Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3134342e302f32342d3234203d3e2035363530.roa
File:                     34372e3136302e3134342e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          7PYYDV32o5mssaovjItgX26bCzj2InCNCM/tG1oBOvE=
Subject key identifier:   07:84:37:E9:7F:46:20:B9:BC:8A:96:C3:38:D3:A7:E9:5C:26:AD:6D
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       5DA32B3709E49FD1D0E5A40F51026894501DE48F
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3134342e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:23:28 +0000
ROA not before:           Thu 02 Nov 2023 11:18:28 +0000
ROA not after:            Thu 31 Oct 2024 11:23:28 +0000
asID:                     5650
IP address blocks:        47.160.144.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a3:2b:37:09:e4:9f:d1:d0:e5:a4:0f:51:02:68:94:50:1d:e4:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Nov  2 11:18:28 2023 GMT
            Not After : Oct 31 11:23:28 2024 GMT
        Subject: CN=078437E97F4620B9BC8A96C338D3A7E95C26AD6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fc:6d:2a:7e:ad:4f:81:10:81:f1:41:38:bb:
                    ff:24:e4:97:d1:aa:74:35:a9:f0:e8:fd:e9:e7:df:
                    fd:10:ec:8b:02:d4:d4:9f:75:55:a1:dd:7a:f1:1f:
                    dc:9c:1f:1e:27:04:b4:ff:ba:0f:c1:cc:e0:5f:2b:
                    23:2f:0a:92:91:bd:fd:8f:fa:88:e7:7a:ba:11:70:
                    50:39:0b:ef:27:43:8e:09:21:1f:e2:38:b6:27:47:
                    81:d1:45:ac:1b:a7:88:fa:ea:b1:7f:10:13:9a:cd:
                    51:84:aa:c8:a0:ca:d8:f3:b1:6f:31:ea:dc:dd:c8:
                    55:62:b1:17:67:f9:e4:db:ec:e7:b5:f3:e8:e6:44:
                    47:eb:01:91:0d:e8:37:60:55:bd:13:26:9c:b0:0c:
                    ae:3e:b0:36:b3:88:4c:34:20:ed:da:3e:9b:e9:08:
                    f0:b7:53:d3:0a:14:dd:9e:0d:75:62:bd:5d:0a:9d:
                    6a:5c:20:3f:eb:8f:ef:30:bb:97:e4:df:4b:08:fa:
                    c4:59:6a:0c:56:12:1c:16:b0:e8:a7:f1:61:d3:ec:
                    60:d6:86:20:7c:76:03:41:50:88:22:09:c8:b3:d4:
                    1e:9e:77:08:38:64:19:b8:6e:0c:6f:5b:aa:ad:af:
                    2b:4d:6b:4d:0c:81:4d:46:a5:02:01:e6:2d:72:6b:
                    89:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:84:37:E9:7F:46:20:B9:BC:8A:96:C3:38:D3:A7:E9:5C:26:AD:6D
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3134342e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.160.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:ee:e1:0a:04:01:9e:2e:33:4d:e7:28:7c:0b:6e:a5:34:6b:
         df:78:5b:8a:9d:ac:4c:39:49:b0:33:58:57:fe:cc:36:31:e0:
         0f:85:28:00:91:dc:71:ab:a3:1e:3c:a4:f2:45:3d:65:e5:54:
         1f:84:bb:1b:ad:8a:0f:34:9a:87:94:14:1b:09:e6:0d:bd:64:
         84:d9:ca:58:e3:70:ed:ab:37:0e:8b:8f:4f:be:45:90:62:a2:
         f3:bf:43:36:aa:a4:f8:f7:41:54:65:61:f3:63:a4:95:ab:84:
         56:d1:9f:6e:75:92:7d:4c:f1:0f:5d:68:b5:e7:a5:2c:e9:4d:
         fe:5c:51:4a:84:81:6d:21:14:16:ba:d9:58:bb:ba:80:50:2c:
         c7:29:11:7d:17:aa:cf:b5:2f:2a:49:8a:f0:0e:5d:6d:60:25:
         76:bc:31:4d:f8:75:a3:c6:c8:db:1c:ce:5b:48:b1:62:a1:6c:
         d0:d3:3f:5e:6b:43:18:99:e8:7e:2d:01:97:79:a3:d6:90:2a:
         16:35:3f:07:c7:3b:a9:c4:87:e7:cb:ef:7a:e6:c0:93:e2:99:
         5d:ad:fb:fe:51:8e:56:cc:ab:d9:fc:a4:c4:46:9b:f6:de:a9:
         ed:a0:12:00:3c:d5:7f:54:c0:23:b1:d6:28:4f:ec:bd:8f:59:
         26:8b:20:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----