Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3235342e302f32332d3233203d3e2035363530.roa
File:                     34372e3138322e3235342e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          Ir/ga99h4SrDzvd5D+ou7k+Zme1eohlb8nB8WVYVLP0=
Subject key identifier:   FA:FD:30:18:65:1C:07:81:86:32:9D:19:18:C6:3E:D3:F3:33:38:E6
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       2E19B4D8DF816E7EEEB664AC091B79A12AEBC1AB
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3235342e302f32332d3233203d3e2035363530.roa
Signing time:             Tue 13 Feb 2024 05:15:23 +0000
ROA not before:           Tue 13 Feb 2024 05:10:23 +0000
ROA not after:            Tue 11 Feb 2025 05:15:23 +0000
asID:                     5650
IP address blocks:        47.182.254.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:19:b4:d8:df:81:6e:7e:ee:b6:64:ac:09:1b:79:a1:2a:eb:c1:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Feb 13 05:10:23 2024 GMT
            Not After : Feb 11 05:15:23 2025 GMT
        Subject: CN=FAFD3018651C078186329D1918C63ED3F33338E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f2:28:13:ff:cb:84:21:8f:42:5c:eb:d4:93:
                    24:15:cc:4f:5e:94:39:9f:66:23:5d:be:07:89:d3:
                    71:9f:52:67:41:30:93:93:7a:b5:86:fb:cf:bf:0d:
                    d7:ea:8e:d0:b4:9d:59:9a:19:78:0d:3d:d7:f3:07:
                    68:fd:06:df:5f:33:b0:39:0f:1f:e5:06:92:39:9b:
                    13:07:0d:ec:74:54:ba:06:e0:95:f6:d2:58:aa:91:
                    7e:37:66:e3:75:63:44:05:da:7a:a7:7a:62:8b:88:
                    65:76:8a:7b:16:b9:8c:d2:07:54:b5:c6:8a:bd:40:
                    36:65:9f:fc:ad:c5:a0:66:a9:b1:2f:05:57:f6:e4:
                    47:57:d0:5c:5f:6a:4e:95:e1:f4:aa:a1:4d:31:e0:
                    26:57:90:bc:bb:ad:78:b4:a4:e1:ee:9c:1d:5e:4a:
                    71:c8:ed:01:4e:4d:f3:06:ca:8e:d6:11:a1:71:cd:
                    8d:bc:9e:d6:47:46:32:10:67:11:3a:96:bb:49:a5:
                    a8:c4:94:95:6e:f2:a4:16:a8:69:6d:28:b1:42:ac:
                    3f:3b:b7:54:5f:f2:ae:7b:d7:0e:0e:b9:df:e3:5a:
                    a7:12:7b:10:15:69:09:4c:d7:33:26:ab:05:3f:b1:
                    86:fb:2d:05:8c:a8:14:aa:d3:fd:ca:3c:14:00:88:
                    5c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FD:30:18:65:1C:07:81:86:32:9D:19:18:C6:3E:D3:F3:33:38:E6
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3235342e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.182.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:a2:25:de:81:7b:f9:05:fa:38:37:49:fe:d2:aa:dc:40:fc:
         e5:ec:dd:69:c5:d7:51:e4:a0:3a:51:86:9e:02:2a:08:de:ba:
         ca:ac:3a:ac:f5:22:bd:de:6f:65:d0:4d:57:99:20:5d:8b:00:
         fa:92:e6:28:b8:37:d5:45:85:d8:22:fb:da:77:01:69:ad:77:
         b8:0e:f8:4d:ed:b9:b4:05:39:a2:7a:d3:11:a3:da:ae:d2:bf:
         bd:10:66:6e:cd:72:9c:d1:f9:f6:16:5e:e8:d7:bb:4a:8d:f1:
         3a:13:06:70:40:da:01:f8:c6:73:eb:93:13:0f:a5:9c:e0:cd:
         0d:6f:92:f2:46:bb:09:43:e6:4e:2a:22:07:1c:2a:dc:b0:8e:
         d6:47:13:36:e2:a9:1f:cf:56:0f:f1:d8:73:e9:44:67:31:47:
         b4:59:fe:94:e5:dd:55:72:e5:a6:ec:7a:22:fa:2b:c5:88:6c:
         11:1d:dc:aa:ab:9c:db:7e:87:aa:09:79:8e:28:cf:83:c1:24:
         60:ca:dd:c1:bb:0c:ec:db:3c:37:33:7d:5f:7c:17:c6:da:32:
         5f:c9:48:a9:7a:b7:cd:a5:69:3f:7b:65:a8:27:93:6b:51:ed:
         68:ab:44:ba:aa:7c:74:c7:64:14:5d:d1:c1:eb:45:4a:be:fc:
         c9:10:f3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----