Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136312e3136382e302f32322d3232203d3e2035363530.roa
File:                     34372e3136312e3136382e302f32322d3232203d3e2035363530.roa (raw, json)
Hash identifier:          HYOwtmiPYtrDmdvhceFKouww6RA/cMLJAYQKH9NzmYo=
Subject key identifier:   F5:D4:1C:1F:8F:E3:CB:B4:E3:C2:E0:75:1C:8D:47:39:FF:80:8E:3F
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       3A1934CA2D2F21835510F7D2746FCF28AA3E0F36
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136312e3136382e302f32322d3232203d3e2035363530.roa
Signing time:             Thu 22 Feb 2024 05:09:32 +0000
ROA not before:           Thu 22 Feb 2024 05:04:32 +0000
ROA not after:            Thu 20 Feb 2025 05:09:32 +0000
asID:                     5650
IP address blocks:        47.161.168.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:19:34:ca:2d:2f:21:83:55:10:f7:d2:74:6f:cf:28:aa:3e:0f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Feb 22 05:04:32 2024 GMT
            Not After : Feb 20 05:09:32 2025 GMT
        Subject: CN=F5D41C1F8FE3CBB4E3C2E0751C8D4739FF808E3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ac:c5:04:c9:71:89:a6:da:52:ac:0a:e0:c4:
                    01:a1:16:a1:e4:b3:d8:4f:2c:32:f5:69:b7:f9:5d:
                    36:d5:5b:b1:8e:e9:39:09:f7:36:55:0b:1e:87:0a:
                    81:68:46:f0:d3:4e:3b:d2:a3:08:73:52:c3:7c:eb:
                    cf:b8:6d:31:15:c0:62:93:b1:55:4a:50:d3:56:76:
                    c7:72:35:4a:76:1c:07:55:ea:f2:43:16:61:62:97:
                    4e:b9:76:e9:b7:1b:fd:d9:51:dc:83:08:69:d1:17:
                    fa:89:0d:6b:5c:03:76:5c:36:c3:48:8c:82:83:e0:
                    fe:d4:fb:78:92:41:66:94:c1:02:fa:ec:4a:4b:a4:
                    22:08:b0:a4:08:82:ee:4d:23:3e:5e:2d:02:34:87:
                    1d:28:22:f4:ac:08:49:95:98:9b:64:3c:75:65:90:
                    76:cb:6b:f0:54:a4:4c:2e:12:79:53:5a:8a:73:96:
                    b4:13:d4:ef:1b:79:a4:8b:7e:7e:c8:db:ea:51:04:
                    cb:19:33:94:8c:d7:bb:e7:da:4a:2b:ef:bf:a5:95:
                    23:82:8f:67:db:7d:cb:cd:06:b2:a5:96:a3:9c:da:
                    44:0b:84:c6:bf:a3:b7:ef:a2:55:18:24:5e:04:bd:
                    34:be:09:77:07:28:a9:b5:d2:07:00:55:44:94:d1:
                    4b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D4:1C:1F:8F:E3:CB:B4:E3:C2:E0:75:1C:8D:47:39:FF:80:8E:3F
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136312e3136382e302f32322d3232203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.161.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:b5:8a:24:29:3f:5b:26:0b:b8:44:e6:3b:7f:4a:f7:72:53:
         37:96:54:ce:5a:b4:dd:40:dd:77:2f:88:c4:fc:2e:04:e3:7a:
         4b:e7:d3:ff:7b:bb:bf:3a:bc:92:18:cd:ba:ae:1e:38:51:ff:
         a3:3d:b4:33:2c:f7:f4:e6:e5:6d:a3:25:00:a0:ce:e5:da:06:
         27:4c:20:23:f9:b1:45:7d:36:3e:fc:51:3d:1a:80:2b:21:0b:
         87:30:2a:a9:4e:07:90:12:78:b7:82:32:82:4c:1e:03:c2:14:
         23:24:62:83:2d:89:10:24:5b:76:d2:54:e1:84:5e:1d:5c:b4:
         66:16:b6:01:a0:1b:11:69:f7:bb:0e:3f:ce:b2:10:e1:a3:8f:
         a7:18:91:9c:1f:b0:96:44:5f:42:7b:c3:5f:07:56:b3:15:6a:
         7b:ef:c6:9f:04:61:d2:8e:c4:aa:5e:b3:1f:49:46:8b:e0:a7:
         36:88:8f:f2:e1:cc:39:d4:0c:f7:fb:af:82:e4:2d:db:4c:4c:
         e3:2b:0f:34:f7:c1:cb:37:c0:df:e9:be:fb:e1:58:dc:88:4b:
         fa:06:61:ef:5a:8d:ef:d9:88:94:d4:c3:d1:4e:a3:9a:50:19:
         58:43:6a:3b:85:53:7f:96:a3:38:30:d1:f2:f1:da:ae:ad:f1:
         d6:09:ae:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----