2f:79:92:b2:40:95:8c:e4:
                    50:ca:3c:c0:c9:d6:ea:40:df:c8:da:4d:34:71:77:
                    70:76:b7:52:78:57:9f:26:0c:69:c2:1d:3c:2e:68:
                    c7:d7:49:dc:ad:98:1f:df:8c:dc:f4:b6:3f:fb:ab:
                    3c:96:a6:dd:cd:46:89:f4:97:29:2e:40:4c:65:a4:
                    d0:31:fd:c9:26:6a:6c:30:0c:97:8f:26:e6:8d:c3:
                    b6:ed:32:ac:e0:67:4a:90:33:ee:32:e0:d1:59:f3:
                    0c:38:91:fb:5e:d9:39:be:c3:78:37:83:9f:12:ac:
                    45:d3:d0:e6:02:43:06:c9:43:66:e8:69:a3:86:eb:
                    f3:7d:24:95:cf:32:34:b5:7f:6c:db:fa:47:69:5b:
                    b8:1e:05:d6:26:c6:67:b5:86:05:62:7b:be:06:27:
                    21:b1:aa:16:c2:e8:31:f6:f9:03:f5:7b:15:1f:07:
                    eb:51:15:50:24:14:68:66:4b:c8:f7:18:9c:2b:2f:
                    77:5b:ae:67:82:03:c7:33:02:86:69:c5:34:ef:fe:
                    6e:28:da:af:78:83:d8:7e:bd:9d:23:f4:9d:d5:71:
                    80:94:0d:f9:e4:74:77:45:45:45:3d:eb:6b:38:42:
                    55:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:09:64:F2:1D:FD:5D:4C:3F:4B:5C:1F:81:68:79:3C:D4:D0:05:88
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS46844.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:e7:b0:0e:3f:86:9a:f9:a1:be:47:13:d3:03:1f:39:58:d0:
         4e:5c:ca:9d:0c:fa:b1:b1:9a:04:6d:ad:9a:9c:eb:89:f2:0e:
         39:c8:30:02:ec:87:b5:ac:84:dc:d7:2a:3e:7f:f1:c1:b0:31:
         ea:a5:50:4e:dd:43:5a:fc:7f:e4:be:53:2f:3b:d7:24:ee:7b:
         7c:d1:ef:59:4a:c7:46:cd:f1:c4:17:ed:d3:2b:e0:e4:9d:6b:
         ee:70:0b:13:2d:1f:80:93:7e:87:a6:9a:e6:25:3f:cd:3f:a3:
         43:3e:1e:63:87:1d:ff:95:a4:b8:9d:90:5b:fb:67:c0:20:20:
         e5:dd:07:ac:96:fd:af:4b:a6:39:c1:8c:00:92:93:ca:40:d8:
         3f:77:d7:ee:64:7b:1a:90:b0:77:3c:88:49:a2:76:d6:d9:9a:
         ca:ed:b4:39:64:27:18:20:29:f6:5d:32:17:dc:4b:38:3b:b0:
         3b:9a:47:1a:0e:14:a6:c8:bd:c4:a8:25:3f:ca:f6:13:d8:2b:
         d4:c6:bf:83:53:81:7a:61:1b:7b:00:0c:7b:7e:64:da:46:b0:
         ff:0b:82:63:f2:1a:b3:99:37:65:de:ef:94:e0:dc:64:71:1d:
         fb:77:38:cf:b7:9f:b0:ab:32:31:5f:63:8b:87:a5:c8:28:ba:
         5c:09:49:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----