Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4403b6a4-895f-3795-8c88-5f0c463b3fd6.roa
File:                     4403b6a4-895f-3795-8c88-5f0c463b3fd6.roa (raw, json)
Hash identifier:          aUdbTC8yl+wS6gVIkUwkPJmm/EzjPj9tIVC8awc5JCM=
Subject key identifier:   17:29:19:05:0C:4C:AD:28:5F:40:D5:48:69:60:C4:C5:B2:72:B2:E7
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858430A0A2C1FF1AEF50E04761480
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4403b6a4-895f-3795-8c88-5f0c463b3fd6.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        64.15.122.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0a:2c:1f:f1:ae:f5:0e:04:76:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=7e1193a3-dfe9-46f0-8f26-39bb5175d639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:69:db:f4:ed:19:70:d9:05:70:98:6a:cc:
                    79:46:d3:ce:c2:06:28:c0:61:b6:ce:f4:f7:a3:86:
                    b8:65:7d:e7:cd:c0:23:9a:ca:af:34:b2:b4:c2:5b:
                    e5:7a:eb:ac:1e:55:00:f1:5a:09:66:c2:86:d4:4d:
                    be:eb:5f:b2:c8:17:fd:e5:f8:a5:99:e8:37:4c:ca:
                    79:cf:fb:70:da:bf:fc:be:b9:fe:38:ca:03:48:f7:
                    1e:75:c2:91:84:0a:bb:40:f1:9f:a9:61:49:21:1a:
                    cc:e6:0b:bd:ca:d4:8e:6b:68:c4:93:a1:da:88:d6:
                    bc:6f:fb:7a:ae:9c:ee:76:dc:ee:f9:64:c0:b1:06:
                    c5:ac:3c:a9:fc:28:1f:22:ca:ea:ca:11:0d:7f:7b:
                    f1:f3:2e:c1:f3:40:a4:09:48:32:53:9c:ce:c5:fc:
                    dd:bc:3b:0b:99:36:d9:d7:05:c4:0e:b7:36:67:cd:
                    57:1c:53:61:4b:8f:59:48:6c:96:d1:48:53:a8:1b:
                    c2:0c:77:38:25:4c:42:81:26:60:1f:67:35:bd:a7:
                    6b:b8:6c:cf:f5:00:97:3f:bd:be:07:e3:ed:0e:a6:
                    47:13:e5:a1:ab:0a:78:fa:e6:71:f4:9b:52:c7:27:
                    e8:e2:01:e2:48:26:20:9e:6e:18:dc:e7:d6:41:15:
                    cf:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:29:19:05:0C:4C:AD:28:5F:40:D5:48:69:60:C4:C5:B2:72:B2:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4403b6a4-895f-3795-8c88-5f0c463b3fd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ca:68:8a:a3:2c:ba:81:41:8e:1c:1a:dc:aa:11:28:d6:02:
         cd:91:96:a7:12:6b:88:48:b0:53:88:a1:af:d4:25:47:90:af:
         f9:34:76:bc:c3:04:83:a0:ea:f6:01:46:6a:7d:e3:58:ee:a9:
         ae:e1:22:77:a5:70:cc:35:20:57:fc:1a:f6:94:0b:25:80:c0:
         e5:90:05:7e:e4:25:01:c2:58:b3:3a:17:da:35:cd:02:07:17:
         79:d5:7a:a2:5d:24:5a:a5:d6:e6:51:b4:54:6f:d9:f8:06:f3:
         fa:4c:8f:4b:f1:f6:49:6f:37:80:79:5e:fe:f5:a6:f2:28:b6:
         25:18:34:be:2b:8f:26:84:b4:a5:80:99:19:f1:92:22:c7:5a:
         59:39:a8:a4:42:9a:57:c3:20:8e:9e:f5:46:f4:84:17:26:b0:
         9e:29:44:c8:82:36:b5:62:77:6e:05:50:18:f1:8f:70:93:0e:
         ea:a1:04:74:1f:63:41:b6:22:50:bc:88:8a:83:cc:d4:09:e5:
         39:8f:2a:b2:8e:d1:e0:9c:f6:9d:17:d0:86:7d:92:da:64:8f:
         4e:79:5f:1c:a7:e8:cb:a0:36:f7:26:3e:45:7f:04:46:ac:44:
         49:71:32:90:cc:4f:d0:a4:e7:e1:90:c6:d9:a9:a7:60:4b:10:
         03:c9:14:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----