Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS56913.roa
File:                     AS56913.roa (raw, json)
Hash identifier:          qcS5VTTXjImELv0A5ulufTWlC+5bPF6QvTuMjJ1v4GE=
Subject key identifier:   20:B2:1F:E8:E2:2B:73:9F:11:DC:E4:16:7D:83:DE:7A:25:E0:54:21
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       0DE881151AFC584B4739CEB35AB5BCE21C3CEFC2
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS56913.roa
Signing time:             Wed 05 Jun 2024 08:59:07 +0000
ROA not before:           Wed 05 Jun 2024 08:54:07 +0000
ROA not after:            Wed 04 Jun 2025 08:59:07 +0000
asID:                     56913
IP address blocks:        23.95.134.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 05 Jul 2024 00:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e8:81:15:1a:fc:58:4b:47:39:ce:b3:5a:b5:bc:e2:1c:3c:ef:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun  5 08:54:07 2024 GMT
            Not After : Jun  4 08:59:07 2025 GMT
        Subject: CN=20B21FE8E22B739F11DCE4167D83DE7A25E05421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0d:4e:80:7f:20:b1:af:09:4b:26:fb:a7:e8:
                    3d:6e:13:8d:24:98:58:ed:1c:f6:9e:d2:cb:7e:96:
                    46:66:b4:1e:f0:2c:bf:57:c1:1c:63:50:5d:3b:73:
                    20:65:61:db:34:26:44:55:86:b5:b7:fc:76:f3:ca:
                    c2:a6:0a:62:11:25:25:69:54:2a:5d:e1:d9:8b:7e:
                    29:82:95:5e:27:da:bc:5f:96:09:7c:3e:bb:37:43:
                    f6:39:07:eb:7a:6e:ac:2a:cc:5a:13:36:95:71:25:
                    54:02:44:7c:7f:86:be:90:04:18:29:97:da:91:b0:
                    d1:f6:77:61:66:66:c3:44:48:4a:aa:f6:24:2c:72:
                    93:59:d9:23:e2:9c:71:8a:bf:3d:71:fe:6f:56:1c:
                    db:79:64:74:c4:52:88:74:99:34:fb:6d:47:56:cd:
                    06:cf:df:f3:c6:0e:a9:a3:12:be:7a:ab:c9:a2:cf:
                    d2:ab:e7:55:3e:7e:49:00:39:bc:ef:d9:47:6e:3a:
                    40:1b:07:28:00:17:58:62:19:59:8a:0f:da:31:84:
                    ae:e8:0f:c4:5a:07:6d:3f:e5:a3:c2:18:98:f0:d7:
                    1f:06:56:e2:9a:39:8b:ab:95:5d:72:6c:50:d7:2e:
                    ec:f7:8b:5f:c0:d7:c4:56:3b:16:ac:0c:fe:f4:1e:
                    e8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B2:1F:E8:E2:2B:73:9F:11:DC:E4:16:7D:83:DE:7A:25:E0:54:21
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS56913.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:44:65:19:ad:ff:15:b0:f4:56:4a:9f:f0:d3:f4:78:7c:ef:
         f1:4b:c0:4c:70:95:cf:84:fc:7b:b4:b2:bb:bd:d0:b7:25:d7:
         54:94:41:e5:84:5f:ed:ba:3b:a4:f2:49:fb:0d:85:4b:6b:92:
         42:f1:d1:0e:ac:17:91:1f:c3:df:d9:3d:9d:8f:3f:ef:af:f2:
         a9:40:22:18:94:91:11:65:ca:b5:c7:3d:88:30:1d:e6:f5:1b:
         75:51:fc:84:15:7c:29:f6:b5:42:7b:9b:44:b4:a2:e8:75:99:
         5f:c8:f6:5f:32:41:8b:05:1c:8a:a7:e2:26:58:bd:92:8f:77:
         69:39:89:4a:e7:d8:0a:d0:6a:44:54:d5:0a:52:d0:3c:79:9c:
         b0:df:63:51:f3:85:92:4d:f9:b2:08:c4:e2:e6:a4:5f:7c:38:
         75:7a:54:c2:34:5e:cb:fc:49:e6:07:3e:52:71:2d:65:dd:08:
         2e:bb:96:b2:65:16:2d:d1:a0:a1:f2:38:07:09:e3:c3:d3:36:
         e7:ae:25:7e:7a:c2:92:e0:1d:61:35:d1:9d:93:c7:d1:7e:69:
         a5:06:fc:8b:0f:4e:3f:80:5d:5f:51:08:1a:d2:1e:d5:31:16:
         61:60:f6:15:74:8b:c5:23:09:64:23:22:37:ed:94:0e:85:df:
         4b:d6:4e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----