Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3132302e302f32322d3232203d3e2035363530.roa
File:                     34372e3134332e3132302e302f32322d3232203d3e2035363530.roa (raw, json)
Hash identifier:          uZvgQ0BjaQ48qzxk6PjW4Ygzc72lOkDKQaCI1H8C/1I=
Subject key identifier:   80:05:3E:98:95:C1:EB:FC:93:2B:4B:50:63:C3:2A:0B:C6:7D:10:FD
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       09A9ADF0972053B3B7AA8AB19DF60A5623E4B301
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3132302e302f32322d3232203d3e2035363530.roa
Signing time:             Thu 22 Feb 2024 05:09:09 +0000
ROA not before:           Thu 22 Feb 2024 05:04:09 +0000
ROA not after:            Thu 20 Feb 2025 05:09:09 +0000
asID:                     5650
IP address blocks:        47.143.120.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a9:ad:f0:97:20:53:b3:b7:aa:8a:b1:9d:f6:0a:56:23:e4:b3:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Feb 22 05:04:09 2024 GMT
            Not After : Feb 20 05:09:09 2025 GMT
        Subject: CN=80053E9895C1EBFC932B4B5063C32A0BC67D10FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ab:1c:a3:0a:8b:d4:3e:63:22:ac:b8:3c:0d:
                    49:f7:b2:0c:fa:c9:e3:7b:70:d9:22:ba:c5:8b:fd:
                    19:96:11:93:f1:19:a6:9e:26:5a:6c:69:70:20:94:
                    d9:78:87:e0:1a:de:3a:15:f6:7a:a6:8f:72:3c:87:
                    a9:79:36:d8:73:50:f4:03:43:f6:17:07:a2:0f:21:
                    cc:c8:2f:5a:11:f2:89:9c:ba:be:8a:b1:92:7d:24:
                    f3:ee:2d:27:86:e1:ee:92:e3:c6:5b:8f:46:4d:63:
                    13:04:28:3c:ae:43:9d:5f:1a:9d:97:f2:71:b4:07:
                    7e:85:cd:0d:46:df:b8:ef:ac:df:a8:86:ed:73:24:
                    21:22:fc:f0:29:86:9c:94:32:04:a0:34:c2:94:d0:
                    e3:22:6a:92:43:a2:6a:86:38:5a:eb:85:0b:dd:7f:
                    37:28:28:38:07:30:f1:ed:35:0a:92:dc:67:ad:c6:
                    33:11:f5:9b:7d:93:19:00:3d:57:6f:84:e2:39:a0:
                    5f:14:ec:b8:d0:10:9a:67:79:24:40:9a:9c:76:0d:
                    e8:b3:13:af:a5:69:9e:b3:35:16:0f:25:d0:1e:40:
                    e0:dc:01:68:3c:1f:6b:69:5f:95:1d:1b:04:62:b7:
                    ab:0d:ad:1d:c9:06:f9:0a:0b:39:d8:f7:f5:f2:0b:
                    55:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:05:3E:98:95:C1:EB:FC:93:2B:4B:50:63:C3:2A:0B:C6:7D:10:FD
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3132302e302f32322d3232203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.143.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:72:0c:29:a1:d3:6a:c0:98:9b:db:64:95:2b:5d:b0:be:33:
         6b:b2:34:94:3b:30:10:b9:60:40:67:de:5e:23:33:7a:f6:37:
         45:91:ec:ff:1b:f0:0d:d5:49:9f:85:2d:09:69:c1:4a:55:0e:
         ef:ed:8e:b3:4e:b6:39:48:cf:c6:10:9a:67:4a:5e:8c:60:6c:
         a8:15:29:88:33:d5:65:07:0f:17:b7:fc:16:1b:b6:40:4a:f4:
         12:89:8b:8d:f3:aa:54:e5:e6:0f:a4:a1:e8:de:ae:f0:e7:1a:
         12:b3:4b:75:98:ff:66:5d:ff:83:3e:42:6a:58:23:0d:41:ba:
         18:21:a9:a8:28:11:a2:d1:b7:d3:28:b8:76:e1:29:1a:b3:b9:
         3d:27:ab:5e:36:31:ca:8e:98:a2:42:a5:b7:83:ef:19:a0:22:
         8f:b1:f9:d4:ab:c8:e1:af:79:27:6d:99:a9:a0:32:4c:66:e2:
         5a:bb:e0:ec:d0:0b:e3:b3:99:ad:0a:c7:90:70:00:99:2d:98:
         98:19:9c:8a:45:b8:d0:2b:3f:6f:bf:55:ca:b6:e9:34:bd:af:
         3a:b1:d7:e2:2f:eb:0d:0f:ca:d0:8e:00:3e:06:20:7a:4b:c4:
         18:ed:43:54:a1:bf:2e:ae:4b:31:24:b6:9f:90:76:79:dd:03:
         5e:25:fe:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----