Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/000bb2bd-cd12-372f-a43c-7472555b9772.roa
File:                     000bb2bd-cd12-372f-a43c-7472555b9772.roa (raw, json)
Hash identifier:          D360yPGim7JRucWXN2YbAdGxRe09P+eLEcqNQZWCW/w=
Subject key identifier:   4E:E2:51:67:5E:AF:F3:D5:43:C6:C3:A9:5F:23:D2:D4:9F:65:6A:90
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584309F15599D0543D349C94C5C0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/000bb2bd-cd12-372f-a43c-7472555b9772.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        104.237.160.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f1:55:99:d0:54:3d:34:9c:94:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=8f8c96b8-4bde-4888-afdf-8ef5a08f78de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:26:ff:dc:4b:1b:f6:9c:e6:69:1b:d4:05:46:
                    d3:14:e0:ce:6c:b7:96:08:8c:1e:47:61:35:3a:18:
                    b0:d6:7b:a3:c2:3b:56:9e:8b:42:62:99:2f:a1:ce:
                    12:8f:cf:91:b9:49:09:c3:c6:06:19:18:9a:01:42:
                    68:b4:ba:39:55:11:96:a3:74:04:3b:76:78:e0:02:
                    5f:a3:b7:19:49:a0:8a:95:9a:5d:03:fc:a2:b6:67:
                    81:c3:e9:f4:92:12:51:c5:98:ba:b0:ba:47:ef:76:
                    fc:2f:44:8c:2a:33:3c:ee:63:77:a8:c4:12:63:32:
                    2f:45:fa:50:83:29:bc:d7:d5:e8:f6:76:e4:30:4c:
                    1a:d3:bd:19:e5:f0:08:d3:b9:ea:72:89:03:bf:2e:
                    01:56:d5:9b:2e:5d:4e:e5:0c:6d:66:8d:7c:81:0a:
                    e0:d2:fd:0f:91:b4:91:eb:53:a0:ff:60:a3:c5:41:
                    74:ce:b7:ee:b8:ec:b5:1f:18:90:8a:5b:33:33:e2:
                    a1:24:c1:44:f0:b5:b6:59:59:56:36:35:c0:fc:dd:
                    fe:0f:f2:ff:7b:b7:a5:91:bd:55:08:22:75:11:77:
                    a0:17:46:64:c4:1b:d1:b8:34:58:83:03:36:30:3d:
                    f4:73:8d:04:3b:76:0f:af:87:28:c5:bc:bf:fc:70:
                    57:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E2:51:67:5E:AF:F3:D5:43:C6:C3:A9:5F:23:D2:D4:9F:65:6A:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/000bb2bd-cd12-372f-a43c-7472555b9772.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:4f:33:24:58:cc:dd:e0:63:53:63:65:f6:85:b6:3b:de:ad:
         5b:30:81:1f:cd:7b:2f:71:4e:79:a1:62:64:8d:a2:4f:c6:83:
         66:f3:36:83:12:97:16:3c:ff:9c:70:0c:c0:fe:6c:5d:d9:bd:
         58:13:77:36:97:c9:7f:b2:4d:b0:f6:cb:b4:81:02:ea:52:84:
         4b:1b:da:70:c3:8c:80:8a:b9:93:b4:9b:8d:f8:ce:ac:c0:4a:
         c2:e2:fc:2a:bf:9c:46:c2:44:37:12:87:21:42:4f:b4:79:1b:
         83:3d:85:e8:3a:2c:39:dc:c9:d7:5b:1b:ed:7c:b7:dc:65:71:
         66:e7:4f:4a:f5:e1:26:b8:20:a3:77:0f:e4:ae:f3:a9:e8:31:
         5a:83:4c:94:3a:7a:69:b7:8e:a3:ae:8b:4c:10:aa:6c:82:59:
         b4:78:e5:57:05:82:32:07:0d:0c:ee:a5:ae:9f:c2:f1:f5:b3:
         bb:b1:6a:41:d8:23:24:a0:e7:61:f6:98:6f:db:8f:ba:55:f2:
         fc:67:c9:7c:7e:70:8a:72:aa:a3:c9:9d:02:25:62:72:55:12:
         d6:7c:d8:a5:0c:ef:1d:88:45:fc:5f:d6:bd:7c:49:2d:13:ff:
         27:91:ad:62:ad:1b:51:b5:59:50:35:d3:59:6a:cc:e5:83:90:
         37:c5:58:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----