Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3131322e302f32322d3232203d3e2035363530.roa
File:                     34372e3134302e3131322e302f32322d3232203d3e2035363530.roa (raw, json)
Hash identifier:          s1t4+tDOvSSqOdh+WpyItlVfoT0TK00a/6GO1RJCJeY=
Subject key identifier:   77:31:CB:34:3D:C8:37:65:FB:82:8A:31:A3:74:BF:42:E6:7D:B9:67
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       787CC904A7AEDD20E5175AF4C22BF5CA02E00E39
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3131322e302f32322d3232203d3e2035363530.roa
Signing time:             Thu 22 Feb 2024 05:06:11 +0000
ROA not before:           Thu 22 Feb 2024 05:01:11 +0000
ROA not after:            Thu 20 Feb 2025 05:06:11 +0000
asID:                     5650
IP address blocks:        47.140.112.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7c:c9:04:a7:ae:dd:20:e5:17:5a:f4:c2:2b:f5:ca:02:e0:0e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Feb 22 05:01:11 2024 GMT
            Not After : Feb 20 05:06:11 2025 GMT
        Subject: CN=7731CB343DC83765FB828A31A374BF42E67DB967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cc:b6:bd:42:c9:99:ff:a8:a5:8e:fe:e6:86:
                    59:9a:76:e7:d9:14:f6:d4:42:ca:78:83:ad:35:ce:
                    8e:86:7b:19:31:fb:7c:a1:97:99:fa:a7:87:16:6f:
                    56:9e:cc:a1:fd:2d:b6:2d:ff:6e:8e:21:0c:a8:0b:
                    24:95:29:cb:20:b2:b6:2c:04:1a:91:31:01:26:1c:
                    ff:19:ac:4a:0c:49:18:b1:0c:c2:86:53:d6:23:3f:
                    df:cd:82:90:01:da:7c:b4:7a:25:98:17:52:07:8d:
                    f1:0a:a4:b7:75:e3:b6:f3:ed:3c:dd:71:c8:11:c1:
                    ad:85:d5:92:96:3c:48:a6:8f:c4:96:ed:7d:3a:c5:
                    e8:5a:17:05:af:c7:0d:8e:da:c0:0d:a7:34:c7:3f:
                    28:70:65:cd:f0:57:9d:7d:28:70:bb:42:39:ff:e1:
                    39:be:a7:48:43:da:5f:33:ea:89:51:ff:7c:94:2d:
                    ce:8c:1a:e4:be:94:3e:b3:49:89:eb:2a:ce:59:81:
                    b1:72:39:91:1d:14:80:e9:d8:36:f3:d6:e5:f0:88:
                    36:14:01:fb:cb:64:c0:75:07:97:d9:5a:4b:22:b8:
                    1c:a0:fb:5c:92:aa:b2:c1:a6:39:f8:29:e5:2f:a7:
                    c2:f9:b0:3f:b9:01:d2:58:04:d4:11:1e:82:e1:3c:
                    96:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:31:CB:34:3D:C8:37:65:FB:82:8A:31:A3:74:BF:42:E6:7D:B9:67
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3131322e302f32322d3232203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.140.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:32:c7:a9:52:ca:a8:c0:36:38:e9:ab:46:c7:e0:15:96:a1:
         9f:54:e2:9c:63:a1:22:2a:50:8d:76:af:34:f8:b4:2c:7b:6f:
         b9:32:ed:42:83:9f:94:0f:56:d2:4d:3c:58:82:21:5e:06:78:
         21:24:ae:dd:91:43:ab:e6:52:98:97:a8:2d:c2:d5:95:37:e3:
         d2:83:5a:61:d7:09:45:0b:94:27:e6:f4:f2:12:89:91:16:a9:
         26:3d:e2:37:4f:5b:15:59:57:97:18:b5:55:47:88:ae:4a:40:
         81:b5:e4:87:87:4b:1b:ec:b6:60:22:57:eb:84:3a:be:07:18:
         54:da:da:e3:85:f0:3a:8f:b4:e8:3a:94:1d:4d:82:6f:d0:48:
         57:09:d6:92:ab:d7:fc:5a:66:1a:4c:0a:c9:02:7d:e8:c3:ce:
         3a:12:38:b5:9a:cd:d1:c2:c7:15:bb:aa:c1:78:ac:16:76:3a:
         b2:ff:fd:56:d6:c2:82:b5:0f:41:66:9e:b0:f6:cb:0e:ff:ec:
         73:e2:a7:a0:40:a7:40:07:50:a4:c8:3d:9c:16:b3:2f:c4:13:
         b1:08:00:91:d1:74:7f:7d:2c:2f:c2:5d:77:46:a6:bd:22:82:
         cf:d3:9c:47:2e:bc:64:09:fd:27:34:4b:a1:22:6a:ce:4e:de:
         ed:f5:bd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----