Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138332e34342e302f32342d3234203d3e2035363530.roa
File:                     34372e3138332e34342e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          lqsRTxAfzDz1OYm0QAghbuWmzWlfdsNt3E6FP+Uk8qc=
Subject key identifier:   17:80:B6:32:7C:33:B4:B3:8B:45:77:F4:1F:80:8B:FC:F3:9F:42:61
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       2E104214C848543FB0E2EFB191379312F8637E2E
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138332e34342e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:28:30 +0000
ROA not before:           Thu 02 Nov 2023 11:23:30 +0000
ROA not after:            Thu 31 Oct 2024 11:28:30 +0000
asID:                     5650
IP address blocks:        47.183.44.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:10:42:14:c8:48:54:3f:b0:e2:ef:b1:91:37:93:12:f8:63:7e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Nov  2 11:23:30 2023 GMT
            Not After : Oct 31 11:28:30 2024 GMT
        Subject: CN=1780B6327C33B4B38B4577F41F808BFCF39F4261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3b:91:05:02:4d:5a:d7:68:df:08:eb:ae:b4:
                    1b:41:86:e0:c9:d1:71:f7:5c:7e:dc:3a:49:aa:00:
                    5a:97:f4:07:35:d7:cc:48:80:e4:69:d7:3e:68:c0:
                    d7:56:dc:41:e9:1d:80:58:1d:2a:e6:7c:6d:3f:d8:
                    c2:61:47:5a:4c:bc:8f:c0:f0:c4:3f:b8:9f:4d:00:
                    00:1a:9a:14:ff:af:ef:51:96:c4:38:b4:9f:ea:5b:
                    d6:a6:1e:2e:42:eb:53:8e:4a:55:fb:b8:23:1f:2f:
                    de:f2:4e:e3:03:15:0c:14:59:19:63:8e:8d:f7:78:
                    82:b2:04:98:6c:4a:ab:a2:ba:1a:9a:e4:f2:df:f2:
                    49:c4:e3:4b:10:89:70:68:be:8e:14:2d:89:39:b0:
                    a4:9c:1f:18:5e:29:e1:4e:c1:0e:4c:20:06:c7:c3:
                    8a:50:96:be:13:f2:c7:2c:13:e6:ab:45:1b:e2:17:
                    15:b4:94:9d:89:7a:c2:f3:6a:a3:4b:81:d7:8e:8b:
                    dd:63:a3:97:51:6d:f6:50:c9:3c:c5:cd:23:9d:0e:
                    32:02:3e:01:8b:3c:e2:b6:06:6c:74:25:ce:8c:2a:
                    15:b8:73:ea:2d:17:37:81:1b:5f:54:14:33:85:d7:
                    b0:9a:28:9c:b3:2b:c3:d3:df:51:97:99:b4:38:f0:
                    08:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:80:B6:32:7C:33:B4:B3:8B:45:77:F4:1F:80:8B:FC:F3:9F:42:61
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138332e34342e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.183.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:e1:e1:d8:3b:e3:ae:2e:af:bd:b3:22:a5:ba:c9:55:a5:f3:
         f7:61:7e:ca:f6:5f:93:dd:c0:3a:fa:90:ba:d1:3b:a9:9b:ec:
         10:51:05:df:80:83:46:17:31:71:fd:23:8f:ff:f8:91:e8:54:
         af:fa:8f:b9:03:a6:41:bf:8a:bb:08:23:cd:77:47:0b:d4:c9:
         74:69:08:5c:9f:f1:f6:0b:a3:f6:1f:35:bd:1b:a5:cc:5b:b7:
         d6:44:2d:3a:b4:e1:fd:2c:19:8a:2f:4c:3f:05:47:e3:61:f6:
         35:29:67:1e:d6:b8:8c:2a:83:ba:a8:f2:d8:b2:c5:13:51:ab:
         82:c1:88:19:c2:e4:07:c6:b9:7a:36:fb:c9:4e:8b:36:62:3d:
         5f:10:38:ee:3f:35:d0:45:6a:f8:a9:1c:ee:9a:3e:ae:b8:13:
         42:2e:40:4a:aa:9d:ba:9a:ed:cf:d8:df:2f:9f:63:06:3f:5b:
         2e:3e:cb:56:69:40:6b:fc:d8:d8:73:29:5d:4c:dd:fc:c8:75:
         0c:cc:22:14:96:81:aa:b6:ad:a3:82:a4:fc:4d:2f:61:f9:4b:
         b0:86:4e:b4:60:f1:38:a6:7f:0f:31:25:7b:ba:75:94:28:f8:
         aa:b2:16:e9:9b:92:b0:84:d1:c6:bb:b4:5f:8c:d9:77:1b:82:
         02:5b:5b:05
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIULhBCFMhIVD+w4u+xkTeTEvhjfi4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYmMwZDY3MmFlOWRiZTg4MTM1ODkzZTNkYzE5YTg4NWEw
Njc4NTlmZGFlNjY4ZDVhNzcwHhcNMjMxMTAyMTEyMzMwWhcNMjQxMDMxMTEyODMw
WjAzMTEwLwYDVQQDEygxNzgwQjYzMjdDMzNCNEIzOEI0NTc3RjQxRjgwOEJGQ0Yz
OUY0MjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzuRBQJNWtdo
3wjrrrQbQYbgydFx91x+3DpJqgBal/QHNdfMSIDkadc+aMDXVtxB6R2AWB0q5nxt
P9jCYUdaTLyPwPDEP7ifTQAAGpoU/6/vUZbEOLSf6lvWph4uQutTjkpV+7gjHy/e
8k7jAxUMFFkZY46N93iCsgSYbEqroroamuTy3/JJxONLEIlwaL6OFC2JObCknB8Y
XinhTsEOTCAGx8OKUJa+E/LHLBPmq0Ub4hcVtJSdiXrC82qjS4HXjovdY6OXUW32
UMk8xc0jnQ4yAj4BizzitgZsdCXOjCoVuHPqLRc3gRtfVBQzhdewmiicsyvD099R
l5m0OPAIsQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFBeAtjJ8M7Szi0V39B+Ai/zz
n0JhMB8GA1UdIwQYMBaAFMsIhtIESKZjx89cThl5rG952wUgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzIv
Q0IwODg2RDIwNDQ4QTY2M0M3Q0Y1QzRFMTk3OUFDNkY3OURCMDUyMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzQ2YmYxZjAzLTJlYmQtNDA1ZS1hNWI3LTYyYmRmM2Q3ZGJlNi9iYzBk
NjcyYWU5ZGJlODgxMzU4OTNlM2RjMTlhODg1YTA2Nzg1OWZkYWU2NjhkNWE3Ny5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzIvMzQzNzJlMzEzODMzMmUzNDM0MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAvtywwDQYJKoZIhvcNAQELBQADggEB
AAjh4dg7464ur72zIqW6yVWl8/dhfsr2X5PdwDr6kLrRO6mb7BBRBd+Ag0YXMXH9
I4//+JHoVK/6j7kDpkG/irsII813RwvUyXRpCFyf8fYLo/YfNb0bpcxbt9ZELTq0
4f0sGYovTD8FR+Nh9jUpZx7WuIwqg7qo8tiyxRNRq4LBiBnC5AfGuXo2+8lOizZi
PV8QOO4/NdBFavipHO6aPq64E0IuQEqqnbqa7c/Y3y+fYwY/Wy4+y1ZpQGv82Nhz
KV1M3fzIdQzMIhSWgaq2raOCpPxNL2H5S7CGTrRg8Timfw8xJXu6dZQo+KqyFumb
krCE0ca7tF+M2XcbggJbWwU=
-----END CERTIFICATE-----