Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3234382e302f32312d3231203d3e2035363530.roa
File:                     3137322e39352e3234382e302f32312d3231203d3e2035363530.roa (raw, json)
Hash identifier:          HOlOiHEXA0JsoFfsxq9Tl+zIWyV9/8wbYtPu3i7XZFY=
Subject key identifier:   18:C1:9A:33:73:4C:58:B9:8D:09:8E:44:29:79:F4:47:EF:F2:E6:F7
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       1E77C46948E7DD2550D372E9A87C6E6FC6BECED0
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3234382e302f32312d3231203d3e2035363530.roa
Signing time:             Tue 05 Mar 2024 06:04:16 +0000
ROA not before:           Tue 05 Mar 2024 05:59:16 +0000
ROA not after:            Tue 04 Mar 2025 06:04:16 +0000
asID:                     5650
IP address blocks:        172.95.248.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:77:c4:69:48:e7:dd:25:50:d3:72:e9:a8:7c:6e:6f:c6:be:ce:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Mar  5 05:59:16 2024 GMT
            Not After : Mar  4 06:04:16 2025 GMT
        Subject: CN=18C19A33734C58B98D098E442979F447EFF2E6F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:69:38:3d:86:3b:4b:81:28:b4:14:be:9e:9a:
                    d5:18:e1:99:b3:64:5b:6f:75:c5:1c:ef:62:08:c1:
                    dc:b6:45:2a:0c:d7:48:94:fb:e8:20:29:c1:68:97:
                    8a:14:a6:26:bd:07:e0:b9:5d:b4:6e:6f:89:37:1f:
                    e8:73:b6:38:24:be:78:b6:30:9a:54:02:2d:24:bd:
                    e1:bb:e3:18:9f:b3:f6:61:fe:07:40:76:e7:5c:62:
                    43:63:3e:2c:bb:c9:98:f3:c1:7c:a3:0b:b9:76:2e:
                    87:e5:56:7f:26:8b:20:84:1e:14:75:95:43:83:5b:
                    34:9b:ca:a4:01:dc:ce:ce:d4:ed:47:b7:b4:ed:fa:
                    44:b5:fc:74:d2:d4:55:4f:99:87:70:ad:ad:96:51:
                    32:94:7b:06:dd:98:fd:23:62:a1:3b:32:e4:e0:ef:
                    c3:44:e5:5d:10:f9:ec:9b:d5:a5:28:b1:84:78:bc:
                    2c:9c:0f:e3:1b:20:c8:28:31:95:37:d1:bf:b3:e7:
                    39:29:e4:b6:3b:f3:f4:ae:69:aa:39:6e:6a:b3:5a:
                    33:13:f8:37:fb:a1:90:ea:69:e1:ff:fa:95:23:d4:
                    3d:3e:da:54:04:00:b6:44:fe:8f:bb:91:20:75:4b:
                    48:f5:4b:fb:0f:90:01:04:d2:3b:7e:7a:3b:39:be:
                    b9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C1:9A:33:73:4C:58:B9:8D:09:8E:44:29:79:F4:47:EF:F2:E6:F7
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3234382e302f32312d3231203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.95.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:d1:55:bb:2d:93:07:f3:6e:07:fb:40:9e:4c:00:3a:04:0a:
         f3:31:20:81:52:b4:64:9a:be:d6:60:f8:58:b5:c1:56:13:a1:
         a8:b9:01:9c:55:e3:da:6b:43:d7:5f:cd:67:d9:58:f7:3d:7a:
         63:cb:6e:50:78:df:44:04:49:4e:5b:a8:15:b2:e2:81:b0:14:
         88:32:63:e0:7e:5b:f1:72:a8:96:1a:aa:0c:99:83:37:22:a5:
         7d:91:ff:c0:ea:5f:91:2d:65:a3:28:5f:d3:20:0e:22:3d:7b:
         85:0a:5f:12:e5:fd:b9:69:90:52:e0:35:d4:30:99:31:8b:6f:
         e8:23:a3:ca:51:c9:66:b0:e3:39:21:18:ab:e5:23:ca:c0:10:
         1e:12:f0:93:41:00:9f:86:16:96:a3:24:a2:21:24:99:cf:da:
         19:fe:af:ef:29:d5:83:41:5d:a8:ea:35:0b:ca:ca:a8:63:49:
         02:58:f4:2f:dd:ce:b6:e9:0e:5c:bf:b0:39:3c:47:71:b9:f9:
         93:e9:45:ed:6b:13:a5:8e:57:31:41:11:8d:aa:63:19:e4:74:
         f2:28:96:45:d3:2b:0f:47:c2:ba:9d:59:ef:6c:38:f2:37:80:
         37:24:09:68:63:a9:8e:80:f6:01:16:0e:17:b4:e6:33:f2:19:
         ca:e8:a3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----