Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e34322e302f32332d3233203d3e2035363530.roa
File:                     34372e3138312e34322e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          BAJFVjswqC3MId/25pzJFve71eF+IiSm+1tjsEqq1uI=
Subject key identifier:   CD:F7:F0:67:A9:01:A5:42:77:DE:2F:3A:E2:B1:39:23:BE:22:8D:B4
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       761D94091557A5D3441AEB19D6A3C8E877E47033
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e34322e302f32332d3233203d3e2035363530.roa
Signing time:             Tue 13 Feb 2024 05:10:08 +0000
ROA not before:           Tue 13 Feb 2024 05:05:08 +0000
ROA not after:            Tue 11 Feb 2025 05:10:08 +0000
asID:                     5650
IP address blocks:        47.181.42.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:1d:94:09:15:57:a5:d3:44:1a:eb:19:d6:a3:c8:e8:77:e4:70:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Feb 13 05:05:08 2024 GMT
            Not After : Feb 11 05:10:08 2025 GMT
        Subject: CN=CDF7F067A901A54277DE2F3AE2B13923BE228DB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6b:ab:e4:6e:68:de:6f:51:bf:0f:b3:8b:88:
                    6a:cd:ca:3a:0a:9c:99:de:9b:4e:61:38:11:37:07:
                    f1:32:f5:36:71:c2:d9:d4:e6:49:52:08:7b:c2:2c:
                    7b:5a:54:ae:2f:21:b3:1c:6b:e9:d5:6a:01:c5:0c:
                    22:45:a9:4c:b8:73:af:fb:ba:58:75:56:41:43:0f:
                    c8:85:0c:1f:62:73:7c:ac:5c:96:56:d5:e4:70:a5:
                    0f:b0:50:b1:3c:5a:5a:55:40:5f:91:50:c6:3b:98:
                    62:ed:a9:e5:3d:19:95:46:fc:30:b9:75:87:80:97:
                    da:19:71:0d:64:07:96:93:d9:39:da:bf:95:10:47:
                    ed:a7:de:5b:83:e8:a7:78:70:6d:67:45:b9:6c:e5:
                    15:5c:f5:bb:e8:32:3c:47:8a:9d:de:d3:01:60:19:
                    26:89:e2:01:6f:89:cf:25:fd:fc:7f:92:6b:4a:77:
                    39:34:f2:91:d5:83:8b:bd:81:98:44:3a:68:52:9d:
                    e2:a5:7d:5b:73:3a:e5:6a:5a:e1:ec:e0:6a:63:4b:
                    de:1d:8e:dd:50:6f:1d:0e:9b:68:2f:83:11:50:b4:
                    0d:06:66:fa:dd:45:86:fa:a1:95:1a:98:d5:83:08:
                    6f:b2:83:1d:88:c5:50:12:d1:e7:f7:00:5f:dc:6d:
                    a8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F7:F0:67:A9:01:A5:42:77:DE:2F:3A:E2:B1:39:23:BE:22:8D:B4
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e34322e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.181.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:72:8c:19:e8:ab:6e:d4:a8:0b:cc:70:3e:c9:b2:3e:e0:a2:
         50:c9:a6:4a:22:6c:ed:75:69:4f:8f:53:a2:4a:df:98:12:3b:
         6c:36:fd:42:86:67:63:db:a7:21:6f:6b:73:c3:ae:52:52:46:
         d8:40:b2:5a:b1:79:d5:25:cd:a8:6a:f7:97:b4:5c:77:65:28:
         e1:67:33:a1:57:7c:9d:04:9f:20:42:c4:7b:ce:45:a4:15:20:
         52:2f:e7:d3:f3:27:10:aa:39:7e:97:7d:f1:87:e8:ab:63:b7:
         33:73:cf:f2:d1:7d:08:32:ef:f5:f0:8d:ed:ca:24:d6:99:f4:
         8d:50:89:8f:c9:ba:33:8a:ab:f9:a4:b7:b1:4e:85:0e:48:d5:
         1f:6b:8d:e2:db:30:c0:30:ba:10:6c:69:ac:cf:3c:ce:f9:53:
         06:e3:9d:a0:44:e2:b3:3f:0f:7e:15:ae:29:a0:2c:c5:8a:23:
         01:04:8e:35:5a:dd:a3:49:e2:8d:fb:dc:88:a2:fe:8c:d1:0a:
         32:0c:bd:f4:d6:81:43:0c:72:d2:d4:f3:f4:44:20:ce:92:93:
         e7:0a:4a:c6:93:8a:4b:20:4b:83:7d:ce:52:a0:b8:d6:36:64:
         e5:02:f2:07:0e:a7:ee:ab:57:4d:f7:04:df:b5:72:a3:29:34:
         d0:05:5a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----