Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3133302e302f32332d3233203d3e2035363530.roa
File:                     34372e3138322e3133302e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          toZs7YiPgFIWkkZNnn4LQHdBYmcVO7zX7KmRsCngL34=
Subject key identifier:   2C:79:3F:06:37:47:83:CB:0E:04:D3:DC:BC:CF:B1:34:BA:ED:5A:10
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       6E037D440236810B3E82EE990032AEC6426086B4
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3133302e302f32332d3233203d3e2035363530.roa
Signing time:             Tue 13 Feb 2024 05:10:41 +0000
ROA not before:           Tue 13 Feb 2024 05:05:41 +0000
ROA not after:            Tue 11 Feb 2025 05:10:41 +0000
asID:                     5650
IP address blocks:        47.182.130.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:03:7d:44:02:36:81:0b:3e:82:ee:99:00:32:ae:c6:42:60:86:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Feb 13 05:05:41 2024 GMT
            Not After : Feb 11 05:10:41 2025 GMT
        Subject: CN=2C793F06374783CB0E04D3DCBCCFB134BAED5A10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c8:d3:5e:1b:60:7b:2d:6f:f1:d7:8e:9d:53:
                    b1:f1:1e:d3:39:94:48:ee:cb:55:63:a1:03:89:3d:
                    a7:ae:e3:df:7a:af:0c:ca:01:be:df:d5:95:1d:64:
                    89:50:99:03:ce:6a:ad:3e:4f:b7:6a:78:50:bd:99:
                    5a:7f:15:af:95:53:1d:ca:c8:c0:41:5e:dc:32:ad:
                    c2:80:ea:8b:32:fb:60:77:d5:7f:58:15:21:4a:85:
                    ed:0c:39:a8:b5:58:2c:c8:d4:85:ba:de:66:91:33:
                    27:f0:d6:58:b5:b6:c3:ab:43:a8:26:d0:9f:17:27:
                    cf:d7:3a:6e:49:94:ac:79:cb:88:eb:2e:ad:44:2c:
                    b1:58:5d:41:36:47:f6:84:22:ce:3b:15:3a:1e:60:
                    bb:7d:2c:73:3c:d9:61:da:b5:9d:7f:f5:0d:0d:9b:
                    f4:3c:71:c0:24:e6:31:53:7a:02:b9:69:c7:f6:c5:
                    81:33:13:c8:83:1d:60:f7:cc:8b:0b:cd:ac:02:46:
                    e6:ea:6d:51:16:87:72:47:ae:0d:3b:e9:72:95:c9:
                    27:e3:bb:65:90:84:98:f3:50:3a:8f:9c:d9:84:15:
                    62:7e:a9:38:7e:f4:56:d8:60:ad:3b:9b:88:ed:bf:
                    f7:7d:46:1c:29:3f:4b:db:49:9c:fd:4b:78:bd:86:
                    ea:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:79:3F:06:37:47:83:CB:0E:04:D3:DC:BC:CF:B1:34:BA:ED:5A:10
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3133302e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.182.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:61:b1:db:94:b7:a8:2b:e3:ee:6c:14:0b:90:f5:c1:5f:74:
