Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3234382e302f32332d3233203d3e2035363530.roa
File:                     34372e3138322e3234382e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          CD2wCppgrwjlPtue2uUKPm3UeyhiaKXmeLpEJNDiLu0=
Subject key identifier:   41:2F:C1:2C:F7:34:E6:66:C3:B2:8C:21:0A:B7:09:46:DD:5C:E3:FE
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       2DBDD42BD72AF9B05D9F0967D1C336C9FAA6E856
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3234382e302f32332d3233203d3e2035363530.roa
Signing time:             Tue 13 Feb 2024 05:13:00 +0000
ROA not before:           Tue 13 Feb 2024 05:08:00 +0000
ROA not after:            Tue 11 Feb 2025 05:13:00 +0000
asID:                     5650
IP address blocks:        47.182.248.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:bd:d4:2b:d7:2a:f9:b0:5d:9f:09:67:d1:c3:36:c9:fa:a6:e8:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Feb 13 05:08:00 2024 GMT
            Not After : Feb 11 05:13:00 2025 GMT
        Subject: CN=412FC12CF734E666C3B28C210AB70946DD5CE3FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9a:d3:85:ab:d5:0e:ea:11:20:9f:f8:6c:e0:
                    31:b2:b8:16:84:2e:ee:3d:4d:24:62:0f:7e:21:23:
                    a3:ee:d7:cf:74:d5:a4:d4:80:33:38:52:90:b2:25:
                    3e:1e:3e:3f:dd:3d:dc:39:ff:34:e1:9f:dd:b4:05:
                    35:b7:46:3e:25:0f:32:95:fb:31:ba:82:2a:bd:63:
                    7e:7b:57:ec:5f:fe:86:b8:e4:bd:1c:74:7f:fb:30:
                    06:89:06:23:bf:35:b0:e4:e5:e0:7f:9a:b3:ad:60:
                    ec:15:28:ad:b7:67:1d:da:69:e4:95:86:a5:93:64:
                    0e:04:46:86:cc:e8:6c:57:72:96:3d:12:7e:c7:59:
                    90:ba:38:4d:47:6b:7e:3b:88:fe:ef:30:ab:a2:c2:
                    f2:21:8e:58:2a:e2:ec:6b:73:92:77:fb:ef:96:e6:
                    08:cf:61:71:e2:25:0a:2d:b1:4b:88:ea:ec:d4:68:
                    89:60:fa:db:a8:91:7a:87:14:d4:cd:1b:5c:fd:04:
                    e2:1c:15:0b:b8:cc:0f:fe:0b:51:23:97:e4:9f:54:
                    2f:0b:d7:0d:1d:66:8a:17:77:5d:39:19:90:18:1b:
                    c4:0b:94:9d:8d:53:44:5f:32:a6:83:08:30:a8:4a:
                    49:d4:a4:f9:c7:34:d0:50:89:b8:74:ea:8e:b2:82:
                    4d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2F:C1:2C:F7:34:E6:66:C3:B2:8C:21:0A:B7:09:46:DD:5C:E3:FE
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3234382e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.182.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:1d:54:c2:e3:fd:c5:54:4b:c6:f5:7c:b1:eb:d7:45:dd:35:
         db:c3:f6:fd:11:c2:ef:ef:ed:93:b9:7e:8c:3f:2f:dd:16:15:
         5d:4b:44:02:0a:9e:f5:dc:b4:92:ea:c4:b5:d0:d7:9a:3b:2b:
         3d:95:6f:25:29:a9:82:b1:02:40:cf:9e:01:f5:84:54:ea:bf:
         89:2e:67:f1:c9:68:34:00:c0:83:37:17:47:95:14:89:89:7b:
         bf:2e:bd:1d:f7:99:96:81:fb:00:6f:e6:3a:b5:6d:96:98:84:
         a0:8d:0e:67:b2:60:98:90:94:65:a9:8c:49:ca:c2:c8:c7:3e:
         b2:6a:f7:9a:b5:35:98:1f:c1:e8:3e:c1:e4:d9:45:95:e6:8b:
         4e:34:fd:27:0e:a0:f8:a0:c0:02:b9:14:10:66:b2:49:1d:6f:
         37:a6:26:60:52:a0:b2:78:aa:b2:0b:9c:7a:da:bc:24:b9:e0:
         18:66:2d:9e:d3:3f:4e:f8:8a:f0:2f:c9:35:bc:ff:66:a3:bd:
         67:0b:50:8a:8b:e7:b8:c6:6f:45:7d:68:b2:3a:0e:59:f9:1f:
         c5:9f:1e:e0:86:de:c1:da:3f:b2:74:c8:fe:30:14:14:0a:7d:
         b3:14:aa:17:fd:ad:1e:2c:82:b7:3a:8a:4d:ca:5e:cd:83:52:
         ac:4a:cb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----