Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3234302e302f32332d3233203d3e2035363530.roa
File:                     34372e3138322e3234302e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          objCVXdy7qv+MdzAVLjIz1fW5Knt5EHmNBoNaRUjtLk=
Subject key identifier:   DD:87:94:DC:79:33:06:40:CE:74:EB:D3:E8:9F:5E:29:95:C7:E6:8A
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       7770A53303BD413C3286045D503FF8F13BC2B988
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3234302e302f32332d3233203d3e2035363530.roa
Signing time:             Tue 13 Feb 2024 05:12:25 +0000
ROA not before:           Tue 13 Feb 2024 05:07:25 +0000
ROA not after:            Tue 11 Feb 2025 05:12:25 +0000
asID:                     5650
IP address blocks:        47.182.240.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:70:a5:33:03:bd:41:3c:32:86:04:5d:50:3f:f8:f1:3b:c2:b9:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Feb 13 05:07:25 2024 GMT
            Not After : Feb 11 05:12:25 2025 GMT
        Subject: CN=DD8794DC79330640CE74EBD3E89F5E2995C7E68A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:70:0d:54:3b:f8:86:48:e2:b6:60:38:7a:45:
                    e9:36:18:ef:4c:59:a7:4e:2c:fc:4a:ab:25:2a:7f:
                    a7:02:8f:19:b5:99:94:59:25:14:87:d3:83:66:d3:
                    a4:0a:9b:94:27:f8:d5:b5:9d:1b:4c:e5:9a:09:a9:
                    71:7b:81:a0:b5:25:45:25:cd:9b:73:c0:7d:e6:ff:
                    b3:d4:c3:dd:44:89:3d:55:c8:89:f3:d6:3c:53:9f:
                    ee:11:73:e4:74:cf:a4:c6:20:62:94:48:20:79:1b:
                    d6:fc:44:f8:0b:a0:42:f8:74:88:44:f5:be:ba:59:
                    1c:64:6e:30:e8:df:89:f1:77:bc:a6:be:93:17:9c:
                    16:ec:93:4e:97:96:00:0b:cc:cd:25:54:83:ba:fa:
                    d2:51:32:73:41:22:36:f1:7f:0b:de:24:98:23:4a:
                    ec:44:e8:7b:15:ea:2d:93:9c:44:6a:75:c2:f0:68:
                    f0:ee:0a:c7:d5:b8:9b:71:60:da:66:9b:31:37:5e:
                    b0:83:eb:03:80:c0:53:25:24:1a:70:ea:1d:7e:f0:
                    81:48:ea:b3:a5:99:bd:48:37:5c:c2:36:3c:2f:ed:
                    d4:8c:90:63:be:68:81:91:f7:81:10:8c:b2:78:ef:
                    7b:b2:34:b7:2d:fa:5a:4a:df:85:56:7e:d7:e4:7c:
                    62:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:87:94:DC:79:33:06:40:CE:74:EB:D3:E8:9F:5E:29:95:C7:E6:8A
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3234302e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.182.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:2d:3f:dc:e2:d3:75:c4:62:d3:51:e5:08:d2:94:0a:17:f7:
         51:11:61:21:b5:61:87:30:a0:45:7f:62:8c:a3:4c:68:c1:02:
         a6:df:bd:56:ce:c3:22:9d:d3:64:01:bb:b0:23:76:c9:29:86:
         e0:99:a3:f7:c4:be:f3:6d:74:17:a1:94:f6:1d:a9:4e:e7:fe:
         93:35:13:99:ba:66:27:23:3e:26:09:8a:68:27:10:af:7e:49:
         d2:6b:a4:1d:09:33:cf:db:79:14:82:9f:2c:d6:da:fb:73:3b:
         1d:54:d7:a2:70:0c:ef:37:cc:a8:84:cb:f1:4d:c6:d9:c7:06:
         75:7c:01:b9:63:62:ec:5f:e5:77:c7:4a:d5:92:93:ff:da:6d:
         49:cf:51:80:41:86:17:3f:5b:9d:a0:81:56:47:12:34:e8:d8:
         30:7f:f4:f1:93:ef:d2:ef:37:03:50:a8:27:67:55:19:fb:2c:
         f2:06:50:1a:10:1e:40:75:cf:8e:13:bb:f2:42:fd:e4:49:14:
         b1:96:82:68:af:e4:26:b0:f9:71:0b:ce:43:0e:10:e9:2b:70:
         4a:ff:8e:17:8e:d3:29:b9:4a:a4:da:4b:f6:3a:1c:0e:54:73:
         c6:a5:21:7a:5f:8f:5d:d7:e1:84:25:f0:63:18:98:ac:0c:db:
         7c:4d:76:68
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUd3ClMwO9QTwyhgRdUD/48TvCuYgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYmMwZDY3MmFlOWRiZTg4MTM1ODkzZTNkYzE5YTg4NWEw
Njc4NTlmZGFlNjY4ZDVhNzcwHhcNMjQwMjEzMDUwNzI1WhcNMjUwMjExMDUxMjI1
WjAzMTEwLwYDVQQDEyhERDg3OTREQzc5MzMwNjQwQ0U3NEVCRDNFODlGNUUyOTk1
QzdFNjhBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXANVDv4hkji
tmA4ekXpNhjvTFmnTiz8SqslKn+nAo8ZtZmUWSUUh9ODZtOkCpuUJ/jVtZ0bTOWa
Calxe4GgtSVFJc2bc8B95v+z1MPdRIk9VciJ89Y8U5/uEXPkdM+kxiBilEggeRvW
/ET4C6BC+HSIRPW+ulkcZG4w6N+J8Xe8pr6TF5wW7JNOl5YAC8zNJVSDuvrSUTJz
QSI28X8L3iSYI0rsROh7Feotk5xEanXC8Gjw7grH1bibcWDaZpsxN16wg+sDgMBT
JSQacOodfvCBSOqzpZm9SDdcwjY8L+3UjJBjvmiBkfeBEIyyeO97sjS3LfpaSt+F
Vn7X5HxiSwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFN2HlNx5MwZAznTr0+ifXimV
x+aKMB8GA1UdIwQYMBaAFMsIhtIESKZjx89cThl5rG952wUgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzIv
Q0IwODg2RDIwNDQ4QTY2M0M3Q0Y1QzRFMTk3OUFDNkY3OURCMDUyMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzQ2YmYxZjAzLTJlYmQtNDA1ZS1hNWI3LTYyYmRmM2Q3ZGJlNi9iYzBk
NjcyYWU5ZGJlODgxMzU4OTNlM2RjMTlhODg1YTA2Nzg1OWZkYWU2NjhkNWE3Ny5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi8yLzM0MzcyZTMxMzgzMjJlMzIzNDMwMmUzMDJmMzIzMzJkMzIz
MzIwM2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEvtvAwDQYJKoZIhvcNAQELBQAD
ggEBAJYtP9zi03XEYtNR5QjSlAoX91ERYSG1YYcwoEV/YoyjTGjBAqbfvVbOwyKd
02QBu7AjdskphuCZo/fEvvNtdBehlPYdqU7n/pM1E5m6ZicjPiYJimgnEK9+SdJr
pB0JM8/beRSCnyzW2vtzOx1U16JwDO83zKiEy/FNxtnHBnV8AbljYuxf5XfHStWS
k//abUnPUYBBhhc/W52ggVZHEjTo2DB/9PGT79LvNwNQqCdnVRn7LPIGUBoQHkB1
z44Tu/JC/eRJFLGWgmiv5Caw+XELzkMOEOkrcEr/jheO0ym5SqTaS/Y6HA5Uc8al
IXpfj13X4YQl8GMYmKwM23xNdmg=
-----END CERTIFICATE-----