         a9:d4:51:36:14:73:fd:90:68:41:e3:93:88:67:a4:8c:9d:7f:
         fd:ca:5d:9d:e0:41:a9:67:88:9f:44:d0:fa:70:62:a9:68:59:
         83:38:94:37:1a:05:c9:52:5d:c3:81:7d:66:a0:ec:64:1e:f5:
         b8:46:44:21:f3:37:e4:e7:ff:a9:05:e3:f2:42:a0:58:0e:a1:
         f8:f7:da:48:8c:e4:3c:a2:ab:3a:c7:3a:3a:2e:b5:b8:12:23:
         d9:36:06:6d:bc:a6:ce:f6:e4:fa:30:fa:69:e4:db:da:1e:a7:
         ef:a1:d1:d6:0b:33:db:da:f0:35:c7:ef:7a:86:58:48:ac:79:
         3e:2d:90:57:41:e2:7e:a2:7d:5e:35:18:ca:dc:b7:c5:53:76:
         dd:fb:47:36:d8:29:6b:f1:1e:57:8f:8a:37:92:c2:45:27:0b:
         72:96:8c:c9:c1:d7:93:89:e3:1e:ef:b5:d0:73:d1:18:44:da:
         68:29:e1:e7:26:01:d1:1d:d4:9f:25:57:b1:52:cc:fc:fe:b5:
         b2:f6:6b:40:9a:15:b7:80:a6:42:72:2c:9f:e3:12:5e:f7:df:
         34:76:09:91:c1:33:e1:49:95:4c:8a:2c:55:e2:15:7a:c0:63:
         bd:29:44:e7
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUbgN9RAI2gQs+gu6ZADKuxkJghrQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYmMwZDY3MmFlOWRiZTg4MTM1ODkzZTNkYzE5YTg4NWEw
Njc4NTlmZGFlNjY4ZDVhNzcwHhcNMjQwMjEzMDUwNTQxWhcNMjUwMjExMDUxMDQx
WjAzMTEwLwYDVQQDEygyQzc5M0YwNjM3NDc4M0NCMEUwNEQzRENCQ0NGQjEzNEJB
RUQ1QTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsjTXhtgey1v
8deOnVOx8R7TOZRI7stVY6EDiT2nruPfeq8MygG+39WVHWSJUJkDzmqtPk+3anhQ
vZlafxWvlVMdysjAQV7cMq3CgOqLMvtgd9V/WBUhSoXtDDmotVgsyNSFut5mkTMn
8NZYtbbDq0OoJtCfFyfP1zpuSZSsecuI6y6tRCyxWF1BNkf2hCLOOxU6HmC7fSxz
PNlh2rWdf/UNDZv0PHHAJOYxU3oCuWnH9sWBMxPIgx1g98yLC82sAkbm6m1RFody
R64NO+lylckn47tlkISY81A6j5zZhBVifqk4fvRW2GCtO5uI7b/3fUYcKT9L20mc
/Ut4vYbqMwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFCx5PwY3R4PLDgTT3LzPsTS6
7VoQMB8GA1UdIwQYMBaAFMsIhtIESKZjx89cThl5rG952wUgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzIv
Q0IwODg2RDIwNDQ4QTY2M0M3Q0Y1QzRFMTk3OUFDNkY3OURCMDUyMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzQ2YmYxZjAzLTJlYmQtNDA1ZS1hNWI3LTYyYmRmM2Q3ZGJlNi9iYzBk
NjcyYWU5ZGJlODgxMzU4OTNlM2RjMTlhODg1YTA2Nzg1OWZkYWU2NjhkNWE3Ny5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi8yLzM0MzcyZTMxMzgzMjJlMzEzMzMwMmUzMDJmMzIzMzJkMzIz
MzIwM2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEvtoIwDQYJKoZIhvcNAQELBQAD
ggEBAI5hsduUt6gr4+5sFAuQ9cFfdKnUUTYUc/2QaEHjk4hnpIydf/3KXZ3gQaln
iJ9E0PpwYqloWYM4lDcaBclSXcOBfWag7GQe9bhGRCHzN+Tn/6kF4/JCoFgOofj3
2kiM5DyiqzrHOjoutbgSI9k2Bm28ps725Pow+mnk29oep++h0dYLM9va8DXH73qG
WEiseT4tkFdB4n6ifV41GMrct8VTdt37RzbYKWvxHlePijeSwkUnC3KWjMnB15OJ
4x7vtdBz0RhE2mgp4ecmAdEd1J8lV7FSzPz+tbL2a0CaFbeApkJyLJ/jEl733zR2
CZHBM+FJlUyKLFXiFXrAY70pROc=
-----END CERTIFICATE-----