Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e36302e302f32332d3233203d3e2035363530.roa
File:                     34372e3138392e36302e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          ihxhUbYVQKBYVHxyc+lnDsshctJmBdI2xTVpG19UQAQ=
Subject key identifier:   D4:7E:92:D2:7A:87:A7:35:67:82:96:4E:D7:84:C2:67:CA:D1:88:7E
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       30063C1C09CE1828A72F7A1B8A39BF9B8A4A2BE8
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e36302e302f32332d3233203d3e2035363530.roa
Signing time:             Tue 13 Feb 2024 05:17:51 +0000
ROA not before:           Tue 13 Feb 2024 05:12:51 +0000
ROA not after:            Tue 11 Feb 2025 05:17:51 +0000
asID:                     5650
IP address blocks:        47.189.60.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:06:3c:1c:09:ce:18:28:a7:2f:7a:1b:8a:39:bf:9b:8a:4a:2b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Feb 13 05:12:51 2024 GMT
            Not After : Feb 11 05:17:51 2025 GMT
        Subject: CN=D47E92D27A87A7356782964ED784C267CAD1887E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f4:80:9f:9d:19:e5:f6:dd:64:9b:b4:05:c4:
                    3a:e3:a2:33:2c:58:e9:2f:b2:a7:74:c9:ee:0c:21:
                    0e:e7:af:85:9a:6f:fa:5b:5f:ea:14:27:61:31:ef:
                    03:3e:e5:e4:44:84:cd:d2:6d:97:b9:d1:6d:f3:f5:
                    a4:cb:a4:62:f1:4e:6c:9a:65:71:8d:2c:9b:d9:49:
                    e9:e3:16:fe:5e:9f:4e:aa:4c:03:62:b0:d6:37:70:
                    17:eb:c7:ac:d4:cb:b3:28:94:86:69:41:62:21:1d:
                    20:10:fa:d9:a2:5e:32:22:f4:ba:f3:0c:ce:b9:4a:
                    b7:80:a5:02:74:fd:27:08:86:46:e0:16:3a:88:ca:
                    53:7f:8c:13:5b:49:44:a2:74:f5:bc:66:0f:44:8d:
                    e8:86:44:aa:68:43:fa:32:39:61:9f:47:16:df:25:
                    78:a9:00:1d:06:56:4c:bb:55:56:a3:19:0b:dc:9c:
                    63:ea:6f:49:25:22:88:04:83:2b:93:cc:75:92:42:
                    5e:c8:74:79:a6:07:18:1d:a0:d2:75:c4:37:b2:c4:
                    0e:e5:26:2d:fd:75:de:eb:91:f1:4c:82:92:1c:84:
                    c8:36:f7:4c:73:6c:3f:d2:b8:6c:9a:3e:10:35:9c:
                    ed:0e:e9:46:60:b3:b2:f1:f0:d3:54:5d:ca:64:46:
                    63:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7E:92:D2:7A:87:A7:35:67:82:96:4E:D7:84:C2:67:CA:D1:88:7E
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e36302e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.189.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:16:81:45:55:5b:c2:39:c4:97:39:d4:06:26:c2:47:62:a6:
         d9:73:24:85:6d:3e:0c:0f:46:8a:1f:58:3f:01:d2:8a:e8:57:
         51:bb:8e:e5:8c:c4:d3:27:b5:ad:9c:c2:7a:20:4e:1a:eb:24:
         9c:95:db:f4:04:e6:4c:6b:ef:fd:13:10:5b:43:87:ad:e7:2f:
         97:1e:75:26:fb:ad:11:33:46:40:57:0e:fd:1c:56:46:28:0a:
         76:38:f9:5e:fd:12:24:f3:4c:b8:df:82:39:fd:f4:13:e7:6d:
         91:e1:47:80:a3:96:24:49:95:6b:f1:a8:98:da:dd:9f:df:ec:
         ab:52:5d:39:16:50:58:1b:66:3f:28:81:b4:c2:8e:48:e3:0a:
         3d:99:04:9d:26:f9:80:5a:cf:c5:df:28:fb:18:70:50:02:38:
         dd:73:58:63:30:f1:98:10:8d:7f:0f:25:51:7e:48:92:01:6c:
         bd:12:be:72:3b:5d:0c:a1:75:91:f3:36:81:de:9b:04:95:87:
         d3:92:ae:61:91:75:7a:76:3f:0c:2e:b6:c8:7b:84:a3:b3:e9:
         3e:69:7a:cd:19:11:05:38:00:a0:f5:1c:83:2f:1f:ba:c0:39:
         df:8c:1d:06:cd:09:28:cb:3f:ca:cf:06:aa:14:64:5b:4a:53:
         31:fd:c3:8c
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUMAY8HAnOGCinL3obijm/m4pKK+gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYmMwZDY3MmFlOWRiZTg4MTM1ODkzZTNkYzE5YTg4NWEw
Njc4NTlmZGFlNjY4ZDVhNzcwHhcNMjQwMjEzMDUxMjUxWhcNMjUwMjExMDUxNzUx
WjAzMTEwLwYDVQQDEyhENDdFOTJEMjdBODdBNzM1Njc4Mjk2NEVENzg0QzI2N0NB
RDE4ODdFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPSAn50Z5fbd
ZJu0BcQ646IzLFjpL7KndMnuDCEO56+Fmm/6W1/qFCdhMe8DPuXkRITN0m2XudFt
8/Wky6Ri8U5smmVxjSyb2Unp4xb+Xp9OqkwDYrDWN3AX68es1MuzKJSGaUFiIR0g
EPrZol4yIvS68wzOuUq3gKUCdP0nCIZG4BY6iMpTf4wTW0lEonT1vGYPRI3ohkSq
aEP6Mjlhn0cW3yV4qQAdBlZMu1VWoxkL3Jxj6m9JJSKIBIMrk8x1kkJeyHR5pgcY
HaDSdcQ3ssQO5SYt/XXe65HxTIKSHITINvdMc2w/0rhsmj4QNZztDulGYLOy8fDT
VF3KZEZjaQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNR+ktJ6h6c1Z4KWTteEwmfK
0Yh+MB8GA1UdIwQYMBaAFMsIhtIESKZjx89cThl5rG952wUgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzIv
Q0IwODg2RDIwNDQ4QTY2M0M3Q0Y1QzRFMTk3OUFDNkY3OURCMDUyMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzQ2YmYxZjAzLTJlYmQtNDA1ZS1hNWI3LTYyYmRmM2Q3ZGJlNi9iYzBk
NjcyYWU5ZGJlODgxMzU4OTNlM2RjMTlhODg1YTA2Nzg1OWZkYWU2NjhkNWE3Ny5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzIvMzQzNzJlMzEzODM5MmUzNjMwMmUzMDJmMzIzMzJkMzIzMzIw
M2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEvvTwwDQYJKoZIhvcNAQELBQADggEB
AHAWgUVVW8I5xJc51AYmwkdiptlzJIVtPgwPRoofWD8B0oroV1G7juWMxNMnta2c
wnogThrrJJyV2/QE5kxr7/0TEFtDh63nL5cedSb7rREzRkBXDv0cVkYoCnY4+V79
EiTzTLjfgjn99BPnbZHhR4CjliRJlWvxqJja3Z/f7KtSXTkWUFgbZj8ogbTCjkjj
Cj2ZBJ0m+YBaz8XfKPsYcFACON1zWGMw8ZgQjX8PJVF+SJIBbL0SvnI7XQyhdZHz
NoHemwSVh9OSrmGRdXp2Pwwutsh7hKOz6T5pes0ZEQU4AKD1HIMvH7rAOd+MHQbN
CSjLP8rPBqoUZFtKUzH9w4w=
-----END CERTIFICATE-----