Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5a5c30c4-4412-314e-af9b-c8e4f3b80b03.roa
File:                     5a5c30c4-4412-314e-af9b-c8e4f3b80b03.roa (raw, json)
Hash identifier:          FZel2GxrdBNR1ZhJjJbHe2r6cOzr4YaJTof9RCEnYa4=
Subject key identifier:   37:94:E5:CD:DC:A0:D3:4D:95:F1:FD:C7:58:7C:BD:93:92:4D:BB:8A
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584309FEADB28EEE628E6AEE1680
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5a5c30c4-4412-314e-af9b-c8e4f3b80b03.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        208.117.254.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:23:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fe:ad:b2:8e:ee:62:8e:6a:ee:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=c85782c9-1b9a-4a74-9393-ca775866b0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:97:42:9d:1d:81:1b:61:bc:53:9c:ad:9f:c8:
                    b6:7e:3a:8a:40:8b:e6:8f:d4:63:4e:fd:52:09:22:
                    77:f9:67:33:42:6c:79:94:5d:53:26:58:19:7a:6b:
                    ab:dd:a3:95:08:9b:d1:03:da:e2:17:56:1c:0d:d9:
                    1f:ff:69:ab:6f:b4:1a:e6:69:55:b8:97:ec:05:bd:
                    d1:41:96:45:19:bf:5c:f3:1f:ee:f2:9f:12:ac:00:
                    37:37:d1:b3:87:29:64:3a:df:5f:b0:70:48:5c:42:
                    59:e9:03:20:95:59:cf:6f:38:15:9b:71:0f:85:45:
                    91:42:a0:e8:04:cb:46:d6:1a:c7:04:a7:1b:a6:05:
                    0c:92:ca:a2:11:0a:dc:8a:81:c1:7f:d3:ee:0f:50:
                    1b:12:1a:38:33:70:96:a5:6a:e4:c3:7c:06:12:90:
                    df:20:64:a9:57:c1:98:1f:f5:a2:27:a6:11:dd:ab:
                    f0:95:1e:16:56:d0:2d:16:60:7a:ab:34:72:9b:3a:
                    14:82:60:0c:34:18:31:1b:39:a7:87:bb:ce:18:e2:
                    bd:2e:34:e9:b9:ef:2e:f4:25:5a:e7:c5:c5:8b:66:
                    6a:1c:bf:f0:8e:a9:c7:e8:f3:55:ae:d1:df:71:3a:
                    0f:a0:ca:c5:2e:37:1b:36:99:e0:d9:6b:13:fc:ff:
                    22:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:94:E5:CD:DC:A0:D3:4D:95:F1:FD:C7:58:7C:BD:93:92:4D:BB:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5a5c30c4-4412-314e-af9b-c8e4f3b80b03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:32:a3:53:06:22:53:7d:67:a0:d5:07:ac:88:36:63:e7:55:
         b0:74:fe:7a:5c:c4:bd:67:b4:9c:4f:5e:76:17:7d:0f:a2:c2:
         8a:2b:40:c0:93:88:63:34:ec:22:50:29:bd:3f:28:78:11:a6:
         8e:37:84:b9:cd:a1:f6:9f:a2:54:85:b6:eb:ee:ae:cc:24:2a:
         50:c7:d2:ef:01:e3:02:1f:d7:98:1b:07:95:d7:07:e6:68:c7:
         4b:6f:8f:13:5b:ea:1c:da:0a:2e:19:46:d4:35:93:77:23:d0:
         08:77:c5:ee:d5:1b:ca:13:7f:d0:42:3f:62:04:70:e4:cc:13:
         bc:1d:1e:34:cc:9a:af:bf:d5:76:48:38:f0:aa:8e:19:de:64:
         1c:d1:31:8d:e8:ed:10:1f:c4:21:c1:7c:fb:1b:b7:c1:75:22:
         1d:06:73:85:01:97:03:10:60:c2:1f:1b:6b:e8:26:a1:4a:3d:
         1c:57:88:80:d0:b5:82:01:91:46:1c:e7:9d:a9:06:fe:ca:94:
         68:07:0e:d8:f3:b6:cb:af:50:c5:60:1e:f1:a9:9f:96:d8:b5:
         62:6c:74:f6:ed:8f:51:d3:50:0d:63:f8:70:44:e8:39:e6:cf:
         e8:a8:41:66:9f:dd:9b:ad:29:e4:c2:e0:b4:e5:b8:0e:5c:d3:
         f2:3a:d3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----