Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3234342e302f32332d3233203d3e2035363530.roa
File:                     34372e3134302e3234342e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          LcvboN+JFlqNn1t7DIuxm/WzobACD3a2mZrvjSL1xcA=
Subject key identifier:   DD:C3:2F:FF:B0:6C:28:84:D8:78:CB:4C:AF:6D:92:96:0A:D8:A8:28
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       665AE031B35837D7D791612596918D8AFC55F5E9
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3234342e302f32332d3233203d3e2035363530.roa
Signing time:             Tue 13 Feb 2024 05:08:08 +0000
ROA not before:           Tue 13 Feb 2024 05:03:08 +0000
ROA not after:            Tue 11 Feb 2025 05:08:08 +0000
asID:                     5650
IP address blocks:        47.140.244.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5a:e0:31:b3:58:37:d7:d7:91:61:25:96:91:8d:8a:fc:55:f5:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Feb 13 05:03:08 2024 GMT
            Not After : Feb 11 05:08:08 2025 GMT
        Subject: CN=DDC32FFFB06C2884D878CB4CAF6D92960AD8A828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:20:48:59:f7:09:3e:2b:56:9c:e6:6b:6d:eb:
                    b8:99:0e:89:22:4f:80:5a:2e:37:bb:b8:b2:10:40:
                    a4:83:d1:d4:b1:d6:79:bf:a8:9b:b3:b2:d7:b5:75:
                    03:30:c2:78:1d:e4:10:af:46:80:37:8b:e3:0f:df:
                    a6:91:7a:67:73:a2:3c:3d:28:36:5e:1f:aa:78:fe:
                    2b:6e:b5:8a:8c:e8:f2:45:80:3a:38:3a:b9:77:1a:
                    c9:1d:92:33:92:60:30:d6:34:8d:8f:37:79:0b:f5:
                    1c:02:e7:9d:80:7a:f5:5b:b5:be:ed:48:43:32:1e:
                    a9:b8:0c:3b:e6:0f:51:bb:a4:f5:f1:7f:68:49:21:
                    e2:0f:45:5d:6a:86:91:b1:39:f7:33:0a:5d:9e:8d:
                    27:83:3d:c8:ba:10:b5:c2:27:83:f0:af:c2:98:c6:
                    86:16:70:19:8c:cb:d2:42:60:0f:dd:e4:87:57:04:
                    8f:e6:7f:55:7d:80:78:ac:ba:b1:38:dc:9e:67:d0:
                    b4:7d:3e:4d:ce:74:48:e2:48:a1:7f:59:f1:1d:db:
                    85:47:0d:8d:46:97:60:18:9e:41:9d:59:71:f2:b6:
                    6a:1d:00:15:c9:a6:94:c2:5c:c3:03:8f:ed:79:f8:
                    f0:2f:19:ee:5d:b9:b2:1a:66:ae:6f:41:d3:85:40:
                    6d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C3:2F:FF:B0:6C:28:84:D8:78:CB:4C:AF:6D:92:96:0A:D8:A8:28
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3234342e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.140.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:8a:42:5a:52:02:fd:7a:fd:9c:5a:dc:1a:3f:88:94:c0:99:
         38:c7:c8:2f:de:9d:b5:d8:1f:7d:01:ee:9f:df:83:95:de:ab:
         f7:d0:8a:3b:fc:df:94:2a:9e:73:ae:72:9b:5a:2d:09:d3:f0:
         26:63:c6:a3:63:d3:eb:21:b7:14:6d:b8:12:e5:82:05:3d:c8:
         4b:24:c6:4e:b4:ad:57:58:15:ed:2d:55:b6:48:e6:25:f9:50:
         9b:79:c0:4e:04:f4:99:c3:11:13:72:ac:ba:ab:17:f3:e2:3b:
         26:62:7d:77:29:e0:29:3a:2c:c2:21:a1:26:fa:cb:81:d1:91:
         e7:b3:d6:af:db:fa:3c:03:86:b5:30:7a:54:37:0f:ba:19:b5:
         38:0f:27:4b:40:85:d3:dc:8c:f4:f5:c1:d3:b7:4d:bd:d1:8e:
         c3:11:48:aa:9f:2d:2a:07:e9:e4:06:da:38:ec:66:dc:60:b3:
         e5:c2:81:a6:f1:db:22:97:1e:06:6a:34:4a:c4:f9:d0:82:9d:
         8f:32:63:61:69:2c:dd:32:72:8a:17:76:30:2a:87:ee:88:2b:
         e9:ae:90:ff:38:c3:ae:bb:fa:f3:3a:57:fd:2b:f9:c2:ea:0e:
         9f:97:b0:9b:d2:55:a5:29:50:a4:24:44:56:68:0a:0e:29:d6:
         e1:d8:34:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----