Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3234362e302f32332d3233203d3e2035363530.roa
File:                     34372e3138322e3234362e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          PZathIg6L+FGtXRV9cnKKj39x75OfvO6GEKTLK1JRCw=
Subject key identifier:   72:51:2D:D2:F7:E6:4A:44:C8:87:9E:3E:B7:5B:E2:68:2A:74:14:26
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       3B012CE7D1A49A66F7BE78F1B074B7914AB78B1E
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3234362e302f32332d3233203d3e2035363530.roa
Signing time:             Tue 13 Feb 2024 05:12:48 +0000
ROA not before:           Tue 13 Feb 2024 05:07:48 +0000
ROA not after:            Tue 11 Feb 2025 05:12:48 +0000
asID:                     5650
IP address blocks:        47.182.246.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:01:2c:e7:d1:a4:9a:66:f7:be:78:f1:b0:74:b7:91:4a:b7:8b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Feb 13 05:07:48 2024 GMT
            Not After : Feb 11 05:12:48 2025 GMT
        Subject: CN=72512DD2F7E64A44C8879E3EB75BE2682A741426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d6:f6:19:73:ef:23:b3:f3:dd:bd:02:23:fd:
                    78:1e:73:5a:31:f0:57:36:c6:5f:08:1a:5e:13:0d:
                    52:ae:db:cb:73:15:6f:09:1b:bf:8c:73:fb:4e:25:
                    d7:11:af:19:e9:14:85:b1:67:ad:b3:ce:5f:06:bb:
                    59:c3:af:bc:2a:88:4c:54:58:7b:dd:25:ef:55:af:
                    9d:fe:78:eb:8e:40:1b:de:2b:97:a5:42:b2:60:47:
                    a5:11:7d:4e:ce:e3:a8:c5:b6:77:f7:ab:c8:6c:78:
                    7a:18:83:32:7c:1c:82:c7:3b:76:75:4c:5c:fe:18:
                    c5:f7:d9:14:4e:ef:84:63:d2:6f:94:4a:7f:be:26:
                    53:25:3e:21:b7:df:0d:74:94:68:08:67:2f:63:41:
                    0a:df:60:6e:e2:23:57:6f:bb:ad:72:5a:59:51:2a:
                    d0:83:66:99:b5:a9:4a:0f:ab:6a:23:a4:ff:1d:96:
                    cd:3f:30:c7:84:25:84:4e:3d:a8:83:e3:de:d6:b1:
                    51:d6:e4:bd:52:0d:df:38:6c:79:99:21:5d:31:f1:
                    0f:21:47:cc:22:0d:1b:e7:0e:72:cc:0e:03:83:b6:
                    a7:b0:27:b9:dd:72:d1:98:5a:12:b5:a6:07:be:f1:
                    2a:5f:ef:6f:e4:98:fc:59:cc:e6:9a:1d:8b:bd:28:
                    a6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:51:2D:D2:F7:E6:4A:44:C8:87:9E:3E:B7:5B:E2:68:2A:74:14:26
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3234362e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.182.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:bf:dc:c9:1c:07:3c:f3:a9:09:4f:d1:99:0c:2e:fc:e0:35:
