Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e33322e302f32322d3232203d3e2035363530.roa
File:                     34372e3138312e33322e302f32322d3232203d3e2035363530.roa (raw, json)
Hash identifier:          80ZE310Lg8O2o0D4JBlxoFYiCW1T997TVpOHpoY6660=
Subject key identifier:   EB:BF:4F:DF:63:29:7F:3F:BB:C8:1E:4F:E6:EA:C9:BA:C9:6B:5C:F9
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       10E40B566E7DC79822D92030A164E5C057A2F2BF
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e33322e302f32322d3232203d3e2035363530.roa
Signing time:             Thu 22 Feb 2024 05:09:42 +0000
ROA not before:           Thu 22 Feb 2024 05:04:42 +0000
ROA not after:            Thu 20 Feb 2025 05:09:42 +0000
asID:                     5650
IP address blocks:        47.181.32.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e4:0b:56:6e:7d:c7:98:22:d9:20:30:a1:64:e5:c0:57:a2:f2:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Feb 22 05:04:42 2024 GMT
            Not After : Feb 20 05:09:42 2025 GMT
        Subject: CN=EBBF4FDF63297F3FBBC81E4FE6EAC9BAC96B5CF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:49:05:80:7a:e8:c6:1e:60:0d:55:ac:6f:
                    f0:f6:31:55:1f:d3:27:37:9e:fd:13:d0:12:b3:a3:
                    8a:63:98:a4:b1:e3:98:a0:1e:99:1a:27:b4:25:c3:
                    33:95:48:7d:d7:f0:38:56:96:8c:29:ec:4a:4c:7b:
                    85:07:9f:79:8b:49:11:a5:63:d7:8a:dc:5a:7c:42:
                    2b:f9:ad:c9:cb:0b:96:1f:79:7f:be:ea:b3:e6:f8:
                    49:cd:0a:3b:4a:d5:65:c9:a0:dd:9f:f2:4a:e8:07:
                    5e:dd:80:c6:7b:07:68:c4:87:36:6f:b6:37:43:c8:
                    be:19:99:5b:c9:00:70:29:3a:f2:68:c4:93:38:90:
                    b9:51:72:2e:54:74:2d:de:ab:0d:25:c0:7a:64:a7:
                    11:d4:fb:26:ef:aa:a4:ee:4d:f1:62:87:c3:17:e7:
                    1b:aa:d1:c9:39:18:60:f4:cc:35:6d:64:76:f8:06:
                    9b:9d:6c:5b:ec:b1:05:bc:11:3a:ef:25:48:e4:61:
                    23:2c:63:3e:e8:ac:cd:37:5c:d0:eb:11:76:0f:fe:
                    91:41:97:30:b2:6c:09:40:97:28:bb:3a:de:b0:c5:
                    5d:b5:56:92:6d:6b:e9:ad:f5:de:ad:f8:9b:1d:8c:
                    78:d6:c3:f7:6e:48:7a:51:83:97:f5:38:b5:75:e9:
                    12:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BF:4F:DF:63:29:7F:3F:BB:C8:1E:4F:E6:EA:C9:BA:C9:6B:5C:F9
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e33322e302f32322d3232203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.181.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:8e:1f:08:35:6f:12:21:85:7c:ea:e5:23:a2:57:e6:3f:52:
         ee:0f:a0:38:81:32:6b:4e:7d:28:d5:fe:df:7d:ed:84:b7:2a:
         78:4d:c2:f9:1e:dc:2e:0d:91:1c:af:69:ef:86:b3:cb:15:2c:
         94:13:cc:34:f4:1c:bd:b0:66:7b:9d:47:39:52:93:5c:1d:06:
         28:f5:50:07:a2:8a:6e:44:89:27:9c:4c:01:4a:75:2d:25:65:
         28:48:fb:a4:48:d0:70:2c:62:c8:c4:1b:74:ee:09:96:7f:ad:
         25:ac:cb:63:5a:09:b4:fe:9e:f7:9b:06:85:5b:41:66:89:f8:
         11:60:ca:6a:eb:f9:4f:39:78:c5:b9:34:4d:98:2b:f8:fa:5a:
         d4:a2:dc:94:22:bf:1e:ad:10:f3:76:ff:fc:d5:b1:8c:f7:f6:
         fd:0a:27:05:c2:12:28:d0:93:8c:3f:8f:6f:4a:d0:f9:00:14:
         1d:b0:80:85:aa:f9:a2:81:a9:80:40:7b:ed:79:e2:53:01:83:
         c5:e1:23:7b:b1:55:49:9c:a0:b2:8c:76:fc:2e:46:26:29:7f:
         09:f5:ad:3f:5a:4c:97:92:8f:69:f9:b1:62:47:36:02:0d:82:
         b1:ff:59:e4:aa:30:ae:f3:d7:93:1e:24:11:35:4e:e9:3e:f8:
         e3:10:96:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----