Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e33342e302f32332d3233203d3e2035363530.roa
File:                     34372e3138312e33342e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          9f2EzENabbqIFmjiEy/I04gjikMfbOTaS6qirXzl8HE=
Subject key identifier:   98:A1:CA:23:97:A9:35:9E:77:8D:36:D1:51:1F:C7:74:75:D4:8C:FF
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       4C5EC2BEDD8C4D81FA8FB215B41264FE4A57EF3D
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e33342e302f32332d3233203d3e2035363530.roa
Signing time:             Tue 13 Feb 2024 05:09:19 +0000
ROA not before:           Tue 13 Feb 2024 05:04:19 +0000
ROA not after:            Tue 11 Feb 2025 05:09:19 +0000
asID:                     5650
IP address blocks:        47.181.34.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:5e:c2:be:dd:8c:4d:81:fa:8f:b2:15:b4:12:64:fe:4a:57:ef:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Feb 13 05:04:19 2024 GMT
            Not After : Feb 11 05:09:19 2025 GMT
        Subject: CN=98A1CA2397A9359E778D36D1511FC77475D48CFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ca:8c:4e:70:d8:da:72:d2:bd:14:a1:1a:00:
                    df:18:49:bc:69:86:80:4a:52:da:39:c5:6a:9b:7f:
                    0c:54:f5:6c:82:ff:9e:c5:e0:00:e3:b7:66:04:58:
                    c7:34:76:40:f4:e5:02:f3:6c:58:46:94:73:ca:db:
                    bf:18:ef:05:be:76:f7:ea:fd:35:60:15:9b:e7:ef:
                    02:c0:cb:51:b9:47:d8:a7:02:32:1d:a5:54:b1:08:
                    ca:2c:b9:bb:14:f7:aa:1a:38:47:74:1c:34:c6:c7:
                    e2:22:00:da:68:f5:66:12:b8:b0:0a:8f:4c:b2:31:
                    dd:ad:f8:62:3c:61:e7:27:26:b6:e4:c0:d8:63:19:
                    1d:70:dc:fc:f2:6e:57:9f:00:61:97:8b:ed:5c:87:
                    b4:1c:13:33:d1:6a:b1:48:3c:ab:03:52:d6:59:00:
                    60:84:4f:70:e6:3b:4c:d9:bb:c3:c1:64:92:82:22:
                    c4:14:e3:91:7f:0c:7e:f8:76:85:da:62:72:58:70:
                    87:75:0d:39:e1:6d:5b:13:3a:78:a3:f4:3e:f1:14:
                    f5:91:bf:ee:95:20:27:94:48:01:4b:5a:7f:37:2c:
                    60:ae:36:d3:07:52:de:80:d6:8f:cb:f0:f0:32:7c:
                    8b:80:a8:36:76:c2:f9:99:6b:c4:e4:06:fb:74:b5:
                    60:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A1:CA:23:97:A9:35:9E:77:8D:36:D1:51:1F:C7:74:75:D4:8C:FF
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e33342e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.181.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:d7:46:f8:42:c7:33:7b:6e:f3:e5:26:24:5f:5c:b3:bf:77:
         4c:da:32:c5:24:11:b4:b9:b1:ea:10:7e:25:37:0d:4e:a6:8f:
         5c:46:a3:1c:b8:27:0c:36:0b:e3:4b:f3:ae:17:b5:08:e4:cc:
         f4:f8:32:71:c4:ca:f9:47:3e:71:da:03:91:89:59:c6:59:d9:
         75:9c:b7:b3:9c:24:cf:19:26:7a:f9:dc:b0:df:dc:81:86:f8:
         bf:f7:c9:3a:97:20:24:35:fa:d1:b9:b3:fb:17:24:ab:53:19:
         83:c2:2b:82:41:24:2a:03:1e:da:ad:ef:ae:99:f6:45:5c:d8:
         cb:36:dd:71:a2:1f:a7:d3:6a:c2:1d:c3:64:1c:df:f3:0c:92:
         03:1c:b7:cb:8f:f1:f3:c7:c9:09:fa:d1:ac:7a:79:24:b3:31:
         11:28:e3:77:51:27:f5:bc:ec:be:80:0e:9b:cb:30:8f:1d:9f:
         02:cc:a8:90:be:a8:df:29:c9:3d:b6:8a:bb:c7:41:14:68:f8:
         1e:33:0c:12:dd:c9:a5:4c:1a:c1:29:82:6a:a8:81:e4:f2:bb:
         dc:9d:4c:ca:a3:6a:6f:b5:db:8d:29:f9:c6:5f:48:61:77:3f:
         c8:21:62:c9:07:23:70:ba:c7:da:d6:39:f3:7d:91:3f:40:f5:
         33:2e:30:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----