         26:60:a3:b8:57:a6:46:27:8e:41:0c:73:9f:8e:e4:91:da:1f:
         4b:86:d3:7f:41:ec:5d:92:cd:42:35:8b:a9:df:fc:e2:f5:b1:
         71:0e:ba:d0:21:a7:45:46:82:ae:77:71:b2:2e:e3:f9:5f:3d:
         4d:da:44:5d:09:38:0c:c4:27:fd:a8:5b:f6:02:b7:b1:60:73:
         d4:2b:0b:6d:19:58:58:ce:24:c7:8e:e7:eb:8d:2f:ea:75:2e:
         ed:44:c4:d7:9c:d8:62:df:32:de:d7:e3:96:d3:ca:8d:11:ca:
         35:80:db:11:d7:12:09:f6:87:cf:f9:a9:a5:69:7f:c6:57:5e:
         cb:59:c6:f5:cd:de:2a:65:dd:b2:bd:ce:ca:08:2b:47:d0:79:
         03:52:a5:1b:9b:df:af:76:61:bc:a1:8f:08:83:9c:96:44:95:
         b3:51:e2:9a:2d:b6:01:c2:f2:1d:63:c9:b9:a9:7a:b1:66:fd:
         4f:44:38:41:48:91:ed:92:b4:b2:fd:de:2a:f4:12:8b:90:d1:
         1b:78:41:6a:45:06:bc:e7:de:b6:36:48:89:cf:eb:6a:bf:47:
         6a:df:1b:78:40:44:fc:bc:49:17:9f:73:8a:5e:d9:ee:31:c4:
         1b:b0:83:a2
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUOwEs59Gkmmb3vnjxsHS3kUq3ix4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYmMwZDY3MmFlOWRiZTg4MTM1ODkzZTNkYzE5YTg4NWEw
Njc4NTlmZGFlNjY4ZDVhNzcwHhcNMjQwMjEzMDUwNzQ4WhcNMjUwMjExMDUxMjQ4
WjAzMTEwLwYDVQQDEyg3MjUxMkREMkY3RTY0QTQ0Qzg4NzlFM0VCNzVCRTI2ODJB
NzQxNDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstb2GXPvI7Pz
3b0CI/14HnNaMfBXNsZfCBpeEw1SrtvLcxVvCRu/jHP7TiXXEa8Z6RSFsWets85f
BrtZw6+8KohMVFh73SXvVa+d/njrjkAb3iuXpUKyYEelEX1OzuOoxbZ396vIbHh6
GIMyfByCxzt2dUxc/hjF99kUTu+EY9JvlEp/viZTJT4ht98NdJRoCGcvY0EK32Bu
4iNXb7utclpZUSrQg2aZtalKD6tqI6T/HZbNPzDHhCWETj2og+Pe1rFR1uS9Ug3f
OGx5mSFdMfEPIUfMIg0b5w5yzA4Dg7ansCe53XLRmFoStaYHvvEqX+9v5Jj8Wczm
mh2LvSimbwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFHJRLdL35kpEyIeePrdb4mgq
dBQmMB8GA1UdIwQYMBaAFMsIhtIESKZjx89cThl5rG952wUgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzIv
Q0IwODg2RDIwNDQ4QTY2M0M3Q0Y1QzRFMTk3OUFDNkY3OURCMDUyMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzQ2YmYxZjAzLTJlYmQtNDA1ZS1hNWI3LTYyYmRmM2Q3ZGJlNi9iYzBk
NjcyYWU5ZGJlODgxMzU4OTNlM2RjMTlhODg1YTA2Nzg1OWZkYWU2NjhkNWE3Ny5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi8yLzM0MzcyZTMxMzgzMjJlMzIzNDM2MmUzMDJmMzIzMzJkMzIz
MzIwM2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEvtvYwDQYJKoZIhvcNAQELBQAD
ggEBAJ6/3MkcBzzzqQlP0ZkMLvzgNSZgo7hXpkYnjkEMc5+O5JHaH0uG039B7F2S
zUI1i6nf/OL1sXEOutAhp0VGgq53cbIu4/lfPU3aRF0JOAzEJ/2oW/YCt7Fgc9Qr
C20ZWFjOJMeO5+uNL+p1Lu1ExNec2GLfMt7X45bTyo0RyjWA2xHXEgn2h8/5qaVp
f8ZXXstZxvXN3ipl3bK9zsoIK0fQeQNSpRub3692YbyhjwiDnJZElbNR4pottgHC
8h1jybmperFm/U9EOEFIke2StLL93ir0EouQ0Rt4QWpFBrzn3rY2SInP62q/R2rf
G3hARPy8SRefc4pe2e4xxBuwg6I=
-----END CERTIFICATE-----