Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3137392e31392e302f32342d3234203d3e20343030323439.roa
File:                     34372e3137392e31392e302f32342d3234203d3e20343030323439.roa (raw, json)
Hash identifier:          K6CgjrYXJ43NelodE/LHERl6g+5ouGIsSS41OQnXcN0=
Subject key identifier:   00:31:2F:F4:B6:AF:F1:70:57:D6:EB:83:11:CB:02:F2:8D:7F:A2:43
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       2790B69EEBEC602F04A22F2C334DBD646F664AAC
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3137392e31392e302f32342d3234203d3e20343030323439.roa
Signing time:             Tue 30 Jan 2024 05:24:21 +0000
ROA not before:           Tue 30 Jan 2024 05:19:21 +0000
ROA not after:            Tue 28 Jan 2025 05:24:21 +0000
asID:                     400249
IP address blocks:        47.179.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:90:b6:9e:eb:ec:60:2f:04:a2:2f:2c:33:4d:bd:64:6f:66:4a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Jan 30 05:19:21 2024 GMT
            Not After : Jan 28 05:24:21 2025 GMT
        Subject: CN=00312FF4B6AFF17057D6EB8311CB02F28D7FA243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:59:45:51:de:46:9a:a2:ae:01:ec:93:75:a0:
                    ec:8b:5e:8d:66:4a:c5:2e:73:2b:95:69:f6:06:68:
                    12:86:27:38:43:f3:65:e8:ca:8f:ca:71:6b:c8:7b:
                    69:5a:66:d7:f3:e0:01:2c:a0:d2:69:e6:b8:26:30:
                    57:aa:4f:46:1b:36:f5:f6:a9:ad:74:64:ce:af:19:
                    17:f6:25:09:3d:e9:e1:b8:c4:dd:f6:6e:8a:47:82:
                    bb:e7:e1:07:05:dc:b9:df:a6:96:af:59:4f:5e:ce:
                    64:06:54:2c:1e:1d:f3:e9:eb:5e:7f:0a:96:4c:d8:
                    1c:3e:ae:79:bc:db:26:a7:0a:46:f0:ba:c0:21:dd:
                    d7:d2:6e:8c:9d:cc:95:6f:3e:83:fe:bc:a6:e7:a4:
                    8e:9d:67:1d:06:a3:9b:d8:2d:f6:84:c7:58:39:fa:
                    90:2a:f6:3f:a0:2a:68:25:a0:80:2c:bc:f0:57:8a:
                    e7:13:26:fb:3a:7b:17:0a:be:fd:3f:b6:4f:74:c3:
                    f6:bc:6c:ad:0c:77:63:2b:3b:fb:3f:34:21:92:75:
                    a5:84:44:50:b6:9e:83:2d:9d:7c:14:94:f4:bc:7b:
                    7c:de:27:bb:50:51:1a:28:13:75:20:cd:68:61:30:
                    60:9a:13:27:d2:2f:33:e8:16:15:38:ff:9f:e0:2a:
                    3e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:31:2F:F4:B6:AF:F1:70:57:D6:EB:83:11:CB:02:F2:8D:7F:A2:43
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3137392e31392e302f32342d3234203d3e20343030323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.179.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:49:aa:bd:0d:0e:47:e3:ae:3f:78:75:b1:06:d7:90:f7:f3:
         cf:4b:74:01:64:28:c5:5a:e7:ce:a1:10:3b:a8:fc:93:cd:37:
         b3:ed:9b:66:7c:7d:8c:d4:68:8e:5c:c0:78:c5:49:aa:a0:06:
         bc:a3:f7:37:a4:f5:e9:8e:06:a5:75:f0:01:df:e9:48:c2:26:
         f3:59:14:15:4c:68:8e:f6:d6:c3:41:c3:f6:48:e7:dc:e7:c7:
         58:09:ef:0c:39:d8:92:e8:83:f0:ef:23:55:0c:af:f7:a8:4a:
         e3:68:3c:1a:ff:76:19:1a:b4:f1:d5:29:10:32:96:8d:f5:7b:
         ee:00:31:f5:f1:cb:1e:ed:01:25:31:a4:df:89:b0:d1:1d:0f:
         c8:f0:ba:d5:da:a1:73:24:76:9a:66:3a:4a:a0:fc:fe:ae:b6:
         06:80:62:bf:c9:b4:dc:38:49:2c:ad:30:fc:57:dd:f0:e3:2f:
         98:ac:b5:eb:ba:44:30:db:1e:af:40:e6:15:d0:d4:0f:5a:b9:
         a1:05:af:06:e7:06:9c:1a:cb:56:27:fe:38:1c:50:ab:83:6f:
         ff:77:c5:c6:8e:2d:11:b2:c1:45:7f:2f:59:b6:11:da:25:ec:
         eb:a5:36:cd:3e:5a:7c:d0:98:27:c0:42:de:32:75:0a:39:74:
         47:73:78:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----