Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e35362e302f32322d3232203d3e2035363530.roa
File:                     34372e3134302e35362e302f32322d3232203d3e2035363530.roa (raw, json)
Hash identifier:          dq6aVmn6vZ4RkDCTUB1Tigh2yw9zgPnA+oYqEkwiqp8=
Subject key identifier:   FC:8F:00:F7:E7:3C:C5:5C:17:C8:FB:D4:2A:F9:F2:8E:18:9D:7B:82
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       1FD30D583A32025B24581E835C6BDA8CDD196005
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e35362e302f32322d3232203d3e2035363530.roa
Signing time:             Thu 22 Feb 2024 05:05:39 +0000
ROA not before:           Thu 22 Feb 2024 05:00:39 +0000
ROA not after:            Thu 20 Feb 2025 05:05:39 +0000
asID:                     5650
IP address blocks:        47.140.56.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d3:0d:58:3a:32:02:5b:24:58:1e:83:5c:6b:da:8c:dd:19:60:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Feb 22 05:00:39 2024 GMT
            Not After : Feb 20 05:05:39 2025 GMT
        Subject: CN=FC8F00F7E73CC55C17C8FBD42AF9F28E189D7B82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:37:f0:f0:0c:e0:a1:97:9b:b2:2d:9b:8f:92:
                    f9:2e:7c:c8:8d:7d:95:d6:1c:12:a6:6a:5b:80:6e:
                    a7:a8:dd:02:fe:86:a1:94:d4:54:49:af:3f:60:e6:
                    db:bf:88:b5:ec:93:7d:0b:26:d1:bd:fa:ea:2f:c8:
                    8c:36:52:a2:7f:ae:c7:95:ac:ec:a4:f5:9a:50:fd:
                    22:9d:c1:2b:01:d9:fa:c1:f2:03:47:c3:5d:a3:a6:
                    d1:65:77:e7:2d:e9:87:78:60:9a:24:7a:2a:19:73:
                    5d:10:be:dd:ca:10:19:75:de:3b:65:e7:ed:6e:19:
                    6c:67:ce:a2:ba:e7:58:41:7c:20:ff:a8:18:f7:1f:
                    3b:24:00:07:0d:95:3c:7e:d4:3a:fa:92:aa:0e:50:
                    ba:f9:d3:40:b7:19:75:8b:07:aa:fc:99:b0:f7:56:
                    a7:ac:01:0a:f9:53:3b:97:eb:75:2f:f0:33:9a:0c:
                    2b:99:ff:1c:c2:53:0d:2f:4a:cb:cb:3f:27:de:56:
                    d2:a0:6d:ff:39:54:4b:d6:1c:8e:6f:cd:70:39:80:
                    d3:97:09:7b:de:9a:29:28:82:5f:74:27:11:49:4a:
                    bb:ee:e4:1d:36:a7:27:c6:eb:19:1a:9a:6c:a1:d7:
                    4a:a7:f2:97:c7:36:b6:52:6d:08:f1:06:ef:1a:f7:
                    b3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8F:00:F7:E7:3C:C5:5C:17:C8:FB:D4:2A:F9:F2:8E:18:9D:7B:82
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e35362e302f32322d3232203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.140.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:13:e3:42:4b:80:e6:17:1d:22:44:14:ea:2c:ab:50:65:f4:
