Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3233362e302f32332d3233203d3e2035363530.roa
File:                     34372e3138322e3233362e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          ZE5MzUykDbdFpL7I0vnjBsbrz7bGPXpMwbQi9Hyil/o=
Subject key identifier:   4D:CB:43:0D:6C:76:B4:AC:1C:8E:8C:B7:94:59:42:77:79:82:F4:67
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       7420940D874766D8A91FC2138228A0015C3C23BE
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3233362e302f32332d3233203d3e2035363530.roa
Signing time:             Tue 13 Feb 2024 05:12:02 +0000
ROA not before:           Tue 13 Feb 2024 05:07:02 +0000
ROA not after:            Tue 11 Feb 2025 05:12:02 +0000
asID:                     5650
IP address blocks:        47.182.236.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:20:94:0d:87:47:66:d8:a9:1f:c2:13:82:28:a0:01:5c:3c:23:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Feb 13 05:07:02 2024 GMT
            Not After : Feb 11 05:12:02 2025 GMT
        Subject: CN=4DCB430D6C76B4AC1C8E8CB7945942777982F467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0a:67:4e:56:4c:3a:70:1e:29:af:13:29:77:
                    fe:66:cb:7f:03:05:2b:ea:86:6b:15:e9:33:9c:e9:
                    f2:97:2e:dc:24:25:3d:59:60:7a:cc:f1:bc:47:0c:
                    08:e0:87:3b:0b:29:41:5f:79:99:e0:43:98:4a:32:
                    f7:5e:7f:68:c1:a3:91:4d:a4:c5:7e:d8:69:70:4b:
                    e9:47:93:ac:6e:66:e5:b1:f1:f9:06:3b:20:ec:5c:
                    33:28:e3:a4:0e:ea:74:21:22:c5:9d:80:9a:1f:2c:
                    c1:fb:c3:de:a7:a3:c1:9a:9f:24:01:70:8f:a1:2c:
                    56:26:7a:aa:a2:a8:ea:14:53:39:c4:0e:a7:b3:5c:
                    c8:5a:14:d1:05:89:86:68:4b:e0:8b:be:1f:3f:b7:
                    bd:de:c1:11:44:57:13:a7:b4:cb:f8:81:22:9c:a7:
                    b5:8e:a6:d6:7a:db:15:ee:17:3e:bc:92:c2:43:1e:
                    a8:3e:c2:b8:0c:11:c9:df:62:8a:32:1d:62:3d:b1:
                    c1:92:09:41:21:56:57:9b:ca:fc:79:82:4e:3f:2d:
                    0b:96:98:9b:27:f1:37:96:92:47:c6:4b:ef:e1:de:
                    b2:12:20:60:29:da:d3:eb:4f:e4:81:f2:a6:62:b0:
                    01:a1:85:7f:75:33:6b:31:74:99:ba:31:9c:44:e4:
                    b3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CB:43:0D:6C:76:B4:AC:1C:8E:8C:B7:94:59:42:77:79:82:F4:67
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3233362e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.182.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:dd:82:e3:b0:18:5f:fa:78:ff:dc:52:f4:8f:61:3e:f0:6d:
         95:3a:ce:ba:65:a7:8a:59:dc:04:c4:8f:31:91:41:fc:16:b6:
         45:3e:18:64:47:c9:5f:a5:ac:8c:c8:36:85:c2:e9:d9:51:ad:
         eb:24:1e:5b:75:80:2d:e8:ee:6f:b3:91:c6:4d:ae:e0:77:e6:
         ab:f6:ff:8b:21:23:04:1f:e2:c1:74:28:d7:30:67:c1:aa:6f:
         73:eb:69:08:a5:c7:4e:af:3d:5e:68:5b:d6:60:19:f3:7c:27:
         8a:96:76:50:ea:73:20:35:98:2f:39:f5:44:41:61:9f:d0:ed:
         0c:33:9c:e2:8d:a7:58:45:e7:f9:4b:7b:e7:f3:db:35:dd:0e:
         ca:17:9a:ef:ed:d6:80:41:f5:87:82:51:b0:4a:65:5d:de:ef:
         79:3d:f7:17:67:55:ec:88:f5:9d:58:92:e4:aa:01:b1:f0:27:
         68:8a:2f:c6:c5:f8:88:bf:51:7d:1b:c7:aa:da:28:14:97:55:
         5a:79:8c:6c:69:cb:e7:11:e7:5b:23:74:d3:56:fd:4d:04:a7:
         33:c4:87:f2:b0:23:2f:d9:86:fe:84:ee:e5:14:f9:b7:2a:c9:
         06:da:52:eb:da:5d:e1:88:9f:7e:65:82:0b:77:cd:f1:2c:3f:
         fc:c5:7a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----