Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3131362e302f32322d3232203d3e2035363530.roa
File:                     34372e3134302e3131362e302f32322d3232203d3e2035363530.roa (raw, json)
Hash identifier:          OlphH9xFV1ZSwJr6qe13UBSo9t3ZIau2xgJxF8kPYo0=
Subject key identifier:   0D:8B:F9:20:F9:3B:FA:EE:26:50:9F:44:2C:3B:7B:F2:0C:8F:38:F8
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       250404BA1B74FAD03938875DB4499CE1EE4000A2
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3131362e302f32322d3232203d3e2035363530.roa
Signing time:             Thu 22 Feb 2024 05:06:21 +0000
ROA not before:           Thu 22 Feb 2024 05:01:21 +0000
ROA not after:            Thu 20 Feb 2025 05:06:21 +0000
asID:                     5650
IP address blocks:        47.140.116.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:04:04:ba:1b:74:fa:d0:39:38:87:5d:b4:49:9c:e1:ee:40:00:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Feb 22 05:01:21 2024 GMT
            Not After : Feb 20 05:06:21 2025 GMT
        Subject: CN=0D8BF920F93BFAEE26509F442C3B7BF20C8F38F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:94:28:22:c8:e3:75:7c:1b:b2:28:62:f2:55:
                    a0:90:fe:ac:6b:83:2e:19:0c:72:ed:c5:21:7b:41:
                    9a:97:5f:22:1d:fa:ae:5a:d6:ea:58:32:7b:fc:65:
                    fe:c1:76:5c:62:9a:9e:5c:27:2c:53:64:a1:3a:49:
                    46:a6:bd:58:82:29:49:e3:e9:34:9a:05:51:58:74:
                    2b:f9:a3:c1:f9:e4:e3:f4:20:0f:92:c8:20:19:b8:
                    85:5c:95:b0:f5:8e:33:f6:52:5b:57:e4:89:94:8f:
                    e8:a9:e7:99:cd:b7:ae:9d:0e:18:b7:40:31:04:22:
                    ff:00:36:86:b2:7c:52:aa:e9:94:a0:00:4a:33:1a:
                    86:df:20:56:b5:aa:e3:36:c5:a1:53:99:60:5f:2d:
                    96:33:67:c1:a4:f5:a0:a8:b2:e3:19:bd:6a:55:a4:
                    29:f8:09:0c:50:a0:b2:91:fa:79:48:a0:41:38:06:
                    47:7d:c9:01:1e:50:a7:90:e6:72:90:d4:69:0a:10:
                    b6:1c:96:f4:5e:da:a8:a9:d5:a3:84:ef:5b:56:54:
                    e7:29:3b:81:16:9c:c1:91:cc:f4:16:9e:cc:6d:7b:
                    db:3a:17:3c:dc:c4:4d:10:ab:b4:b4:65:28:15:9d:
                    bf:bb:b9:c5:1f:db:d5:f1:d5:b4:ab:7d:ad:b7:e3:
                    c9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8B:F9:20:F9:3B:FA:EE:26:50:9F:44:2C:3B:7B:F2:0C:8F:38:F8
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3131362e302f32322d3232203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.140.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:44:65:0f:a6:aa:b7:6a:2b:ad:26:2f:f7:d9:af:89:77:fa:
         82:eb:bd:3f:7f:97:70:aa:27:9b:ca:01:01:b7:46:ba:76:a9:
         88:29:82:d0:c9:1e:aa:43:06:b0:71:a9:e2:d7:a1:2c:dc:c2:
         cb:86:2a:26:bb:63:23:8d:7b:a0:9b:39:c5:10:ca:1a:55:4b:
         68:70:87:bc:09:6d:4e:b1:ef:0c:d2:53:f6:2c:3e:9c:34:4e:
         a3:d7:3c:59:1a:ce:7e:74:38:11:21:d0:be:2f:4d:1c:f4:61:
         d6:49:f9:46:e8:bb:ca:ee:c2:fa:e0:24:2e:f3:dc:6a:de:7c:
         79:8a:42:d4:1e:31:80:f2:86:0e:f2:ab:6b:0a:29:12:bf:28:
         9c:cc:7d:b1:68:2b:20:62:c9:95:69:5e:5c:be:b7:1b:1e:ea:
         60:88:8f:4c:ce:10:20:4d:45:4e:1c:13:d2:b9:ad:80:5e:67:
         a1:52:d2:de:9a:14:04:20:f7:18:e6:b6:47:c6:56:8b:bf:b7:
         5b:e7:4f:fa:a2:c7:79:2b:24:19:9d:5e:8e:2f:a0:14:f7:29:
         95:67:a6:c6:d6:4d:ea:e1:27:a4:46:46:4c:03:ff:a3:0d:a6:
         e0:81:93:09:08:82:59:97:9a:9d:ab:ad:58:6b:98:d4:5b:54:
         23:88:44:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----