Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS57043.roa
File:                     AS57043.roa (raw, json)
Hash identifier:          H7ftIBDSGn1PkOOe7nJ6jxsmEOy/1pr0g1YotYcGzgs=
Subject key identifier:   0C:C3:99:BC:B3:9B:88:6C:27:C6:0D:70:A4:63:9A:9A:A8:9B:B1:47
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       4A19BCFE0674AE7C1C32D6E7505863AE52C4E0E2
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS57043.roa
Signing time:             Sat 17 Aug 2024 13:07:01 +0000
ROA not before:           Sat 17 Aug 2024 13:02:01 +0000
ROA not after:            Sat 16 Aug 2025 13:07:01 +0000
asID:                     57043
IP address blocks:        23.94.132.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 00:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:19:bc:fe:06:74:ae:7c:1c:32:d6:e7:50:58:63:ae:52:c4:e0:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug 17 13:02:01 2024 GMT
            Not After : Aug 16 13:07:01 2025 GMT
        Subject: CN=0CC399BCB39B886C27C60D70A4639A9AA89BB147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d5:87:9a:a7:a6:fb:e3:99:31:90:6d:63:cf:
                    f8:73:26:1c:a9:3d:cc:3c:db:05:cd:ed:32:c9:f8:
                    74:0e:40:5d:49:74:98:10:5e:0b:6c:4b:00:af:76:
                    fb:3c:b0:3a:2b:d4:c3:c2:9d:d8:14:19:d9:d0:e0:
                    7c:01:30:8c:4a:cb:32:3c:44:9c:e0:25:2c:31:e8:
                    d8:b6:f1:37:ee:d1:29:c6:2a:7c:5f:9d:ae:9b:9e:
                    42:89:65:68:65:7a:6d:c2:01:7b:4b:24:b0:56:bd:
                    d6:b4:88:ee:22:76:b2:7d:5e:b7:4d:41:eb:3b:e0:
                    a3:c7:3f:8d:4d:c3:7c:d6:b7:af:bc:d9:73:d0:65:
                    ef:d8:31:93:66:0d:88:f5:83:82:da:48:14:91:9c:
                    c2:49:53:f3:e7:72:17:ea:e0:19:72:6d:d4:3f:7e:
                    58:3d:68:a2:4f:17:e9:a0:9b:45:6f:e6:b7:50:65:
                    f9:96:12:53:eb:f1:eb:88:cc:93:d9:df:fa:ad:f6:
                    72:bf:82:cc:9a:6d:ec:5a:62:36:df:ad:f3:a9:07:
                    85:29:04:83:d1:c1:b6:77:83:fc:3b:a1:d4:6b:29:
                    1d:bc:07:22:4f:63:90:ca:47:06:ff:59:b3:f6:75:
                    bd:c8:ed:25:d6:5d:40:20:86:6d:fa:d2:5a:77:ef:
                    3c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C3:99:BC:B3:9B:88:6C:27:C6:0D:70:A4:63:9A:9A:A8:9B:B1:47
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS57043.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:af:1f:d0:d6:4d:af:6b:18:76:bc:ca:67:45:ef:a1:08:a2:
         48:77:27:51:7d:01:20:9c:94:14:6f:45:6a:05:56:c7:b4:79:
         e7:91:8b:ea:6c:31:23:c2:bd:7a:68:52:6b:5d:3b:bf:90:5a:
         48:41:94:07:9b:bd:ad:2a:fc:ba:27:d6:d6:68:c8:48:ae:17:
         36:dd:be:d2:d7:9e:77:6b:0a:2d:33:2c:29:44:f7:8e:24:57:
         6b:f7:fb:34:79:4a:f0:9f:90:f1:1a:8b:52:4b:39:bd:b2:c2:
         c1:2f:cc:59:47:a3:58:ba:32:4c:60:91:3b:42:33:26:b7:24:
         86:d2:9c:be:5e:92:7f:6d:28:fa:93:1d:1c:fd:2b:5a:2c:a7:
         ca:3c:c0:8e:4e:ff:48:9c:07:ab:ec:c4:e4:80:4d:ae:91:b7:
         25:64:5f:20:27:e1:2f:a8:d0:d4:6e:20:6d:09:6e:02:24:24:
         85:0a:4d:8a:16:d4:01:cc:44:d4:dc:dd:3a:46:7c:8b:c5:15:
         fb:0e:9b:cb:b6:99:d2:55:2b:00:c6:1a:0a:b9:c2:4a:ac:f1:
         ce:3a:66:ea:9b:c4:9a:d8:ed:3c:ee:87:0a:9f:f5:51:f2:aa:
         f0:be:0b:7b:4c:61:77:15:c1:7e:c6:12:ac:bf:a4:e9:63:f8:
         64:48:e3:5a
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUShm8/gZ0rnwcMtbnUFhjrlLE4OIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjQwODE3MTMwMjAxWhcNMjUwODE2MTMwNzAx
WjAzMTEwLwYDVQQDEygwQ0MzOTlCQ0IzOUI4ODZDMjdDNjBENzBBNDYzOUE5QUE4
OUJCMTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9WHmqem++OZ
MZBtY8/4cyYcqT3MPNsFze0yyfh0DkBdSXSYEF4LbEsAr3b7PLA6K9TDwp3YFBnZ
0OB8ATCMSssyPESc4CUsMejYtvE37tEpxip8X52um55CiWVoZXptwgF7SySwVr3W
tIjuInayfV63TUHrO+Cjxz+NTcN81revvNlz0GXv2DGTZg2I9YOC2kgUkZzCSVPz
53IX6uAZcm3UP35YPWiiTxfpoJtFb+a3UGX5lhJT6/HriMyT2d/6rfZyv4LMmm3s
WmI2363zqQeFKQSD0cG2d4P8O6HUaykdvAciT2OQykcG/1mz9nW9yO0l1l1AIIZt
+tJad+88OwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFAzDmbyzm4hsJ8YNcKRjmpqo
m7FHMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzU3MDQzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF16EMA0GCSqGSIb3DQEBCwUAA4IB
AQC4rx/Q1k2vaxh2vMpnRe+hCKJIdydRfQEgnJQUb0VqBVbHtHnnkYvqbDEjwr16
aFJrXTu/kFpIQZQHm72tKvy6J9bWaMhIrhc23b7S1553awotMywpRPeOJFdr9/s0
eUrwn5DxGotSSzm9ssLBL8xZR6NYujJMYJE7QjMmtySG0py+XpJ/bSj6kx0c/Sta
LKfKPMCOTv9InAer7MTkgE2ukbclZF8gJ+EvqNDUbiBtCW4CJCSFCk2KFtQBzETU
3N06RnyLxRX7DpvLtpnSVSsAxhoKucJKrPHOOmbqm8Sa2O087ocKn/VR8qrwvgt7
TGF3FcF+xhKsv6TpY/hkSONa
-----END CERTIFICATE-----