Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e34382e302f32302d3230203d3e2035363530.roa
File:                     34372e3138312e34382e302f32302d3230203d3e2035363530.roa (raw, json)
Hash identifier:          PB5SpV4bmWvHWNmWo/Thk/gmDeRfscVko9mtocqGTrQ=
Subject key identifier:   90:59:3F:8D:A1:75:C1:21:F1:0E:B6:3F:69:7C:64:1F:DB:76:71:22
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       26D155F7A2C20A47A15C2CFE90967A715B7AD002
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e34382e302f32302d3230203d3e2035363530.roa
Signing time:             Tue 19 Mar 2024 04:17:49 +0000
ROA not before:           Tue 19 Mar 2024 04:12:49 +0000
ROA not after:            Tue 18 Mar 2025 04:17:49 +0000
asID:                     5650
IP address blocks:        47.181.48.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d1:55:f7:a2:c2:0a:47:a1:5c:2c:fe:90:96:7a:71:5b:7a:d0:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Mar 19 04:12:49 2024 GMT
            Not After : Mar 18 04:17:49 2025 GMT
        Subject: CN=90593F8DA175C121F10EB63F697C641FDB767122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b0:31:8a:0e:1a:76:e3:81:74:5c:2f:50:e6:
                    38:d3:c3:00:8b:50:1e:0f:d8:6d:b1:aa:32:22:1e:
                    b0:54:c1:18:ed:0d:33:da:9c:4c:57:1f:1f:0e:ef:
                    ca:13:1f:f5:4a:50:91:ad:6d:ef:98:6d:df:20:57:
                    db:73:94:96:fb:86:37:af:42:57:0a:9c:82:e6:65:
                    b2:87:73:f3:44:2b:0b:1b:14:ca:bf:6a:48:4e:3e:
                    82:2a:8b:81:c7:2f:82:ff:af:11:bd:8b:83:ce:5b:
                    3f:d6:1d:a6:35:17:2b:af:03:b3:6c:d2:74:c5:2d:
                    12:f8:84:58:8c:9d:08:e1:c9:61:23:9f:69:94:90:
                    63:b9:34:e3:87:5b:a9:8b:bc:73:8d:05:74:db:7f:
                    df:ff:dc:1d:af:70:04:93:b2:df:ae:fa:32:c3:ec:
                    59:f6:12:51:c7:e5:9e:0a:2c:44:5b:b5:c0:53:91:
                    f0:10:78:35:ee:ab:39:b6:86:ec:5d:4f:a1:53:8d:
                    3f:57:d3:ba:ec:f8:b4:18:68:03:47:9e:d9:d9:1e:
                    47:41:81:70:7d:64:83:95:ff:da:b6:f5:23:0c:ef:
                    23:2f:60:3c:83:e2:ac:7b:a9:f2:c7:d8:bd:0b:25:
                    16:61:ca:54:2f:23:8a:97:91:91:d7:f6:df:3b:b5:
                    aa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:59:3F:8D:A1:75:C1:21:F1:0E:B6:3F:69:7C:64:1F:DB:76:71:22
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e34382e302f32302d3230203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.181.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:90:1b:c3:79:10:50:10:88:a2:c4:5d:70:e5:42:79:44:95:
         83:54:d9:be:a0:72:cd:5e:90:52:81:27:e8:70:f6:46:72:a8:
         5a:5c:21:0f:31:fd:2d:2a:c7:87:62:54:d2:72:9c:91:ac:18:
         f1:01:e3:60:69:f8:45:7f:63:98:e0:56:2d:da:b7:e4:fd:c2:
         19:40:ba:ff:2d:a9:25:99:d7:c4:d1:ef:41:a8:74:e9:9d:9f:
         16:e5:f8:0a:9a:6b:69:02:30:58:40:43:10:53:73:98:e0:bc:
         76:c5:ea:ea:b0:f1:4b:e2:f3:bf:4b:f3:87:05:0b:8b:52:36:
         f7:2f:b4:52:8f:df:9f:f6:e3:8c:b9:4a:a2:b5:66:bc:c1:19:
         f3:55:54:4c:f5:f1:24:5e:77:8a:7b:86:3b:60:25:6b:3e:a7:
         04:b4:54:bf:9e:75:34:04:9f:2e:02:70:2d:48:31:55:d6:22:
         98:91:cc:4b:36:88:5c:38:e1:47:85:74:37:68:f4:95:7c:15:
         89:6c:5d:37:98:c2:65:f3:00:73:56:ec:cc:e2:5d:da:bf:2a:
         b9:0c:69:14:ab:f7:f2:a8:99:30:61:89:17:f7:ec:f2:10:72:
         30:c7:05:ed:78:95:e5:b0:55:fa:67:01:ad:9c:91:7b:33:f6:
         34:34:eb:8c
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUJtFV96LCCkehXCz+kJZ6cVt60AIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzc2NjYxNjAwNTlhZjJjMTEyOWVjYjllNWY2YWJmNWNh
OTJiYzg3NDRkNjFkNDU5ZWYwHhcNMjQwMzE5MDQxMjQ5WhcNMjUwMzE4MDQxNzQ5
WjAzMTEwLwYDVQQDEyg5MDU5M0Y4REExNzVDMTIxRjEwRUI2M0Y2OTdDNjQxRkRC
NzY3MTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbAxig4aduOB
dFwvUOY408MAi1AeD9htsaoyIh6wVMEY7Q0z2pxMVx8fDu/KEx/1SlCRrW3vmG3f
IFfbc5SW+4Y3r0JXCpyC5mWyh3PzRCsLGxTKv2pITj6CKouBxy+C/68RvYuDzls/
1h2mNRcrrwOzbNJ0xS0S+IRYjJ0I4clhI59plJBjuTTjh1upi7xzjQV023/f/9wd
r3AEk7Lfrvoyw+xZ9hJRx+WeCixEW7XAU5HwEHg17qs5tobsXU+hU40/V9O67Pi0
GGgDR57Z2R5HQYFwfWSDlf/atvUjDO8jL2A8g+Kse6nyx9i9CyUWYcpULyOKl5GR
1/bfO7WqHwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFJBZP42hdcEh8Q62P2l8ZB/b
dnEiMB8GA1UdIwQYMBaAFPeLPlLSe9LnS+pP5uhiQGDdOF03MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzMv
Rjc4QjNFNTJEMjdCRDJFNzRCRUE0RkU2RTg2MjQwNjBERDM4NUQzNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2YxNjcwNWEyLTA3YWMtNDAzMS05MjM3LTEwNDg5YzMxYjk2YS8zNzY2
NjE2MDA1OWFmMmMxMTI5ZWNiOWU1ZjZhYmY1Y2E5MmJjODc0NGQ2MWQ0NTllZi5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzMvMzQzNzJlMzEzODMxMmUzNDM4MmUzMDJmMzIzMDJkMzIzMDIw
M2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQvtTAwDQYJKoZIhvcNAQELBQADggEB
AAyQG8N5EFAQiKLEXXDlQnlElYNU2b6gcs1ekFKBJ+hw9kZyqFpcIQ8x/S0qx4di
VNJynJGsGPEB42Bp+EV/Y5jgVi3at+T9whlAuv8tqSWZ18TR70GodOmdnxbl+Aqa
a2kCMFhAQxBTc5jgvHbF6uqw8Uvi879L84cFC4tSNvcvtFKP35/244y5SqK1ZrzB
GfNVVEz18SRed4p7hjtgJWs+pwS0VL+edTQEny4CcC1IMVXWIpiRzEs2iFw44UeF
dDdo9JV8FYlsXTeYwmXzAHNW7MziXdq/KrkMaRSr9/KomTBhiRf37PIQcjDHBe14
leWwVfpnAa2ckXsz9jQ064w=
-----END CERTIFICATE-----