Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3231362e302f32342d3234203d3e2035363530.roa
File:                     34372e3138392e3231362e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          BNn00a6t3o+jPqvbYj+0O7EDPo7QXOhx9mFpvPx9WyE=
Subject key identifier:   F7:67:7A:2F:3D:4D:CE:8E:80:94:DD:8E:F9:62:88:F8:FF:53:6E:81
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       7A214DC484676EAAC50FBA89C611854E4F89AB91
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3231362e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:32:08 +0000
ROA not before:           Thu 02 Nov 2023 11:27:08 +0000
ROA not after:            Thu 31 Oct 2024 11:32:08 +0000
asID:                     5650
IP address blocks:        47.189.216.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:21:4d:c4:84:67:6e:aa:c5:0f:ba:89:c6:11:85:4e:4f:89:ab:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Nov  2 11:27:08 2023 GMT
            Not After : Oct 31 11:32:08 2024 GMT
        Subject: CN=F7677A2F3D4DCE8E8094DD8EF96288F8FF536E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cd:2f:43:50:c0:14:d8:b1:8b:bd:76:df:b1:
                    f4:ce:54:4d:f2:05:87:08:c9:0d:8b:08:41:89:c5:
                    d3:39:01:59:c1:ef:5a:b4:cf:e6:ab:14:74:b1:7c:
                    ca:4e:ca:58:4b:00:55:6b:79:df:1b:bf:ab:c1:27:
                    35:7b:86:dd:87:d1:ca:11:5e:7f:20:e3:84:d7:96:
                    de:c3:4a:02:b7:38:ca:54:3a:a5:46:59:31:5c:c3:
                    4a:ff:f8:32:f8:0e:d3:85:20:39:a8:6f:ea:06:b4:
                    43:51:26:2d:21:b9:1b:c1:d5:19:93:8b:a4:95:cc:
                    a5:a9:b8:c6:ca:e1:19:b4:61:ac:63:04:3b:dc:ee:
                    e1:39:b3:f3:15:ed:ef:6a:a9:9f:f2:47:fb:3b:78:
                    3d:cc:a4:5a:33:04:8b:d4:e2:9f:fb:d9:07:ee:b0:
                    d8:56:b3:f9:37:15:67:78:38:81:b0:1a:39:d6:9b:
                    0d:11:55:13:ce:ff:04:f9:9e:38:73:27:a6:03:68:
                    db:a6:9d:31:ac:df:df:5d:3f:96:d7:2e:90:af:e4:
                    e5:5d:3f:53:64:61:73:28:16:e5:9e:35:a1:0c:cb:
                    0c:c5:35:f4:55:f5:ef:ef:f7:d1:66:33:32:e7:e3:
                    4e:59:4a:06:80:30:ed:1b:54:fb:41:88:8e:45:cf:
                    b9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:67:7A:2F:3D:4D:CE:8E:80:94:DD:8E:F9:62:88:F8:FF:53:6E:81
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3231362e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.189.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:0a:14:0f:06:b0:8c:31:6f:30:b2:e4:cb:b0:a3:75:2b:92:
         c4:d5:5b:57:12:bf:ac:df:07:dc:a8:36:1b:3a:57:08:d7:97:
         70:16:63:20:d3:ed:29:56:e2:c0:52:1d:69:f3:36:70:6b:a4:
         9c:2e:e5:79:0b:db:6f:c2:e9:d9:bc:88:9c:23:bb:20:d5:fe:
         b5:5e:94:34:ec:0e:5c:99:50:4f:f3:7a:b1:1b:b5:07:7c:1c:
         60:f2:2d:cf:93:ca:33:8c:d5:1c:eb:de:3a:6d:83:75:02:0c:
         14:0a:9a:5e:c9:b0:87:d0:dd:14:7a:7d:15:c3:1d:0d:e5:22:
         07:c4:d3:f4:7b:7d:00:94:43:fb:68:f8:20:9a:f9:a4:36:51:
         80:a7:7d:34:ec:f4:4a:68:f5:d3:88:4d:d3:27:eb:b5:5e:7c:
         76:d3:d4:b5:de:0d:22:fe:39:6b:0f:33:65:b2:58:4c:9c:75:
         97:bd:10:fa:07:82:b2:c9:6e:be:53:5a:3b:ed:ce:dd:78:ad:
         95:b0:82:1e:f3:98:e2:9b:5a:67:ce:a3:f4:76:a2:a2:bf:99:
         09:af:a8:a5:b7:4b:c4:18:54:53:f7:83:20:35:02:30:86:c1:
         40:b3:42:78:27:88:01:52:76:39:8f:48:37:cb:5a:f2:d4:59:
         db:fb:c2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----