Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3231362e302f32322d3232203d3e2035363530.roa
File:                     34372e3134302e3231362e302f32322d3232203d3e2035363530.roa (raw, json)
Hash identifier:          6sxV/4Z+oyt2BhAhlRkEwSFF9advoQseMnGUj7o+h0A=
Subject key identifier:   A6:A5:18:AC:3C:41:22:A5:25:BD:6E:45:6E:E9:CF:63:08:25:73:DC
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       4900318F60F438282AF21CC1E48D7180FC5750ED
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3231362e302f32322d3232203d3e2035363530.roa
Signing time:             Thu 22 Feb 2024 05:06:48 +0000
ROA not before:           Thu 22 Feb 2024 05:01:48 +0000
ROA not after:            Thu 20 Feb 2025 05:06:48 +0000
asID:                     5650
IP address blocks:        47.140.216.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:00:31:8f:60:f4:38:28:2a:f2:1c:c1:e4:8d:71:80:fc:57:50:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Feb 22 05:01:48 2024 GMT
            Not After : Feb 20 05:06:48 2025 GMT
        Subject: CN=A6A518AC3C4122A525BD6E456EE9CF63082573DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:18:d8:66:1c:3e:56:eb:9b:64:f4:07:a6:0e:
                    df:7e:3b:b1:f5:7d:1b:74:fc:26:6f:c5:a5:9f:fe:
                    ca:19:90:90:e2:04:3f:c6:57:35:b0:f3:3d:cb:1f:
                    0d:44:64:e9:be:f9:53:0a:f1:c8:80:d2:ec:37:c6:
                    77:b9:b1:46:15:70:3e:7b:2e:f6:e7:09:08:b5:f0:
                    5e:ea:d7:9f:7c:ce:6b:0b:c6:e7:bb:81:19:fb:74:
                    3f:f4:25:d3:e9:0a:9a:49:6b:c9:57:93:f0:a9:00:
                    43:82:73:45:b9:a0:44:3c:7b:1a:7d:a6:27:c5:37:
                    e1:c7:3b:05:e4:00:4e:b9:eb:ac:aa:29:3b:34:34:
                    f1:7b:7c:a7:e7:e3:a0:42:c2:32:96:e2:a4:c8:16:
                    05:36:99:02:42:07:53:87:2a:3c:28:02:ad:14:83:
                    30:04:4a:4d:43:6a:c2:10:a2:45:fc:c9:47:f4:a6:
                    75:3c:2a:bf:96:0a:61:13:f0:95:ee:78:57:b0:f9:
                    2d:4a:55:1d:86:3b:03:71:fb:47:ca:41:41:87:dd:
                    bd:14:ec:0b:36:33:d2:8b:63:e0:8e:e9:3d:1f:d3:
                    5e:1f:51:24:ef:c0:c7:82:53:4c:d0:8f:0f:be:7f:
                    10:37:a2:4b:69:e3:82:58:72:03:86:69:f2:38:7e:
                    f4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A5:18:AC:3C:41:22:A5:25:BD:6E:45:6E:E9:CF:63:08:25:73:DC
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3231362e302f32322d3232203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.140.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:3b:d2:8a:fa:77:94:e7:c7:ae:19:0b:59:90:11:65:7c:33:
         8a:ae:c4:6c:f9:73:a4:18:83:d5:c4:6e:86:b1:8e:3a:49:91:
         f8:c9:20:61:0e:21:03:9a:27:68:92:d3:37:6c:e3:24:da:b9:
         02:66:7c:ac:03:48:d3:22:d4:60:e0:ec:96:23:97:2e:60:56:
         f9:56:f9:c8:c3:e2:02:e1:d5:18:73:70:b3:43:43:f8:c4:7c:
         01:8d:28:62:6e:eb:4f:74:2c:13:76:72:af:5e:e6:00:dc:fb:
         6a:e7:6a:8c:51:e8:4b:ed:70:eb:9f:5b:bb:35:4c:b6:84:bd:
         15:f5:0c:d5:2f:28:16:f5:3c:4b:63:16:cf:cc:56:92:2b:8c:
         59:9d:12:fd:92:90:6e:ae:fb:62:18:98:aa:da:50:4c:d9:b2:
         56:98:b5:79:91:9b:23:22:46:47:74:96:c4:fa:4c:5a:05:63:
         19:5d:b1:b8:eb:4d:db:9f:b4:2c:ea:6b:97:d9:32:b5:55:53:
         ba:a5:9d:87:4c:e1:78:97:74:83:ae:6e:6a:40:2c:1b:55:7d:
         af:f0:19:41:8a:30:3f:bb:58:aa:0f:85:c6:a5:0d:05:5f:d4:
         74:cc:f0:2e:fc:f3:9b:51:2e:4e:30:55:d0:c0:5d:6f:e1:b7:
         cb:62:3b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----