Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e33362e302f32332d3233203d3e2035363530.roa
File:                     34372e3138312e33362e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          XYOsLfCCeIsnO6+aV83GxUTdxyrEZqaiX+kgwkwvqR8=
Subject key identifier:   A3:E9:A3:45:51:91:6F:94:C0:DE:70:E7:0F:B0:3D:C8:13:44:99:FF
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       541054E01A0DCD675CCE993C985805F7133750FC
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e33362e302f32332d3233203d3e2035363530.roa
Signing time:             Tue 13 Feb 2024 05:09:29 +0000
ROA not before:           Tue 13 Feb 2024 05:04:29 +0000
ROA not after:            Tue 11 Feb 2025 05:09:29 +0000
asID:                     5650
IP address blocks:        47.181.36.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:10:54:e0:1a:0d:cd:67:5c:ce:99:3c:98:58:05:f7:13:37:50:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Feb 13 05:04:29 2024 GMT
            Not After : Feb 11 05:09:29 2025 GMT
        Subject: CN=A3E9A34551916F94C0DE70E70FB03DC8134499FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f1:56:2c:58:24:f5:a6:da:dd:00:ea:54:7b:
                    b2:50:33:91:0e:d8:0d:a6:77:b6:db:3c:dd:b5:0a:
                    84:b1:3c:a2:b0:a5:99:21:bc:ae:09:03:8a:2a:28:
                    73:e0:7c:9a:e5:d2:49:3f:a3:fa:fb:06:b8:e0:12:
                    98:0d:c4:a8:23:c1:5f:c9:b7:14:ff:45:85:99:23:
                    d9:11:56:d9:39:a6:3d:8e:62:e1:f2:84:a7:24:5e:
                    da:72:f4:0b:12:33:c3:00:aa:a3:ad:ae:07:0a:26:
                    ee:14:83:d8:33:dd:81:db:28:7f:64:7d:34:c7:4c:
                    5a:c6:1a:38:18:c8:3d:c5:b5:92:92:61:15:2b:ff:
                    61:22:93:e6:b9:62:ef:b9:7e:fd:bd:9f:34:0c:f7:
                    20:98:68:fc:68:c5:29:3a:4c:0a:0b:34:c0:4f:78:
                    3c:c6:53:2f:b0:f8:9f:da:99:56:60:5a:cb:93:d2:
                    72:ec:de:42:67:04:32:b7:7e:78:ef:3f:ec:94:f7:
                    e1:8d:a5:ba:5e:5e:f2:65:51:27:4b:93:79:08:4d:
                    dd:65:1e:4a:d6:1d:9e:f9:dd:61:f4:96:8a:c1:66:
                    f6:d7:21:5c:41:be:72:00:0c:58:d9:3d:0d:c3:ab:
                    8a:ab:ba:57:e2:bd:84:a7:fd:76:9a:9b:25:fe:ba:
                    40:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E9:A3:45:51:91:6F:94:C0:DE:70:E7:0F:B0:3D:C8:13:44:99:FF
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e33362e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.181.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:ce:0d:7b:74:a4:32:93:5c:61:76:37:8c:75:fe:e9:54:3f:
         b7:4d:6e:67:ae:43:98:31:71:e8:b3:be:f3:37:14:9b:d9:06:
         1a:3d:95:5e:ef:9d:0e:da:57:75:09:13:a4:2f:84:d0:a1:9f:
         e5:32:ba:3e:54:3b:ba:34:d7:0a:39:2a:fa:95:7c:2a:a3:b8:
         b3:c0:89:f9:2e:a8:c0:20:dc:db:10:fe:3b:4b:a4:eb:f1:54:
         8e:25:c0:be:5f:2d:ce:cb:38:07:b8:b3:6a:a0:6e:19:2f:4b:
         ba:74:28:1a:89:fb:2e:33:03:a4:45:3b:4e:95:a3:c5:5a:1d:
         e0:ac:68:30:3f:a3:d5:c0:cb:be:86:f4:a4:88:43:ab:7f:b2:
         d4:75:7b:22:92:68:8e:7e:a6:4f:7f:bc:bb:f2:75:72:20:5d:
         b5:66:b9:49:4d:c3:6e:fa:4b:04:55:f9:2a:f2:6c:9a:ad:31:
         5d:c4:a1:4d:4a:c4:13:4a:c4:fc:d2:1e:00:7f:dc:1e:37:24:
         fb:1d:04:26:5a:97:6e:cd:ee:78:1d:d3:60:65:d8:f6:20:da:
         00:fa:d9:3a:a7:22:59:2d:4a:33:85:5f:3c:e0:f2:c8:ae:97:
         78:b5:1a:67:ff:da:ba:70:22:fb:b1:33:d8:43:c5:f6:2d:42:
         e3:53:c7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----