Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e3130322e37342e302f32332d3233203d3e2035363530.roa
File:                     3137322e3130322e37342e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          AEgNJ3tPBSDDXujPm1CNjmEC2quARfHE3vIQrmikf/s=
Subject key identifier:   71:12:32:F1:38:88:B8:6C:62:6F:47:1C:77:22:FB:F9:F5:75:01:8F
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       3C6D2FD0EE811EF958E915AE59AF73876D358610
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e3130322e37342e302f32332d3233203d3e2035363530.roa
Signing time:             Tue 13 Feb 2024 05:19:23 +0000
ROA not before:           Tue 13 Feb 2024 05:14:23 +0000
ROA not after:            Tue 11 Feb 2025 05:19:23 +0000
asID:                     5650
IP address blocks:        172.102.74.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6d:2f:d0:ee:81:1e:f9:58:e9:15:ae:59:af:73:87:6d:35:86:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Feb 13 05:14:23 2024 GMT
            Not After : Feb 11 05:19:23 2025 GMT
        Subject: CN=711232F13888B86C626F471C7722FBF9F575018F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5a:49:1b:36:95:e8:f8:57:8c:a2:75:9a:c6:
                    3a:d1:65:85:f6:f7:62:7c:2a:50:5e:3a:42:2d:fe:
                    c5:d5:e8:e9:c7:68:5e:13:37:2d:11:35:14:d5:7b:
                    03:de:39:9c:a8:dc:9e:f6:8f:d2:66:6a:8b:92:45:
                    48:2e:77:2e:c2:61:84:a5:6c:4d:73:a8:f1:1f:4b:
                    2f:6e:d8:c9:54:32:19:f2:4f:3c:94:ce:1f:cc:4d:
                    52:94:8a:d4:98:91:97:3e:08:61:ea:4e:63:2c:87:
                    37:4e:bc:02:fb:bb:85:57:de:d2:62:45:fa:01:27:
                    b4:2f:ca:80:ff:3e:d0:83:01:a7:41:44:40:ed:a1:
                    c6:b5:ce:91:6e:b2:4f:e4:20:5d:1b:05:40:54:72:
                    55:25:af:af:d4:88:77:82:6b:18:4f:2e:c6:0b:7a:
                    73:de:e3:4e:69:02:ea:df:81:b0:50:a2:57:c5:5c:
                    fb:a7:76:1f:6e:14:17:35:17:03:01:a4:27:43:c5:
                    94:32:12:a4:d1:9d:92:50:ec:b7:cc:cc:04:83:1e:
                    66:1a:4a:38:42:8f:4c:c0:ae:82:9b:f9:ba:bb:85:
                    d0:5e:b0:29:ec:09:08:3b:35:a7:84:fe:68:d3:00:
                    7a:0d:43:af:b4:8c:7b:32:a7:ef:b3:9c:99:1d:2a:
                    94:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:12:32:F1:38:88:B8:6C:62:6F:47:1C:77:22:FB:F9:F5:75:01:8F
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e3130322e37342e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:ac:a7:63:12:fd:53:52:d1:9c:8a:e9:f0:d7:9b:ec:4b:8a:
         d8:85:30:0d:47:16:87:57:39:b5:22:29:be:8d:9c:7f:60:8e:
         ed:4d:25:40:e1:d4:10:20:36:48:d7:03:68:2e:7a:9a:e2:c2:
         60:af:f7:bc:1d:9b:1a:33:8b:11:72:49:64:3f:65:ba:ef:cd:
         a6:ed:29:2c:05:89:a4:81:77:2b:b8:2e:53:24:56:e2:c8:57:
         26:4b:20:24:6c:84:e0:96:d9:74:a0:d0:20:7d:7c:64:24:ef:
         79:d5:e5:a3:8e:27:02:a2:59:68:a9:de:cd:65:0f:dc:97:83:
         dc:88:7c:0f:bc:6a:47:ae:46:ac:e0:eb:e5:a1:30:6b:e6:c1:
         5d:d4:cf:90:ec:38:a6:44:6c:a2:19:a1:c6:46:4f:bc:68:09:
         a5:52:68:d7:aa:f9:47:aa:68:ee:23:cd:e8:c3:d3:67:fd:3c:
         a1:2e:d4:ef:de:f6:da:a2:f7:06:54:03:77:d0:e7:71:b2:95:
         08:a6:f5:7e:b3:27:f8:72:60:17:a7:62:b9:c0:cb:6e:44:e9:
         56:88:0f:26:d1:b9:5f:36:af:1d:e7:75:43:56:c9:ce:35:2d:
         e8:0a:0e:30:40:82:d8:85:0f:59:55:61:92:c3:c9:18:90:64:
         4e:e0:87:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----