         63:f5:3d:1b:00:13:71:4b:4b:23:31:4f:42:0d:89:44:2f:f0:
         66:86:b6:41:f1:70:98:4f:9f:68:7d:47:8c:87:e6:11:b0:e8:
         9f:16:90:16:56:db:dd:65:ac:3d:6e:2f:60:9f:bd:da:a2:20:
         f6:50:37:2e:13:80:97:e2:b3:89:5b:0d:c8:d6:fa:7c:e5:de:
         76:a7:dd:22:af:b5:f9:67:23:1b:8b:f2:75:1f:af:83:84:b9:
         62:c8:e2:d4:6a:d4:f3:0f:f7:31:58:03:b3:e2:d2:c5:64:e1:
         41:14:61:cb:a5:86:17:95:2f:d1:1a:7a:85:24:70:af:ba:30:
         9a:96:eb:45:f6:0d:ca:d2:f7:65:81:ad:10:88:f1:9c:e7:e2:
         c7:de:8d:d7:97:cd:36:05:f5:3c:43:6f:d4:42:92:79:c6:2f:
         dd:a8:ad:3c:f4:b4:be:8f:3b:7c:f1:ad:44:fe:3e:c1:ef:55:
         6d:df:80:29:79:29:12:36:59:43:85:01:4e:89:3f:27:ce:9a:
         40:14:21:9b:3f:d9:16:8b:99:6f:4f:16:89:b5:c2:f3:1f:79:
         2c:93:3f:c9:cc:8e:15:74:6e:36:ac:06:b0:d2:1c:cb:f9:13:
         30:f9:81:9d
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUH9MNWDoyAlskWB6DXGvajN0ZYAUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzc2NjYxNjAwNTlhZjJjMTEyOWVjYjllNWY2YWJmNWNh
OTJiYzg3NDRkNjFkNDU5ZWYwHhcNMjQwMjIyMDUwMDM5WhcNMjUwMjIwMDUwNTM5
WjAzMTEwLwYDVQQDEyhGQzhGMDBGN0U3M0NDNTVDMTdDOEZCRDQyQUY5RjI4RTE4
OUQ3QjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jfw8AzgoZeb
si2bj5L5LnzIjX2V1hwSpmpbgG6nqN0C/oahlNRUSa8/YObbv4i17JN9CybRvfrq
L8iMNlKif67HlazspPWaUP0incErAdn6wfIDR8Ndo6bRZXfnLemHeGCaJHoqGXNd
EL7dyhAZdd47ZeftbhlsZ86iuudYQXwg/6gY9x87JAAHDZU8ftQ6+pKqDlC6+dNA
txl1iweq/Jmw91anrAEK+VM7l+t1L/Azmgwrmf8cwlMNL0rLyz8n3lbSoG3/OVRL
1hyOb81wOYDTlwl73popKIJfdCcRSUq77uQdNqcnxusZGppsoddKp/KXxza2Um0I
8QbvGvezLQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFPyPAPfnPMVcF8j71Cr58o4Y
nXuCMB8GA1UdIwQYMBaAFPeLPlLSe9LnS+pP5uhiQGDdOF03MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzMv
Rjc4QjNFNTJEMjdCRDJFNzRCRUE0RkU2RTg2MjQwNjBERDM4NUQzNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2YxNjcwNWEyLTA3YWMtNDAzMS05MjM3LTEwNDg5YzMxYjk2YS8zNzY2
NjE2MDA1OWFmMmMxMTI5ZWNiOWU1ZjZhYmY1Y2E5MmJjODc0NGQ2MWQ0NTllZi5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzMvMzQzNzJlMzEzNDMwMmUzNTM2MmUzMDJmMzIzMjJkMzIzMjIw
M2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIvjDgwDQYJKoZIhvcNAQELBQADggEB
AIoT40JLgOYXHSJEFOosq1Bl9GP1PRsAE3FLSyMxT0INiUQv8GaGtkHxcJhPn2h9
R4yH5hGw6J8WkBZW291lrD1uL2CfvdqiIPZQNy4TgJfis4lbDcjW+nzl3nan3SKv
tflnIxuL8nUfr4OEuWLI4tRq1PMP9zFYA7Pi0sVk4UEUYculhheVL9EaeoUkcK+6
MJqW60X2DcrS92WBrRCI8Zzn4sfejdeXzTYF9TxDb9RCknnGL92orTz0tL6PO3zx
rUT+PsHvVW3fgCl5KRI2WUOFAU6JPyfOmkAUIZs/2RaLmW9PFom1wvMfeSyTP8nM
jhV0bjasBrDSHMv5EzD5gZ0=
-----END CERTIFICATE-----