Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e31322e302f32332d3233203d3e2035363530.roa
File:                     34372e3138312e31322e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          PbJjjDCmjU5aoGSlTORtwlYrlvPZ/K71ZUplTYbmkfY=
Subject key identifier:   7A:D6:F9:E9:0C:63:D9:D6:08:BB:D7:DA:1A:D0:D1:3A:53:CA:04:D4
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       7318424D3C378567BABF91E2C53A659C0289F986
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e31322e302f32332d3233203d3e2035363530.roa
Signing time:             Tue 13 Feb 2024 05:08:57 +0000
ROA not before:           Tue 13 Feb 2024 05:03:57 +0000
ROA not after:            Tue 11 Feb 2025 05:08:57 +0000
asID:                     5650
IP address blocks:        47.181.12.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:18:42:4d:3c:37:85:67:ba:bf:91:e2:c5:3a:65:9c:02:89:f9:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Feb 13 05:03:57 2024 GMT
            Not After : Feb 11 05:08:57 2025 GMT
        Subject: CN=7AD6F9E90C63D9D608BBD7DA1AD0D13A53CA04D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:86:55:69:4b:1f:bc:78:96:24:02:c6:c8:ea:
                    f1:ca:1c:20:f7:38:d5:d0:b0:0c:8e:b8:36:17:1e:
                    01:ea:e3:fd:cc:ba:1a:ca:17:90:39:3d:d8:ac:89:
                    ec:74:c5:55:26:ef:29:68:bb:cf:43:84:12:18:ea:
                    8e:c7:16:8f:ed:56:ad:cc:b9:6f:b5:62:e1:99:cc:
                    e0:48:17:c8:ff:d3:2b:76:c7:c5:5a:a6:96:49:63:
                    c8:4c:99:f2:79:a6:c1:9f:45:68:49:ef:13:ed:5e:
                    2b:c7:93:46:8f:28:fa:d9:46:75:8d:f0:ff:72:0d:
                    4a:77:9d:08:ec:34:92:41:9e:18:5a:1a:c4:bb:bb:
                    7d:b4:7b:82:ed:2b:95:9b:20:af:e1:36:0e:8b:87:
                    24:75:2c:8d:87:78:08:54:a2:87:6e:99:d6:4e:7f:
                    ca:ce:55:0f:d5:d7:a3:b2:6a:e9:bd:87:89:c6:df:
                    d1:b1:ad:41:a9:99:24:2b:28:3b:87:d3:3a:17:e3:
                    08:b9:b1:d3:f2:9c:c5:90:43:31:f5:ef:7f:13:10:
                    ea:de:4d:da:f9:67:b9:7a:90:e3:af:c4:f4:0d:a3:
                    c0:d7:d0:9a:b8:1a:81:19:7a:86:1d:ab:cf:dc:ea:
                    c8:5a:6e:59:5d:bc:17:2b:74:64:f8:73:df:89:9e:
                    fd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D6:F9:E9:0C:63:D9:D6:08:BB:D7:DA:1A:D0:D1:3A:53:CA:04:D4
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e31322e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.181.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:6b:2d:07:33:9e:c7:5f:6f:e8:f0:4a:e7:72:28:b5:0f:a9:
         0c:51:e2:43:54:a9:9b:27:ca:6f:5f:00:50:2f:7b:74:c9:2e:
         d3:b1:e5:01:35:72:04:5a:6e:50:88:d8:f0:e9:b1:51:33:6a:
         74:43:ef:70:ab:8b:e6:51:c5:22:a4:18:ac:6e:3d:c1:01:a3:
         77:e7:18:9f:33:63:92:d4:98:c6:e6:01:ca:f0:5a:24:4d:09:
         7a:4e:87:16:29:a5:82:72:3a:36:d7:53:e9:70:89:26:22:86:
         3d:50:cc:03:d2:53:5f:64:a9:6f:ab:45:3a:f9:f0:ce:78:56:
         09:e5:94:48:4a:cd:d9:38:0a:00:4e:fb:28:00:0e:15:ac:a8:
         c1:a4:50:71:fc:7d:f0:19:91:26:72:95:3b:e5:d8:d7:04:68:
         3d:60:81:81:33:33:00:9a:53:83:14:2c:44:cc:fc:27:3a:48:
         36:de:61:a3:8a:d4:68:f4:67:fc:aa:17:b7:01:8f:f5:af:95:
         a0:2b:8e:f2:ec:39:df:5a:bb:46:37:38:69:d9:29:b2:26:17:
         29:99:b4:4b:fb:85:60:c0:b6:9b:45:54:01:78:e9:85:2c:8f:
         0f:f6:66:1f:36:95:e8:f7:9f:67:6b:e3:e5:49:da:62:21:cc:
         a6:cc:74:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----