Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e33382e302f32332d3233203d3e2035363530.roa
File:                     34372e3138312e33382e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          kvQ4RWZLH2q2za9c+uDhYEoYDYQYWp2SgZbr8YG00fw=
Subject key identifier:   D1:96:97:28:64:E1:B9:58:25:94:06:2F:C0:BE:D7:DC:53:82:A7:52
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       4DC6DE6A638B1FA640CEB10BAC6B6010EC3BBFDC
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e33382e302f32332d3233203d3e2035363530.roa
Signing time:             Tue 13 Feb 2024 05:09:46 +0000
ROA not before:           Tue 13 Feb 2024 05:04:46 +0000
ROA not after:            Tue 11 Feb 2025 05:09:46 +0000
asID:                     5650
IP address blocks:        47.181.38.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c6:de:6a:63:8b:1f:a6:40:ce:b1:0b:ac:6b:60:10:ec:3b:bf:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Feb 13 05:04:46 2024 GMT
            Not After : Feb 11 05:09:46 2025 GMT
        Subject: CN=D196972864E1B9582594062FC0BED7DC5382A752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fd:52:b2:4c:2b:b5:96:cc:bf:d5:a6:ca:41:
                    1f:c6:cf:45:3f:83:cd:7d:1b:3a:03:d6:25:ef:9c:
                    4e:3f:44:f5:21:2e:75:1a:d6:95:8d:ff:7f:3c:d4:
                    d4:ea:9b:54:39:52:6b:e9:46:11:15:ad:c8:dc:6d:
                    e5:ff:63:f0:eb:50:47:d4:08:7a:54:f5:7f:23:8e:
                    06:79:2a:1c:0a:5b:d5:97:d0:75:e5:5b:bf:2c:bd:
                    31:a9:78:c0:f2:86:ea:16:17:9f:8d:99:2f:a8:a3:
                    1e:84:91:32:40:d9:66:06:a2:25:d4:d0:9d:38:d2:
                    21:e7:03:0c:65:f6:2a:e4:84:3c:43:21:df:15:42:
                    5a:29:af:d0:35:b8:3c:40:ae:cc:22:55:df:c4:62:
                    01:c9:b6:6e:6f:b0:f2:5c:d0:75:28:3b:9c:7c:a9:
                    26:e0:d1:cb:a4:e0:93:f5:c0:bb:a7:21:70:97:0a:
                    3c:ef:c1:f9:79:38:fe:60:a1:9c:31:97:51:a9:3d:
                    86:df:12:55:1f:5f:85:fc:c3:fd:6c:bd:99:be:cb:
                    d4:cb:99:3b:6a:ee:12:78:c4:12:97:10:42:ba:c2:
                    ea:84:cb:68:dd:f9:ec:62:ce:3e:ea:bb:b2:fe:e9:
                    d8:1f:41:7e:bf:ea:59:eb:c6:45:2a:e8:6d:9e:63:
                    6e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:96:97:28:64:E1:B9:58:25:94:06:2F:C0:BE:D7:DC:53:82:A7:52
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e33382e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.181.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:c4:16:0d:e1:ce:ee:5e:2f:94:dc:46:49:c7:e0:2a:0d:a6:
