Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e33382e302f32342d3234203d3e2035363530.roa
File:                     34372e3134332e33382e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          B9CBRu4xyRfCSc6CktyypaffktcDN4fa2ZbyWeJIb9M=
Subject key identifier:   2C:8C:E7:30:D6:53:5B:A7:46:48:CC:44:1C:02:37:14:12:74:37:60
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       1DA2F4A859FBFD437D4BB9F68B37F5F3A6FDAC8B
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e33382e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:17:54 +0000
ROA not before:           Thu 02 Nov 2023 11:12:54 +0000
ROA not after:            Thu 31 Oct 2024 11:17:54 +0000
asID:                     5650
IP address blocks:        47.143.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a2:f4:a8:59:fb:fd:43:7d:4b:b9:f6:8b:37:f5:f3:a6:fd:ac:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Nov  2 11:12:54 2023 GMT
            Not After : Oct 31 11:17:54 2024 GMT
        Subject: CN=2C8CE730D6535BA74648CC441C02371412743760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a9:50:d6:12:c2:55:00:07:1e:df:8a:cd:2b:
                    63:f7:1b:bc:21:f6:20:35:71:a1:3d:7f:68:b1:90:
                    ed:72:0b:37:01:1e:88:fc:17:2c:0b:ef:03:c1:36:
                    33:dd:cc:2e:6e:d7:90:58:76:f9:12:6d:16:70:4d:
                    96:5b:ab:ac:20:93:7f:f8:d7:dd:9c:6d:07:61:fd:
                    5b:8a:cf:b1:d6:f4:5a:95:51:44:45:ca:b1:12:c7:
                    6c:6b:ec:f4:db:e3:1b:3a:2d:76:f5:07:65:15:0e:
                    21:eb:aa:92:5c:f6:73:ce:40:04:69:d6:f0:68:dc:
                    c4:f9:49:28:1d:ae:f9:dd:99:dd:6a:8b:f3:75:50:
                    63:a7:19:db:93:7a:05:55:dd:87:7d:51:1d:9f:71:
                    c6:f8:59:b8:ad:51:d4:92:6f:1d:24:1f:79:c5:60:
                    13:b6:e0:4b:e7:ec:a8:1e:89:8f:ed:15:99:6b:be:
                    33:9c:d8:86:5f:8d:50:df:da:99:7b:ae:08:83:a3:
                    89:16:64:b1:64:25:ac:72:fc:aa:23:1a:9c:ac:4b:
                    36:b5:3b:ae:69:ed:f0:bc:f8:c5:00:72:79:67:f0:
                    a3:ea:d8:b5:50:e2:a2:8b:37:62:de:f4:cb:ae:26:
                    19:75:cd:14:2e:0f:5b:da:2f:cc:34:20:aa:49:e1:
                    60:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8C:E7:30:D6:53:5B:A7:46:48:CC:44:1C:02:37:14:12:74:37:60
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e33382e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.143.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:c2:60:ff:18:57:ff:96:ab:2d:33:11:09:a4:f7:2f:22:7a:
         4f:ff:10:77:3e:9a:1c:32:32:a7:3b:5c:7f:76:40:72:4d:72:
         56:f9:3a:fa:cb:15:5e:6f:4c:4b:e6:c4:f0:f0:e7:8a:fe:c4:
         1d:4c:7f:66:00:1c:cd:15:b5:3b:bb:d6:c2:9c:79:ee:3a:24:
         7d:8c:96:b1:27:7a:64:15:9c:13:af:eb:8b:35:f4:53:c4:f9:
         01:c8:8f:64:e3:ac:48:da:5b:b0:05:fb:ff:08:1a:ea:e3:63:
         91:bc:a8:81:8c:e4:33:36:ed:ae:b7:d4:40:b7:63:cc:f1:e2:
         6b:b5:56:35:1c:ae:96:df:0b:2f:ac:bf:65:59:fe:50:4c:ca:
         20:0c:63:3c:51:db:c6:9f:52:aa:f7:eb:d0:99:28:e8:4b:09:
         87:75:37:39:ab:af:87:1e:28:c2:94:ab:b2:4d:2f:36:cf:8f:
         d8:63:9e:66:6c:45:45:2e:7e:e0:1f:36:aa:90:11:cd:18:50:
         5a:51:ce:4c:56:98:b3:86:6c:7a:15:8d:f4:e4:4c:78:67:b4:
         9a:96:d1:d8:2e:b2:a7:00:85:42:87:88:a9:af:63:e9:af:36:
         a0:1c:4b:c9:4e:67:98:44:a9:cb:97:a8:31:04:af:ad:b3:81:
         77:81:84:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org