Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3232342e302f32332d3233203d3e2035363530.roa
File:                     34372e3138322e3232342e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          y/odVHLTKyMVVA19i8vWkNAXfwKJ6tI4UJvznSpaueo=
Subject key identifier:   C8:54:AC:FE:79:E8:E8:24:2F:6B:38:DD:5E:18:8B:EA:F2:DC:05:56
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       52FFFD98CCFA9838A0010788576F981EAD03A6DB
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3232342e302f32332d3233203d3e2035363530.roa
Signing time:             Tue 13 Feb 2024 05:10:52 +0000
ROA not before:           Tue 13 Feb 2024 05:05:52 +0000
ROA not after:            Tue 11 Feb 2025 05:10:52 +0000
asID:                     5650
IP address blocks:        47.182.224.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ff:fd:98:cc:fa:98:38:a0:01:07:88:57:6f:98:1e:ad:03:a6:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Feb 13 05:05:52 2024 GMT
            Not After : Feb 11 05:10:52 2025 GMT
        Subject: CN=C854ACFE79E8E8242F6B38DD5E188BEAF2DC0556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ed:59:77:3b:0f:5c:e0:3b:97:3f:25:bf:5f:
                    db:fb:cf:54:f2:f1:0f:58:d9:c5:7b:ed:64:5e:f3:
                    d5:f7:4e:ae:2c:b8:94:62:df:e6:31:c2:81:9f:4c:
                    93:36:f4:7b:1a:99:11:2a:72:24:8e:69:07:18:8b:
                    47:9e:cf:4e:e7:c2:4d:18:41:52:8c:93:6a:8e:6b:
                    ba:ba:af:9d:ac:c6:6a:89:d3:39:f6:96:c2:a3:ef:
                    24:8e:1b:6d:0d:da:6a:76:1d:e4:cb:ff:0f:e2:72:
                    fc:2b:9e:14:c8:0a:60:d7:01:d8:1f:b6:6b:65:b1:
                    74:7e:c0:f1:da:6a:03:85:bc:3f:87:82:91:2a:69:
                    05:b2:2d:3c:2e:10:a0:ac:7f:8e:2d:67:93:79:f1:
                    1e:cb:00:08:f8:75:cd:e4:85:dc:30:eb:fd:bb:b5:
                    2e:7a:6f:bd:f0:e3:6a:a4:a9:fd:17:31:51:5f:bc:
                    3a:b7:38:e4:7e:8a:45:c3:f7:8c:33:9b:36:f9:1c:
                    59:69:17:c5:2a:09:02:ed:af:ee:bb:4c:43:f5:eb:
                    28:ed:1b:2e:eb:8e:d0:19:29:d2:c6:9d:ef:6a:c7:
                    a8:b0:b5:2f:db:6c:52:a1:f5:58:ec:32:66:52:cc:
                    55:c4:9e:7b:96:38:17:d3:5b:d6:87:71:09:f1:c1:
                    34:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:54:AC:FE:79:E8:E8:24:2F:6B:38:DD:5E:18:8B:EA:F2:DC:05:56
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3232342e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.182.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:ce:08:d2:03:62:d4:d2:0d:f3:98:91:43:ba:eb:c7:41:66:
         66:a0:8b:5c:20:e2:c0:a5:c5:8d:32:ec:9a:bd:42:a4:c5:51:
         0f:34:54:7c:ef:7f:ae:a0:9f:f6:53:14:4d:e3:1f:b2:7b:12:
         ca:78:e8:06:61:4c:5c:e2:33:2f:a5:ba:b6:2e:aa:1f:87:a6:
         0e:f4:bf:47:34:70:1d:2a:12:84:41:0a:f3:f5:2b:32:8c:12:
         e9:5e:31:74:ed:38:df:cc:fb:8e:88:03:1c:e4:3c:40:24:b7:
         94:4f:36:a0:ab:b1:7c:b4:e9:17:ed:98:32:cb:2f:e9:2e:ad:
         4d:ed:3e:67:1e:d5:93:63:bb:2f:c5:4a:73:09:61:b1:fe:c2:
         15:16:23:6e:e4:55:f1:27:a4:d2:83:17:88:4a:cf:d4:ae:7f:
         2a:df:e9:11:fb:70:3a:d0:58:22:6a:90:6f:c8:7f:c7:78:da:
         84:ee:08:ba:f4:ff:ca:47:f2:69:5a:0d:13:f1:3d:b7:e5:a5:
         91:d8:ec:d7:83:fb:f2:92:18:c8:df:00:28:2e:b8:b8:bf:00:
         48:ea:da:0a:b3:83:47:ba:82:04:1c:54:73:c3:f1:25:7b:2a:
         7d:f1:e3:5f:66:97:ba:af:a2:06:89:da:99:57:b9:d4:7c:d7:
         be:00:64:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----