Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e33322e302f32322d3232203d3e2035363530.roa
File:                     34372e3134332e33322e302f32322d3232203d3e2035363530.roa (raw, json)
Hash identifier:          tD4VgfAFTn8iLfWRzdwHEYkZXfhDcLJukxviuFjulo8=
Subject key identifier:   89:32:B2:84:D9:E5:53:02:EE:E8:F4:8E:48:4A:97:3F:8E:AB:4B:A7
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       316834F1B3CE9CD8E888129B8F3C6FDE9B86AB41
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e33322e302f32322d3232203d3e2035363530.roa
Signing time:             Thu 22 Feb 2024 05:07:09 +0000
ROA not before:           Thu 22 Feb 2024 05:02:09 +0000
ROA not after:            Thu 20 Feb 2025 05:07:09 +0000
asID:                     5650
IP address blocks:        47.143.32.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:68:34:f1:b3:ce:9c:d8:e8:88:12:9b:8f:3c:6f:de:9b:86:ab:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Feb 22 05:02:09 2024 GMT
            Not After : Feb 20 05:07:09 2025 GMT
        Subject: CN=8932B284D9E55302EEE8F48E484A973F8EAB4BA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:90:33:f2:ab:df:87:4a:f7:87:b6:97:4a:f9:
                    82:7f:c8:7e:5e:f1:e8:4d:bc:d9:49:6a:53:b9:cd:
                    c5:83:db:c9:88:55:0f:5e:79:3d:81:c9:73:4a:b3:
                    6d:13:4b:58:15:e9:51:af:dc:bf:ed:7a:3e:92:7e:
                    aa:95:2d:a0:6d:9c:2c:18:82:0e:d2:29:65:08:d5:
                    3c:2c:a8:50:c0:44:f0:94:e1:35:3c:a0:b4:ea:bb:
                    3b:5d:d2:75:45:f3:cf:16:1b:df:4e:98:c3:d8:11:
                    b8:b7:21:e6:46:98:7c:78:ef:5c:de:e9:58:d0:26:
                    cc:e6:b4:b9:21:b7:3e:29:7c:f2:37:2f:e3:dd:4b:
                    bc:6b:49:af:41:9f:8b:8c:01:c4:a2:36:9a:6f:37:
                    47:53:62:80:5e:df:4a:8a:60:fe:4a:73:1e:dc:c2:
                    f1:3b:0b:90:03:32:b7:31:5d:7a:85:3d:20:16:29:
                    08:f2:f9:3f:bc:26:c2:c8:bc:da:85:ba:91:64:c3:
                    b7:4d:5c:c2:3e:f7:ab:22:7c:92:57:d6:76:19:96:
                    fd:4c:40:b1:50:cd:3b:2d:9f:d6:f5:d9:da:76:bd:
                    b9:3d:67:76:cd:17:d1:c8:81:92:2f:1b:f7:87:91:
                    1d:a0:c2:84:17:71:c7:05:2c:6a:13:aa:6b:94:cd:
                    10:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:32:B2:84:D9:E5:53:02:EE:E8:F4:8E:48:4A:97:3F:8E:AB:4B:A7
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e33322e302f32322d3232203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.143.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:fd:f6:37:08:d4:38:84:d4:a3:50:96:8f:f8:8a:17:ea:03:
         25:66:53:5c:ac:03:34:b3:e6:f7:d5:ed:36:29:d4:9a:34:e3:
         32:66:aa:83:d6:ed:52:bf:a0:72:6f:85:ff:9b:36:0b:5f:50:
         d3:e0:03:e4:0a:63:b5:1e:64:b0:2d:e1:bf:a6:04:bc:66:38:
         97:0d:22:29:76:23:34:33:be:00:e9:2f:2f:66:b6:2f:ac:8c:
         00:ad:ca:f4:9d:cc:f1:5b:1e:a7:67:a0:b6:7f:cd:fa:da:a7:
         47:cf:f6:67:2b:77:b0:c0:45:4f:41:9f:90:88:61:1b:97:4a:
         d9:82:33:0b:30:bc:39:89:72:37:bf:06:67:24:2c:8e:c0:a5:
         86:10:51:d0:a6:eb:b7:54:49:32:41:94:8b:c0:57:99:3f:5f:
         d1:3b:9e:40:24:e4:a4:65:1f:42:65:04:c9:d2:a7:34:bc:a5:
         de:98:c5:32:32:ac:6f:19:fa:5f:62:85:fb:f8:0f:07:b1:23:
         16:9f:d1:9e:77:57:c0:d0:57:0a:2f:3f:18:4f:87:39:75:1b:
         af:af:b7:a3:c4:c4:90:eb:34:ac:e9:73:55:a9:8d:0d:11:e2:
         a1:ff:07:7f:de:04:b1:5c:4c:e1:a5:d3:49:cc:15:59:a3:82:
         ef:37:c5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----