Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3139302e3133342e302f32332d3233203d3e2035363530.roa
File:                     34372e3139302e3133342e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          nmKo6xZwu6bkJyxG8jBUJm2DZgEIhYLwKhP4c8TtOx4=
Subject key identifier:   89:F1:2A:71:78:90:FF:03:00:C8:D1:42:49:C8:7F:29:E0:2A:D8:EE
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       1243FBCBB8C9A66AA27FBD9EC9450E9649CBCA03
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3139302e3133342e302f32332d3233203d3e2035363530.roa
Signing time:             Tue 13 Feb 2024 05:18:46 +0000
ROA not before:           Tue 13 Feb 2024 05:13:46 +0000
ROA not after:            Tue 11 Feb 2025 05:18:46 +0000
asID:                     5650
IP address blocks:        47.190.134.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:43:fb:cb:b8:c9:a6:6a:a2:7f:bd:9e:c9:45:0e:96:49:cb:ca:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Feb 13 05:13:46 2024 GMT
            Not After : Feb 11 05:18:46 2025 GMT
        Subject: CN=89F12A717890FF0300C8D14249C87F29E02AD8EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b6:7f:c4:ea:0d:a3:3b:6b:77:f0:72:8e:7d:
                    2e:8e:bc:20:cd:2c:fd:c5:d0:9f:79:dd:35:47:4c:
                    7f:85:77:b5:d6:01:c2:7c:04:8f:5a:e4:c7:5b:c8:
                    f6:ce:fb:45:b4:b4:47:e6:fa:15:56:7d:1f:65:12:
                    88:ab:8a:bc:9f:80:09:33:a6:44:1f:f3:87:d4:45:
                    55:cb:db:dd:bc:6e:ff:e7:22:4d:13:4f:3c:ad:55:
                    8c:18:f1:83:24:55:6c:a5:b6:53:ef:1e:fb:e1:28:
                    35:4c:29:fd:f6:a3:b5:37:6f:2d:78:78:a2:f9:e0:
                    14:d3:0b:b8:ca:80:75:30:10:41:d4:a4:4c:cd:34:
                    0c:1c:c8:13:03:31:f3:74:3a:af:a2:67:fb:4b:41:
                    78:83:e9:2c:e6:9e:f2:56:68:04:31:fe:06:a1:c2:
                    1a:4d:02:89:48:13:2e:57:70:ca:8a:48:2f:54:8f:
                    fd:bd:40:5c:a3:4d:34:b1:71:3a:15:bb:12:10:78:
                    e7:bc:ea:3c:9c:67:45:b7:dc:e1:d6:ad:e9:8f:57:
                    17:1d:51:27:2f:9f:72:10:01:ef:80:ed:9f:ad:5d:
                    b3:df:c8:0d:8a:98:07:21:25:31:93:b1:8f:83:34:
                    7b:4c:89:70:93:1e:c4:9c:dc:84:ad:90:59:11:b0:
                    72:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F1:2A:71:78:90:FF:03:00:C8:D1:42:49:C8:7F:29:E0:2A:D8:EE
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3139302e3133342e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.190.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:05:f6:72:6d:89:ca:16:bc:51:ac:20:73:e9:3d:5d:04:b6:
         25:02:4f:32:e5:d2:6c:fb:ce:47:9c:e5:05:42:8f:1e:67:7f:
         3e:f9:d3:37:49:10:f1:38:33:7b:c6:77:8b:5f:b1:e0:a5:62:
         ba:05:ed:59:fc:0c:8c:99:b7:2c:f8:c5:bc:1c:1a:65:f9:6e:
         bb:b1:dd:52:cf:75:73:10:40:6f:4a:ec:63:f1:ef:e0:10:30:
         a5:01:6e:12:2b:70:68:f8:97:25:fe:26:39:f9:e1:e2:1a:b6:
         e4:30:e7:cf:aa:1a:54:0c:6f:9b:d7:9c:46:bf:62:4b:96:e7:
         73:ac:55:d7:85:49:15:d3:ff:ac:ab:cc:17:90:6e:b9:83:55:
         3f:52:8c:ce:82:b2:e4:5b:5c:05:44:25:dd:5c:41:0d:5a:74:
         74:43:e9:aa:3a:ca:b6:81:17:1f:be:a2:10:60:97:ad:c2:1f:
         b9:87:93:e2:82:f3:73:33:12:e9:5c:50:7a:44:71:cb:39:13:
         5c:9a:07:0d:e3:20:ec:03:59:2f:80:92:ac:63:8a:8f:18:08:
         09:82:66:02:99:e1:6f:de:b1:bf:0c:35:c4:d4:02:48:e3:90:
         52:56:78:4f:31:89:b6:27:05:8e:f6:56:57:19:38:65:c0:6a:
         a1:eb:14:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----