Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3131322e302f32322d3232203d3e2035363530.roa
File:                     34372e3134332e3131322e302f32322d3232203d3e2035363530.roa (raw, json)
Hash identifier:          zc3RQvgAG838Hpizq247I3WNZ5Txjjr0Fg7FOk+eG1Y=
Subject key identifier:   FA:14:40:1C:B8:13:5C:EA:F6:5F:95:02:57:62:9F:AC:D5:CB:32:DF
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       319255721F04743BA2174D466AC80811B8A1F0B3
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3131322e302f32322d3232203d3e2035363530.roa
Signing time:             Thu 22 Feb 2024 05:08:37 +0000
ROA not before:           Thu 22 Feb 2024 05:03:37 +0000
ROA not after:            Thu 20 Feb 2025 05:08:37 +0000
asID:                     5650
IP address blocks:        47.143.112.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:92:55:72:1f:04:74:3b:a2:17:4d:46:6a:c8:08:11:b8:a1:f0:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Feb 22 05:03:37 2024 GMT
            Not After : Feb 20 05:08:37 2025 GMT
        Subject: CN=FA14401CB8135CEAF65F950257629FACD5CB32DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:94:3d:d3:02:79:7d:fd:51:c3:80:8f:74:98:
                    06:eb:d2:7d:10:a8:a4:b6:ce:67:6a:c6:be:4e:4c:
                    cb:51:e5:3e:73:bb:83:46:0d:ad:61:ee:33:9d:12:
                    25:5b:f3:4a:3c:c2:28:e6:25:42:14:62:55:a7:05:
                    9f:a9:f3:83:7c:5a:48:ad:6b:1d:57:31:12:a9:70:
                    c1:ec:22:b8:0e:0c:db:2f:c4:a7:1c:bc:13:e5:95:
                    1e:af:39:68:a0:72:35:ce:83:21:d3:7a:b6:b9:6e:
                    35:cb:61:c4:ae:0a:3a:65:dc:03:5c:ac:4e:63:60:
                    fa:8d:00:c9:7c:fd:45:59:ba:fb:37:b7:ca:d7:c4:
                    c2:2d:0a:9b:4f:1a:2f:5a:d9:13:84:3c:19:c3:1a:
                    4d:9f:1e:b7:53:8a:3b:79:24:f5:40:40:5f:68:6c:
                    f3:c2:c3:99:d3:7e:a6:28:51:08:59:b6:5e:dc:26:
                    ce:8d:b8:b1:20:5c:9d:63:13:5f:3e:d5:be:7f:e6:
                    99:c7:15:bc:fb:74:45:da:ed:06:1c:d1:e3:7e:60:
                    e4:8d:df:d5:d3:82:01:88:d7:34:0b:bf:40:f1:23:
                    ff:cf:1e:f2:f6:99:ed:db:d9:fc:5d:fb:d9:5c:9d:
                    17:21:84:90:9c:9c:23:ca:f1:f0:e7:c0:f9:0f:d4:
                    d6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:14:40:1C:B8:13:5C:EA:F6:5F:95:02:57:62:9F:AC:D5:CB:32:DF
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3131322e302f32322d3232203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.143.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:59:e0:6c:aa:b9:5d:b4:06:e2:07:f5:47:ee:e9:15:fd:08:
         28:7b:36:fb:2f:4f:cb:02:f0:95:8a:56:02:9b:e0:7a:19:e5:
         7c:bd:57:b8:7e:51:23:70:7b:bd:06:d6:ef:b6:a2:67:61:18:
         56:02:ac:fa:cd:2a:47:8a:36:ac:05:79:21:26:49:da:fd:83:
         95:d6:90:e5:d9:ce:19:1f:b6:64:ec:5b:3b:56:51:f9:0d:74:
         02:f4:b4:ae:14:dd:ef:69:d6:47:b4:5b:55:23:97:72:05:a0:
         66:72:fa:94:16:63:ec:7e:a4:98:0c:95:c9:f9:34:cd:db:69:
         b5:d6:60:dd:c0:7b:3f:02:a5:bc:96:90:3e:c6:78:32:a4:ce:
         0c:5d:96:ec:e6:bd:e2:15:2b:f6:a4:f3:db:f3:e5:27:15:bd:
         cd:9c:ec:ea:82:2c:7e:c1:29:cc:1c:39:65:b6:43:8b:f3:93:
         04:b3:cf:41:41:45:ea:b3:29:8b:ae:6c:27:9e:ed:65:a2:92:
         38:6f:41:56:f4:71:48:72:4a:9d:e3:32:96:e7:d5:48:47:11:
         32:14:73:f1:ab:76:6c:b8:72:21:b5:1b:a9:af:e0:1a:ae:09:
         c4:fb:14:89:3a:2e:ea:63:2a:d0:3b:6b:af:d7:7c:bb:15:62:
         e1:bb:a5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----