         61:79:68:de:3c:d8:fd:af:aa:5a:f2:c6:e2:6f:99:09:32:b5:
         be:86:f4:e0:ad:e8:10:ab:5d:da:55:34:33:3e:53:4b:f7:94:
         a6:61:4c:34:77:53:a1:98:f1:96:08:5b:99:35:58:2f:91:6d:
         09:3d:48:f9:1e:83:1b:93:28:78:a6:8e:b1:4c:e2:1a:b4:80:
         e1:ba:e6:5c:fd:4c:d8:64:34:e9:e9:7a:a6:a9:5c:b1:e1:28:
         0a:81:a1:6f:2e:c2:61:76:48:70:4d:9d:bb:35:19:d8:79:5a:
         77:d8:36:eb:f7:87:d9:c0:37:74:4c:12:43:55:75:ee:ee:ee:
         0d:b5:6a:71:d8:f2:c3:1d:38:8c:a6:ff:04:c4:e1:a5:90:fb:
         e7:ba:08:47:77:c0:fc:c0:c9:17:9e:d5:6b:62:93:e0:2c:b9:
         56:0d:ec:a1:3c:17:b4:b5:0e:d3:c4:c7:7f:6d:ad:8e:34:57:
         51:6b:06:10:5c:60:f4:5d:57:be:ad:f9:30:b8:b3:87:a8:91:
         95:71:19:09:40:76:72:77:b4:66:2d:b9:94:88:a6:54:e3:19:
         54:0f:42:ec:b3:f7:b7:ed:34:9b:61:cd:0f:90:65:0a:ca:5b:
         32:ef:44:12
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUTcbeamOLH6ZAzrELrGtgEOw7v9wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzc2NjYxNjAwNTlhZjJjMTEyOWVjYjllNWY2YWJmNWNh
OTJiYzg3NDRkNjFkNDU5ZWYwHhcNMjQwMjEzMDUwNDQ2WhcNMjUwMjExMDUwOTQ2
WjAzMTEwLwYDVQQDEyhEMTk2OTcyODY0RTFCOTU4MjU5NDA2MkZDMEJFRDdEQzUz
ODJBNzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6P1SskwrtZbM
v9WmykEfxs9FP4PNfRs6A9Yl75xOP0T1IS51GtaVjf9/PNTU6ptUOVJr6UYRFa3I
3G3l/2Pw61BH1Ah6VPV/I44GeSocClvVl9B15Vu/LL0xqXjA8obqFhefjZkvqKMe
hJEyQNlmBqIl1NCdONIh5wMMZfYq5IQ8QyHfFUJaKa/QNbg8QK7MIlXfxGIBybZu
b7DyXNB1KDucfKkm4NHLpOCT9cC7pyFwlwo878H5eTj+YKGcMZdRqT2G3xJVH1+F
/MP9bL2ZvsvUy5k7au4SeMQSlxBCusLqhMto3fnsYs4+6ruy/unYH0F+v+pZ68ZF
KuhtnmNuHwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNGWlyhk4blYJZQGL8C+19xT
gqdSMB8GA1UdIwQYMBaAFPeLPlLSe9LnS+pP5uhiQGDdOF03MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzMv
Rjc4QjNFNTJEMjdCRDJFNzRCRUE0RkU2RTg2MjQwNjBERDM4NUQzNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2YxNjcwNWEyLTA3YWMtNDAzMS05MjM3LTEwNDg5YzMxYjk2YS8zNzY2
NjE2MDA1OWFmMmMxMTI5ZWNiOWU1ZjZhYmY1Y2E5MmJjODc0NGQ2MWQ0NTllZi5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzMvMzQzNzJlMzEzODMxMmUzMzM4MmUzMDJmMzIzMzJkMzIzMzIw
M2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEvtSYwDQYJKoZIhvcNAQELBQADggEB
AKDEFg3hzu5eL5TcRknH4CoNpmF5aN482P2vqlryxuJvmQkytb6G9OCt6BCrXdpV
NDM+U0v3lKZhTDR3U6GY8ZYIW5k1WC+RbQk9SPkegxuTKHimjrFM4hq0gOG65lz9
TNhkNOnpeqapXLHhKAqBoW8uwmF2SHBNnbs1Gdh5WnfYNuv3h9nAN3RMEkNVde7u
7g21anHY8sMdOIym/wTE4aWQ++e6CEd3wPzAyRee1Wtik+AsuVYN7KE8F7S1DtPE
x39trY40V1FrBhBcYPRdV76t+TC4s4eokZVxGQlAdnJ3tGYtuZSIplTjGVQPQuyz
97ftNJthzQ+QZQrKWzLvRBI=
-----END CERTIFICATE-----