Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138382e3235342e302f32332d3233203d3e2035363530.roa
File:                     34372e3138382e3235342e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          5WVY/NNw+jWJKyhrlW7l+PFKfLp1hay1tOOSeQl9H7I=
Subject key identifier:   5C:EA:39:F8:40:02:A9:DF:2B:1B:44:6F:5D:69:3C:0E:8A:E0:CA:54
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       01BA0B3ABADCB6C6579D523C39303AF674657981
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138382e3235342e302f32332d3233203d3e2035363530.roa
Signing time:             Tue 13 Feb 2024 05:17:21 +0000
ROA not before:           Tue 13 Feb 2024 05:12:21 +0000
ROA not after:            Tue 11 Feb 2025 05:17:21 +0000
asID:                     5650
IP address blocks:        47.188.254.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ba:0b:3a:ba:dc:b6:c6:57:9d:52:3c:39:30:3a:f6:74:65:79:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Feb 13 05:12:21 2024 GMT
            Not After : Feb 11 05:17:21 2025 GMT
        Subject: CN=5CEA39F84002A9DF2B1B446F5D693C0E8AE0CA54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e0:5f:6c:68:9a:0b:83:e0:43:0c:ec:c0:7f:
                    7b:c1:d4:19:ce:29:0a:15:43:ed:80:96:72:a5:5a:
                    19:b7:1e:43:5a:59:73:79:c9:df:8a:cb:12:c6:24:
                    49:98:d5:25:ed:21:42:70:1a:fd:56:b1:15:77:80:
                    1d:04:47:fb:50:b5:34:4e:a8:96:60:1a:02:71:c3:
                    06:2e:02:d8:52:f6:0e:d1:12:7c:d5:ce:7e:40:7e:
                    c1:56:c2:ba:15:04:da:6b:b7:77:6b:ee:df:0c:4a:
                    41:c1:38:93:81:4f:01:9b:6b:3a:4d:7a:32:db:4b:
                    14:ed:a8:4e:11:4a:a9:86:a9:f1:35:8b:82:b7:8b:
                    7e:1a:f1:97:ba:c2:04:8b:8b:c9:c4:0b:66:1a:9a:
                    d4:aa:03:0d:62:86:1a:05:79:2d:7c:bd:03:18:03:
                    cd:b2:a6:bc:64:b6:9f:c7:af:4c:c3:7e:8a:7f:eb:
                    6e:0f:a9:4c:5b:95:47:d1:50:52:5f:a2:a9:f8:5e:
                    8f:46:68:b9:8d:4b:09:89:10:57:77:37:76:21:40:
                    31:e7:ee:4e:ee:ea:18:be:fc:bd:d2:9f:19:70:d8:
                    00:fa:f5:92:4d:3c:ec:92:fa:5c:fd:a5:50:11:13:
                    11:bb:f5:69:59:1e:89:4a:8e:bb:79:e9:40:dc:81:
                    14:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EA:39:F8:40:02:A9:DF:2B:1B:44:6F:5D:69:3C:0E:8A:E0:CA:54
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138382e3235342e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.188.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:4f:fe:a1:2d:05:c0:a0:9a:43:d4:12:2c:48:29:b4:82:23:
         3c:b7:2e:f3:2c:fb:73:a0:5c:42:1d:b9:aa:69:53:6c:73:ec:
         d4:f2:8a:e5:2d:f7:d3:2c:57:17:8a:d5:f5:cf:31:17:3e:d9:
         ab:12:6a:bc:38:28:39:c0:51:c7:7a:8c:b9:2c:a3:e5:69:4b:
         b2:49:e0:1f:b7:10:a0:b5:59:89:b9:da:1b:ab:fd:90:1e:b4:
         31:9c:41:7d:ae:1c:29:c3:0f:62:83:44:1b:c9:fb:61:53:e1:
         d1:62:23:3f:2e:c1:27:5c:7e:52:8f:28:ae:e5:f5:f4:e9:c2:
         48:9b:b3:4b:3c:c2:d7:78:bd:94:a6:ab:07:7e:f2:17:de:6e:
         c1:0b:71:7f:46:50:8f:f3:b4:20:6a:3c:92:ae:86:1b:0b:0d:
         62:53:1f:ce:91:15:d3:3c:9f:71:72:70:a9:f6:cf:a1:2e:90:
         1f:1d:9b:92:12:62:99:70:5f:9f:50:30:76:7b:08:b2:fb:b6:
         3e:38:51:c4:9e:3e:6d:3a:79:d3:48:2d:62:1f:f2:73:16:dc:
         97:60:3a:01:f1:3e:4a:37:28:3b:76:20:f3:af:13:57:05:64:
         62:8d:bb:de:9f:23:a5:18:63:85:d7:f8:f0:64:30:33:fd:32:
         0b:49:0f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----