Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3233382e302f32332d3233203d3e2035363530.roa
File:                     34372e3138322e3233382e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          4Jwlpf8l0MoF8fQFIQCxfKg0LsDNglyLJxWZ74nPJp8=
Subject key identifier:   F6:1E:DD:95:10:D8:9B:65:4E:89:93:CD:D7:7B:6E:ED:C3:45:8E:4F
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       3F6AAB09A27A95072FC2E24C0E0710FB6A632D55
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3233382e302f32332d3233203d3e2035363530.roa
Signing time:             Tue 13 Feb 2024 05:12:12 +0000
ROA not before:           Tue 13 Feb 2024 05:07:12 +0000
ROA not after:            Tue 11 Feb 2025 05:12:12 +0000
asID:                     5650
IP address blocks:        47.182.238.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:6a:ab:09:a2:7a:95:07:2f:c2:e2:4c:0e:07:10:fb:6a:63:2d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Feb 13 05:07:12 2024 GMT
            Not After : Feb 11 05:12:12 2025 GMT
        Subject: CN=F61EDD9510D89B654E8993CDD77B6EEDC3458E4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6e:e1:cb:63:9b:e8:e7:15:e3:10:26:91:62:
                    df:d1:90:7b:a2:19:c8:72:6a:80:2e:8f:cc:7c:5f:
                    f6:71:66:83:a8:b8:89:fd:a0:27:83:d8:03:62:36:
                    4e:c2:a9:ed:04:de:e1:c2:72:44:8e:ef:e1:0e:7b:
                    a6:03:60:eb:2c:52:52:05:f8:fc:ce:54:0c:d6:c7:
                    b1:0e:90:8e:f8:d4:0f:54:62:56:c9:01:92:bc:2a:
                    b9:e0:86:94:8c:ad:94:06:6f:05:af:74:dc:e8:2b:
                    0d:09:8f:8a:dc:96:b9:43:4d:94:aa:e9:40:ee:92:
                    b0:cf:2a:6e:23:0c:53:a7:98:cf:18:6e:c5:3e:65:
                    6c:36:8d:99:a7:ed:d8:6c:91:7b:16:7a:c7:71:e8:
                    9f:7e:37:d0:45:95:d5:ae:0a:43:59:7f:eb:69:a0:
                    1b:6f:cb:80:79:a1:33:02:a9:4d:77:09:5b:8a:da:
                    32:3d:6f:f1:05:ba:01:d0:a0:48:d0:a7:e0:5f:4e:
                    c1:62:53:bb:fb:f1:11:d1:4d:a0:16:c8:a9:69:b2:
                    fa:a9:cb:5a:93:73:bc:dc:e2:0d:54:60:39:09:c6:
                    1d:d5:97:91:06:e6:1c:e8:9a:8d:b5:73:94:ad:27:
                    5a:81:d4:ee:44:ed:e5:4a:a1:83:e2:47:ab:b2:b8:
                    9f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1E:DD:95:10:D8:9B:65:4E:89:93:CD:D7:7B:6E:ED:C3:45:8E:4F
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3233382e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.182.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:c4:67:02:db:66:da:c6:92:61:52:27:81:34:cc:4b:c9:83:
         6f:1e:1c:0c:f5:5a:74:6a:db:15:0a:24:a9:5f:0a:53:98:1a:
         cf:87:e2:c1:3d:89:62:74:5d:5f:a6:4d:82:84:49:b6:19:96:
         50:b5:ef:2c:f0:28:90:bb:d8:a8:2d:fc:c5:8c:4f:ce:ef:47:
         70:7b:4f:d0:d0:46:e9:af:75:50:14:67:5b:39:7d:c6:3e:1a:
         93:8d:bb:37:2f:dd:e4:9d:56:53:46:47:1f:ba:4b:fd:a5:86:
         3e:d0:55:04:16:fb:06:de:34:82:7b:ed:d4:e2:10:3c:fd:da:
         bc:95:6f:dd:71:8e:b8:a4:a8:82:fb:da:11:45:f7:e1:a7:ad:
         82:87:16:b4:66:7d:84:00:eb:35:b8:6e:fe:c1:d1:b2:ab:59:
         38:0b:77:2f:65:c1:f9:b1:87:9d:cb:83:ae:32:1b:ed:7c:8e:
         02:af:e0:a6:a6:2a:6a:5d:35:4d:ad:04:11:ae:ab:c1:dc:9f:
         57:af:1c:77:2b:04:8a:65:52:66:ec:44:85:ab:a2:f2:14:89:
         68:45:40:d6:e4:ff:c6:ee:3d:e9:4e:09:ec:58:24:b9:44:b2:
         63:2f:ee:33:84:75:69:76:c9:c6:c0:f6:43:50:66:49:ae:75:
         68:b9:59:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----