Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3233342e302f32332d3233203d3e2035363530.roa
File:                     34372e3138322e3233342e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          5cMuwaFlay5f4578/zcDY1DWvkMaRHq+jAWghyc6GTM=
Subject key identifier:   78:5F:5B:D6:A7:0B:D2:58:E1:94:4C:EB:28:AF:8E:04:FC:62:3C:87
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       4AB918AA47CD97FBBB917A16B2C90BC499FC20B3
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3233342e302f32332d3233203d3e2035363530.roa
Signing time:             Tue 13 Feb 2024 05:11:01 +0000
ROA not before:           Tue 13 Feb 2024 05:06:01 +0000
ROA not after:            Tue 11 Feb 2025 05:11:01 +0000
asID:                     5650
IP address blocks:        47.182.234.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b9:18:aa:47:cd:97:fb:bb:91:7a:16:b2:c9:0b:c4:99:fc:20:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Feb 13 05:06:01 2024 GMT
            Not After : Feb 11 05:11:01 2025 GMT
        Subject: CN=785F5BD6A70BD258E1944CEB28AF8E04FC623C87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d8:89:a1:0e:56:8e:a6:35:3c:97:cf:13:e8:
                    31:a8:f9:a2:2a:42:18:f8:ba:e8:3b:5e:33:e7:b3:
                    05:76:57:35:a5:18:7b:66:e7:4d:90:90:bf:bb:c5:
                    36:e6:1b:f4:7e:d4:30:90:e5:50:34:2b:9a:63:98:
                    f6:a2:9a:57:ed:f0:5f:ab:fd:c6:1d:a1:17:57:0a:
                    90:90:12:c0:17:f8:02:ae:c1:b9:01:5d:7e:f0:af:
                    85:b4:b3:ec:6e:7c:be:59:e7:e0:d9:01:97:a0:4d:
                    4e:c9:2a:6e:2d:cd:47:67:7e:4d:bd:04:e3:4e:59:
                    75:37:df:1a:8b:af:f1:26:a7:e7:64:d2:0f:18:c6:
                    33:52:a9:f0:da:a4:57:75:e5:98:83:13:45:e7:4a:
                    1b:c7:d1:06:96:b7:18:e6:47:ed:0f:11:85:7f:5f:
                    01:08:e5:63:92:6e:2c:9e:5b:d3:03:ad:b2:44:f5:
                    63:96:26:63:d6:d8:65:9a:ef:02:1c:50:1a:9b:09:
                    38:4b:f2:dc:f5:b4:29:81:7f:28:72:26:8a:8c:e1:
                    dd:99:25:76:36:49:34:40:95:9b:ae:e4:cb:dd:a0:
                    5b:e2:98:b9:d5:fa:d9:05:7e:2d:b2:c8:c8:bb:78:
                    ee:97:ed:c7:67:0e:ce:8f:ef:ca:65:72:e6:8d:2b:
                    ac:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5F:5B:D6:A7:0B:D2:58:E1:94:4C:EB:28:AF:8E:04:FC:62:3C:87
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3233342e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.182.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:b7:ee:2d:13:dc:c2:e5:14:75:e6:c6:3f:a3:47:d7:96:50:
         90:c7:f2:45:95:2b:99:ac:60:0f:a9:44:10:68:67:b8:6c:1f:
         44:40:01:c2:86:89:06:4e:d7:84:c4:ae:14:1d:2f:9c:61:26:
         e4:7d:7f:c2:77:55:1c:b5:74:c4:a7:32:27:b0:fb:77:a1:e6:
         46:39:fe:b2:8d:70:69:35:03:de:d0:9e:fd:5a:72:f7:2b:76:
         fe:0e:dd:2a:28:c3:25:40:cd:a3:0f:ce:12:ae:df:13:70:fb:
         72:c1:c3:c5:4e:64:16:ec:42:b6:66:59:1a:c3:f2:8e:ee:cc:
         48:78:58:02:ad:28:9c:17:fc:7d:6c:14:66:8a:61:d9:4c:12:
         bc:dd:75:c0:7a:0e:37:3a:e1:8e:ca:80:c7:b0:bd:0b:50:9f:
         61:2f:af:19:a3:83:18:cc:98:2a:d1:2e:60:09:4f:41:e9:88:
         4c:c5:c4:ea:58:dc:8c:7a:ca:09:4b:81:e0:ef:3a:cf:72:9d:
         a4:db:cd:d0:13:e7:e0:36:f5:f2:8f:bc:7a:25:70:a3:b9:ac:
         90:58:97:76:b7:0d:8e:9f:3b:c5:41:6e:58:db:68:7b:dc:e5:
         3c:c2:71:24:b6:c0:e7:25:a8:c5:f3:c9:99:bf:06:83:61:27:
         12:c2:c4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----