Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3139302e3139322e302f32332d3233203d3e2035363530.roa
File:                     34372e3139302e3139322e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          /MqBF/zG1HM5oFRbRpT9TLXIn0sP4AZaitBIF948A3Q=
Subject key identifier:   48:1B:F1:50:10:C2:DB:08:DF:16:C2:70:21:6D:B1:BF:12:51:70:55
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       6325F2D65714DFBF474A0A71867514AFE3F04ED9
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3139302e3139322e302f32332d3233203d3e2035363530.roa
Signing time:             Tue 13 Feb 2024 05:20:48 +0000
ROA not before:           Tue 13 Feb 2024 05:15:48 +0000
ROA not after:            Tue 11 Feb 2025 05:20:48 +0000
asID:                     5650
IP address blocks:        47.190.192.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:25:f2:d6:57:14:df:bf:47:4a:0a:71:86:75:14:af:e3:f0:4e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Feb 13 05:15:48 2024 GMT
            Not After : Feb 11 05:20:48 2025 GMT
        Subject: CN=481BF15010C2DB08DF16C270216DB1BF12517055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4f:da:fb:09:5a:e2:cc:3f:09:9a:b0:b6:ec:
                    10:dd:8f:4c:cc:ed:18:07:22:51:90:80:ff:4c:b6:
                    f0:31:9c:bd:04:b0:3d:21:1c:61:6b:5f:32:20:18:
                    2d:04:9d:03:22:d3:fd:e3:59:a2:c3:3c:57:23:06:
                    f4:ea:d4:bb:63:6f:16:da:97:73:de:5e:40:22:9c:
                    08:68:80:b9:8a:49:62:82:13:3f:17:df:94:cc:f5:
                    50:6c:e6:fd:7b:d0:86:32:de:0c:63:54:3f:fd:62:
                    7a:cf:6b:cf:42:85:11:19:55:e3:2b:1b:be:00:e7:
                    89:36:3c:71:88:44:f9:6c:3a:7e:bf:d1:58:6e:9c:
                    34:0e:4d:af:f3:ef:aa:ae:af:82:4f:77:b2:3d:3e:
                    f1:cc:a2:37:d0:02:f0:68:0c:78:18:38:0e:88:a2:
                    85:74:f4:86:0b:19:ef:ba:1a:2c:7c:43:d4:ff:b5:
                    33:00:f9:8f:32:83:0c:5c:f9:ba:fb:22:fb:d4:aa:
                    47:b1:12:6a:91:83:7c:f7:51:c8:f4:71:25:0f:9f:
                    55:32:6d:fa:9c:62:8d:d4:7a:d6:e2:19:9a:9f:81:
                    fe:81:2a:f7:3e:13:2f:9a:63:60:c6:61:f1:4d:ed:
                    7a:9e:e1:1c:f8:60:67:6e:d4:80:ff:de:6b:31:cc:
                    29:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1B:F1:50:10:C2:DB:08:DF:16:C2:70:21:6D:B1:BF:12:51:70:55
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3139302e3139322e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.190.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:de:c3:ae:b7:b2:ce:35:af:23:41:68:a6:33:03:76:7a:86:
         fd:d9:02:ee:d3:1d:7d:c2:66:2c:6f:bc:15:ea:a1:eb:2f:de:
         ec:67:66:4e:32:36:e8:26:ec:5f:cb:8b:39:76:13:59:66:44:
         e6:e4:c9:63:60:73:3f:00:47:1e:80:7b:ba:1d:ca:f0:37:1c:
         62:b1:7d:4c:b1:33:bc:fe:67:f8:dd:5d:f1:96:81:0e:60:70:
         1e:34:2b:a4:2a:64:2f:bd:84:b4:76:e5:bf:50:e7:01:b0:1b:
         d6:00:6e:23:7e:d1:82:e8:dc:8f:c2:e7:ab:0a:ad:34:6d:de:
         60:b5:6f:fe:c4:9d:43:a4:63:1a:57:a4:63:79:6d:24:50:90:
         33:74:a1:44:f9:94:27:de:79:77:33:9e:01:5b:a5:8c:77:11:
         e2:d2:31:3f:f1:ae:eb:85:69:ef:4f:5a:ac:ee:0f:d9:f8:a9:
         39:64:f1:4e:29:fa:5c:3a:0d:2d:8f:30:a2:38:53:94:0b:be:
         30:29:53:65:00:ac:32:f3:a2:aa:01:2b:12:80:20:48:17:a0:
         b8:7f:25:4b:32:5a:78:69:11:3b:35:3b:9e:3a:2b:a3:49:a9:
         78:bd:de:c9:e9:17:76:2c:76:9e:f3:f4:b6:68:9c:50:1e:e1:
         33:67:2a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----