Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/0ce64d1b-5d15-3a42-af53-4f828650cbaa.roa
File:                     0ce64d1b-5d15-3a42-af53-4f828650cbaa.roa (raw, json)
Hash identifier:          FJQD6QFq/9lzRCWw/2u983uhhweHzZqNUbtwnSxGFBc=
Subject key identifier:   07:8F:E6:AA:6F:15:C8:47:43:73:42:E2:B6:1D:4D:04:D1:65:DB:B2
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858430A06339F2411BE62897B5E80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/0ce64d1b-5d15-3a42-af53-4f828650cbaa.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        64.15.120.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:19:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:06:33:9f:24:11:be:62:89:7b:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=434f77c5-61c4-48f5-91a6-cb173b0bbc45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cb:e3:7a:a8:b2:9b:d3:e8:a7:60:19:7b:90:
                    bc:93:35:fa:0f:8c:dc:46:14:10:48:f0:00:d8:fc:
                    e6:cc:97:e8:6b:b4:0e:bb:53:0d:ce:80:2b:87:a3:
                    0a:d7:21:76:8f:c4:5e:11:39:85:ba:d4:f6:45:d1:
                    1c:c1:7a:df:1c:17:57:67:67:55:74:8e:6c:4c:2e:
                    52:2f:6b:0d:b6:dc:6d:2e:d4:11:3e:3b:82:05:2e:
                    12:48:b9:c2:b3:9c:75:bf:95:29:78:c3:d7:12:8a:
                    32:98:67:f2:23:1a:55:f0:4a:2e:a1:9e:c0:d6:b3:
                    ff:bb:50:c5:86:0c:43:07:20:53:92:f3:fa:35:83:
                    fb:4f:9b:d9:50:d8:da:8f:65:f0:12:76:0e:03:32:
                    57:78:87:ea:4d:70:12:3c:f0:f9:dc:c7:b4:98:89:
                    02:b3:89:8f:2b:60:70:57:47:68:57:4c:7e:2f:65:
                    31:31:aa:80:0c:dc:db:95:79:d9:7f:20:0b:80:99:
                    08:b4:ba:bd:05:04:07:4c:b8:95:37:65:91:6b:bd:
                    93:03:ea:e7:b6:66:bd:2d:c2:ff:96:00:a4:4c:7c:
                    e5:92:2e:d1:08:89:c1:b8:9a:f0:1f:04:26:6c:dc:
                    18:05:b0:fc:98:f0:c4:d5:a6:81:da:e6:2f:50:9f:
                    09:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8F:E6:AA:6F:15:C8:47:43:73:42:E2:B6:1D:4D:04:D1:65:DB:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/0ce64d1b-5d15-3a42-af53-4f828650cbaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:8f:68:37:05:25:b2:b8:3e:6d:bb:db:47:89:21:ca:f0:4e:
         b3:b7:4f:6e:cc:ae:1f:2a:b3:0f:8e:20:eb:5e:5d:aa:bb:a6:
         ec:96:83:4b:44:0b:41:39:b7:14:e0:51:0d:e1:0f:08:ad:7d:
         f1:21:78:1e:a6:98:91:b8:ef:22:29:9a:f8:c5:bf:9e:02:e5:
         91:79:1f:ba:d2:77:42:77:16:3d:a5:b8:90:3f:79:58:5d:c9:
         83:db:a7:2d:14:cd:c1:de:7c:ba:d8:f4:ab:37:f5:6b:48:8f:
         3e:11:b3:34:c2:e3:03:e1:2c:f1:05:23:ae:d4:96:f3:8e:35:
         b2:39:60:8c:e7:96:25:06:88:82:ae:87:7d:bd:02:59:10:cd:
         9e:aa:67:58:65:98:77:9f:f1:12:8b:e8:b5:21:29:e9:b0:f9:
         11:b3:b0:54:7d:ad:b4:69:2e:22:12:53:d7:23:fc:94:06:cc:
         f4:42:63:28:87:2e:4a:3e:04:a3:61:74:1b:12:1b:4f:67:f7:
         38:8f:64:da:1a:81:02:c6:6f:34:74:fc:fe:1a:00:fa:b8:81:
         62:fc:f8:6c:52:92:04:8a:e7:6b:68:bd:c8:0a:4f:78:f6:94:
         09:f3:d1:2d:3a:de:b9:a8:44:28:72:bb:25:d9:a1:c5:25:a8:
         be:30:fd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----