Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/1b5ac760-63af-3462-8d1b-49c9a9819b00.roa
File:                     1b5ac760-63af-3462-8d1b-49c9a9819b00.roa (raw, json)
Hash identifier:          t9ed51e9PWdSJSqI9EBYEp27AVbCpMLdB2aFyHm5FR0=
Subject key identifier:   CB:36:CC:6C:FC:7F:D8:7D:75:D5:46:86:39:36:7D:D9:41:B7:24:27
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584309FE32ED1FF7031A4CB9AE40
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/1b5ac760-63af-3462-8d1b-49c9a9819b00.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        64.15.122.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fe:32:ed:1f:f7:03:1a:4c:b9:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=037d2609-0139-4823-b8ea-ad0a7b641110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ac:e1:a3:08:48:71:c4:74:e8:f0:a1:4a:97:
                    93:30:cc:c2:fa:ab:d5:00:cc:59:0c:bb:27:67:79:
                    05:d9:ea:21:03:93:15:14:43:1d:34:f4:6c:0c:06:
                    01:55:c5:14:41:ad:00:1d:19:f7:0f:82:13:f9:31:
                    a8:b2:25:f0:1c:63:0b:ce:34:5f:6c:39:e6:03:61:
                    8d:f9:d3:0c:99:a1:e6:b2:ad:a0:a4:7c:68:fb:92:
                    18:83:7b:93:cf:3a:44:e1:d1:61:3a:cd:1a:f4:0f:
                    a7:3d:e2:90:41:6a:03:70:b9:1f:54:89:63:ed:0c:
                    d0:25:98:51:2c:24:4b:23:d4:c4:85:c7:ce:c8:7c:
                    b5:b2:62:9d:f5:ea:c9:19:29:3f:75:48:2d:7c:c6:
                    e6:1e:bd:07:07:ca:04:4a:2a:3f:2c:65:4c:d3:5f:
                    39:ab:ca:14:b4:21:b5:59:6f:1e:b8:35:69:df:80:
                    6e:2e:d6:ee:fe:f7:54:37:43:26:53:a3:bb:9e:17:
                    a8:6b:4e:72:6f:65:89:47:6d:7c:0e:64:43:96:9f:
                    90:16:1c:e7:65:7a:b1:35:95:ec:67:7a:39:9d:31:
                    09:fd:f5:6d:67:2c:c4:72:88:03:8f:7c:10:32:27:
                    cf:87:b3:05:3c:1e:84:3d:6f:a2:58:74:05:15:99:
                    1e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:36:CC:6C:FC:7F:D8:7D:75:D5:46:86:39:36:7D:D9:41:B7:24:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/1b5ac760-63af-3462-8d1b-49c9a9819b00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:d9:fe:a3:2c:79:94:57:f4:31:74:f9:fe:84:14:f3:7b:d5:
         d5:b1:0d:e8:2e:fb:6d:70:09:67:3f:f3:8f:f8:36:da:04:c5:
         7e:d4:a3:a6:9c:e2:97:70:51:35:47:f5:ab:60:b2:81:9c:50:
         89:2b:38:ce:44:89:01:35:ed:c3:27:c8:6d:34:35:90:b9:0c:
         c8:01:5f:7a:d8:d7:77:61:73:91:85:f7:d0:46:28:7b:d0:59:
         05:ae:d9:82:28:01:25:b9:6b:e8:d6:29:3d:bc:7f:77:ce:4c:
         37:ef:e9:0e:83:81:37:6e:8d:ed:6a:0c:8c:d8:fc:e3:61:c9:
         e2:70:b2:19:c2:76:cd:18:bc:08:1b:61:50:81:81:bd:4d:d8:
         ea:0f:63:82:23:9e:80:fb:f7:ce:20:ab:e9:0b:20:60:1f:66:
         a9:de:ff:e1:42:81:c9:2a:73:36:93:86:82:3b:d0:81:d7:15:
         ac:1c:95:23:c5:7b:96:f3:04:6b:a5:50:87:ba:da:10:3e:5f:
         33:e3:8e:ef:bd:97:38:11:39:40:53:53:4b:65:e5:11:19:d6:
         37:9c:06:b0:e4:18:4a:4b:e8:9d:61:f5:f9:95:2c:a1:4e:d4:
         70:13:a6:21:22:6b:0a:b2:48:dc:5e:19:88:1d:46:e4:a2:57:
         f8:ef:13:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----