Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e34302e302f32332d3233203d3e2035363530.roa
File:                     34372e3138312e34302e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          A7NEriEpTBNpbsqZxeKucvg7V1UlyG1Sq5v3U/NRiU0=
Subject key identifier:   9C:E8:7D:4C:4D:0D:65:FC:E1:E8:0C:95:FA:D0:BD:E1:01:AF:72:01
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       13AEC02C7E6BF548D6C6004E50FEBABC05AEF470
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e34302e302f32332d3233203d3e2035363530.roa
Signing time:             Tue 13 Feb 2024 05:09:57 +0000
ROA not before:           Tue 13 Feb 2024 05:04:57 +0000
ROA not after:            Tue 11 Feb 2025 05:09:57 +0000
asID:                     5650
IP address blocks:        47.181.40.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ae:c0:2c:7e:6b:f5:48:d6:c6:00:4e:50:fe:ba:bc:05:ae:f4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Feb 13 05:04:57 2024 GMT
            Not After : Feb 11 05:09:57 2025 GMT
        Subject: CN=9CE87D4C4D0D65FCE1E80C95FAD0BDE101AF7201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d5:b8:87:da:3a:f4:84:b8:d9:90:0b:ff:d0:
                    04:40:83:a9:ba:9c:be:8e:2f:8e:a2:2c:70:2d:8a:
                    3e:02:cf:07:f4:6b:b2:65:bc:d6:a9:86:0c:57:33:
                    20:28:8f:5b:27:ff:06:6d:12:ff:c0:2f:0f:6d:9e:
                    42:5b:25:6e:45:85:f1:70:14:f5:09:42:a8:41:f8:
                    1c:9a:db:9b:99:5c:37:df:9a:19:15:09:9b:10:41:
                    e5:39:cd:67:60:cb:19:a5:66:eb:46:23:66:0c:11:
                    4b:17:63:26:be:d6:f1:ec:dd:42:53:06:bd:37:68:
                    28:0b:d2:3a:96:4b:33:fd:10:57:f5:ad:d1:01:53:
                    95:8a:f8:c4:71:ce:0d:70:e0:cd:69:f5:c2:bb:7d:
                    05:56:f5:c8:e7:a4:c9:99:24:d5:2f:ec:49:0c:ec:
                    69:e2:33:1e:f3:79:29:5e:fe:fe:ac:83:0c:80:02:
                    92:e3:2e:27:81:1a:6e:6b:7a:6b:ea:c1:f0:31:3d:
                    89:90:f2:a5:0d:42:23:4f:e5:ac:19:0d:d4:9b:bd:
                    76:ea:e0:3c:20:04:44:1c:90:ed:9a:b3:5b:38:51:
                    7b:05:6c:f0:61:0d:a7:e8:c6:84:f6:58:f2:b2:91:
                    8f:db:da:b2:8e:79:b1:a4:94:9e:88:2b:6b:9e:7d:
                    c6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E8:7D:4C:4D:0D:65:FC:E1:E8:0C:95:FA:D0:BD:E1:01:AF:72:01
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e34302e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.181.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:c5:28:5e:be:d4:6b:ce:fd:39:86:fb:1b:56:be:17:b6:46:
         49:cf:ad:76:e4:62:14:b1:d3:8d:70:f1:69:5d:2e:b5:43:19:
         83:97:3c:17:55:06:43:b4:28:04:15:63:7e:b4:41:68:35:e9:
         9c:80:dd:11:58:40:55:8e:0e:c8:27:e5:ee:db:1e:99:9a:ca:
         78:cf:dc:0f:1b:e3:c3:a4:6a:6c:78:2e:ac:13:7c:66:38:0c:
         cb:6c:50:df:f2:d7:39:70:80:32:bf:fa:db:db:27:dd:2b:23:
         05:95:2f:5d:b4:0e:61:6a:5b:65:f6:6a:07:df:6f:0e:4e:0f:
         fa:2a:4b:dd:b3:9e:a8:2d:86:d8:1b:1f:c7:e4:b4:cb:4b:77:
         de:78:bf:33:97:72:11:ec:a4:ce:26:b2:21:cc:b2:e0:84:60:
         2c:3b:22:ac:6e:ca:8d:a4:df:4e:13:bf:2f:fa:6f:ee:f8:ba:
         8d:58:eb:df:94:35:e0:d2:61:44:ea:dc:18:00:be:92:1d:a2:
         39:7b:88:f9:d6:ba:02:40:6a:b9:10:79:76:6a:3a:dc:52:6c:
         e5:d6:9d:0a:7c:ca:ed:68:6b:55:4d:cb:e6:30:a3:00:7e:2b:
         12:99:89:e8:e8:10:0b:20:c4:dc:80:64:61:d9:f0:de:ad:48:
         6f:64:2f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----