Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3134322e302f32342d3234203d3e2035363530.roa
File:                     34372e3136302e3134322e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          El2POGt26UD6YlRnmC/N0QP+T7shnfYYwK5euwEAKqQ=
Subject key identifier:   84:8A:9D:35:DE:20:03:8C:1F:DE:0B:DA:FB:C0:E2:32:92:97:AF:B5
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       7D5D484CAF68D49DF75978DEC0F39B4E50B222C9
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3134322e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:23:07 +0000
ROA not before:           Thu 02 Nov 2023 11:18:07 +0000
ROA not after:            Thu 31 Oct 2024 11:23:07 +0000
asID:                     5650
IP address blocks:        47.160.142.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5d:48:4c:af:68:d4:9d:f7:59:78:de:c0:f3:9b:4e:50:b2:22:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Nov  2 11:18:07 2023 GMT
            Not After : Oct 31 11:23:07 2024 GMT
        Subject: CN=848A9D35DE20038C1FDE0BDAFBC0E2329297AFB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ef:45:ef:96:6d:2c:78:25:7f:60:68:0c:4c:
                    e6:c0:d7:38:7f:3c:c4:89:ff:ca:70:ec:09:1c:d6:
                    3b:e7:59:c6:1f:27:63:e7:a6:59:ae:a1:70:ec:6f:
                    fe:7b:45:a5:59:c2:6f:8f:51:a7:84:a9:37:8b:10:
                    79:d1:f4:c4:57:00:01:86:09:33:9b:14:6e:c8:cc:
                    91:ac:9e:b8:f1:6f:67:25:81:ba:ef:28:7d:f3:1f:
                    1c:18:e2:a0:81:aa:b3:3c:81:21:c9:82:d1:9b:46:
                    1b:21:d7:76:96:37:4d:23:62:87:16:4c:31:80:a0:
                    4d:b1:78:07:c2:b4:b0:24:73:6e:b4:59:18:26:b8:
                    c5:2e:7a:a5:68:48:56:9a:1e:bc:37:76:90:f1:20:
                    4b:ed:44:f2:17:f3:37:48:3c:3e:a2:e1:88:2d:4f:
                    44:23:ba:c7:5c:ff:66:0a:a7:8d:75:e7:e5:23:bf:
                    d2:52:d8:9f:bd:8e:eb:1e:ae:28:ee:26:65:51:82:
                    e7:f0:ae:1c:c5:7f:d6:c3:b2:ec:f0:86:5b:ca:a9:
                    14:dc:9f:a4:d3:76:dc:73:a1:f8:2f:0f:97:62:9b:
                    56:d4:0b:df:90:ff:51:f5:24:a7:01:c9:98:13:26:
                    9a:3c:20:2c:d1:5c:06:1a:6d:3c:a4:28:fd:99:da:
                    73:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8A:9D:35:DE:20:03:8C:1F:DE:0B:DA:FB:C0:E2:32:92:97:AF:B5
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3134322e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.160.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:cb:c3:40:52:aa:bc:0b:f9:bd:0d:87:c2:3f:05:37:51:85:
         de:fa:2d:ef:6f:a0:62:6c:6e:f8:ed:e7:e1:30:ff:c6:9e:28:
         89:00:94:96:d3:36:50:9a:d8:ef:ba:02:7e:76:51:0f:b3:e3:
         60:d0:e9:0b:48:e4:8a:7b:ba:91:20:48:64:9a:b2:72:00:7a:
         a6:0e:2a:3c:2a:bd:29:00:5c:d0:91:8c:2d:7b:7c:bf:d7:0e:
         5e:32:90:5c:91:1b:6b:0f:74:91:78:80:fc:9b:a0:e2:24:09:
         07:1d:27:ba:a9:b5:ee:e8:3d:a8:1a:39:a3:9a:bd:f2:c5:49:
         00:60:92:b6:4b:2f:1c:35:ef:b4:bb:c6:3a:80:95:50:a7:db:
         d1:b0:2b:f2:8e:da:ac:e7:8f:e1:26:ab:80:1d:32:2f:f8:d1:
         b9:64:f9:eb:c5:ed:e9:cc:31:8e:97:87:71:af:26:6a:b8:cd:
         f1:03:0c:31:5a:b0:e2:cc:a9:78:ef:4f:31:fb:b2:bb:86:97:
         80:58:96:13:a9:a9:1d:1a:9d:32:20:fc:f6:26:5a:89:87:dc:
         07:62:7e:ee:0c:dd:79:8e:e4:b9:69:08:9f:b7:61:c1:15:44:
         3f:7c:7e:5c:5a:f7:19:2e:5c:93:07:60:7a:b8:c7:36:ec:15:
         c4:bc:ed:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----