Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136312e3136302e302f32322d3232203d3e2035363530.roa
File:                     34372e3136312e3136302e302f32322d3232203d3e2035363530.roa (raw, json)
Hash identifier:          CwQxMd7wuYeHOEL+3l1foY/29SaaCM0qF+rQcD4yMhY=
Subject key identifier:   BA:80:1C:BE:91:DC:0F:5E:A0:53:13:36:5F:30:1A:C2:F0:2B:AA:33
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       74F7D5A5DCA79D61EEF189A69EE78E1345D7685C
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136312e3136302e302f32322d3232203d3e2035363530.roa
Signing time:             Thu 22 Feb 2024 05:09:20 +0000
ROA not before:           Thu 22 Feb 2024 05:04:20 +0000
ROA not after:            Thu 20 Feb 2025 05:09:20 +0000
asID:                     5650
IP address blocks:        47.161.160.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f7:d5:a5:dc:a7:9d:61:ee:f1:89:a6:9e:e7:8e:13:45:d7:68:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Feb 22 05:04:20 2024 GMT
            Not After : Feb 20 05:09:20 2025 GMT
        Subject: CN=BA801CBE91DC0F5EA05313365F301AC2F02BAA33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bf:6f:94:2b:c1:19:b3:06:dc:2e:24:f1:1d:
                    de:d3:c5:6b:91:05:d5:d2:38:82:fe:19:a0:d3:1d:
                    94:67:ec:0f:79:f6:ee:99:0e:93:bf:1e:2f:a7:9b:
                    40:c5:57:9c:ac:33:2e:c0:c0:80:d1:33:d1:18:ef:
                    86:a7:33:ad:2c:27:38:ef:57:36:b0:09:86:04:f0:
                    d9:9a:fd:42:60:ec:8f:5d:1a:93:d0:61:ee:0b:f3:
                    ee:04:2b:d5:40:f7:aa:6f:35:cc:24:99:67:05:91:
                    8c:9b:04:a9:2e:2f:61:f1:18:98:67:1e:15:23:bf:
                    57:a1:8b:7d:aa:5a:08:88:7e:9a:a9:41:56:9f:c4:
                    f5:3a:db:ad:19:27:97:f6:a2:27:bc:4d:14:a8:be:
                    79:66:5c:59:d0:b2:41:bc:4d:d1:6c:a4:11:f5:26:
                    a8:f4:d4:1d:4b:ca:51:79:9f:81:40:1a:3e:12:b5:
                    87:a8:26:3e:fd:92:d1:36:ca:a8:ed:0f:9c:80:ab:
                    75:2c:25:aa:66:a2:72:f4:6b:88:c4:33:51:e1:42:
                    88:38:04:19:f8:54:76:38:05:03:0e:47:a1:f7:6c:
                    ee:0c:90:00:10:a1:c1:6e:bd:2b:fd:f9:ef:52:eb:
                    5d:39:37:f4:da:f8:a2:22:81:72:ec:e1:84:22:0d:
                    9e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:80:1C:BE:91:DC:0F:5E:A0:53:13:36:5F:30:1A:C2:F0:2B:AA:33
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136312e3136302e302f32322d3232203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.161.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:87:3e:ec:70:52:40:92:41:83:d9:0e:c8:e7:23:12:93:76:
         ee:7d:b7:7d:6b:99:50:62:85:42:bc:ba:e6:7c:bc:a1:e3:f7:
         cf:7b:bc:de:79:fd:13:a2:c0:97:e1:dc:db:94:8b:dc:32:d4:
         79:34:f6:56:63:58:f8:84:37:77:03:8d:f7:17:41:34:ad:50:
         e8:ef:ef:07:5e:7e:41:53:dc:f7:ea:65:6d:79:d2:82:fc:fc:
         38:87:fa:7a:c8:b2:82:cf:34:ad:c4:7d:0c:f6:4e:3a:86:f3:
         31:6b:41:5f:f7:59:27:0b:d2:4e:89:35:1c:7b:93:e9:22:65:
         fc:9f:31:9f:b8:50:8f:8f:9d:35:5c:c5:da:8d:e9:9b:d8:0b:
         92:21:a6:ef:75:83:3f:36:36:00:45:79:44:52:79:cb:e6:19:
         4a:8f:f3:7a:ea:49:4a:6d:d1:82:de:bb:49:fa:3c:60:ec:67:
         33:dc:bc:06:c0:5f:85:ee:9c:75:c5:f7:97:a3:e5:8e:69:e1:
         c7:76:43:69:11:39:06:1d:06:53:b8:9c:e4:7c:aa:52:a0:85:
         93:55:c0:aa:be:ce:b7:5b:69:ce:d9:80:c3:be:9e:86:f3:f7:
         b2:ca:94:b4:ec:a6:f6:a8:8c:c4:fa:39:26:ce:1d:cf:ab:d2:
         a4:56:04:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----