Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f86604c0-4ae2-37bf-a328-7295105b705b.roa
File:                     f86604c0-4ae2-37bf-a328-7295105b705b.roa (raw, json)
Hash identifier:          eNfpnOR2ZUS5XVHf1Nj1aR7kruxMW33VUeO9WLAsozs=
Subject key identifier:   83:82:4C:47:FA:74:63:F9:5B:E8:49:28:4A:47:FB:90:6A:49:81:60
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858430A22323E14FFF54F6020EB00
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f86604c0-4ae2-37bf-a328-7295105b705b.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        208.117.248.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:22:32:3e:14:ff:f5:4f:60:20:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=d906130e-b8db-4987-9308-4ca665589916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5f:ca:0b:03:2e:55:c2:bd:4d:c2:1d:d9:dc:
                    71:7e:a9:30:59:bd:38:13:44:dd:3f:b4:2e:f9:c0:
                    71:0a:44:74:91:15:95:c8:fb:ff:3a:cf:36:45:d8:
                    bb:f0:12:8a:9f:fe:e6:19:04:2b:1a:32:9a:81:45:
                    8e:8c:72:f2:ff:84:d3:38:71:91:62:4d:e7:b2:ce:
                    87:94:71:94:98:8b:5a:f2:eb:45:83:22:23:fc:e6:
                    55:13:8a:51:29:98:66:0d:9d:cd:cf:69:9f:f6:c8:
                    90:ed:da:b5:4f:4b:18:d3:4c:2b:c8:ad:ce:50:9f:
                    ec:25:27:d9:74:b4:fb:c6:d3:50:80:9b:b8:6b:2d:
                    b6:c1:91:e7:ad:e4:52:a9:90:34:6b:b4:a7:de:9e:
                    32:3b:eb:a5:1f:9d:59:69:24:d1:e1:ff:ba:f5:ff:
                    bd:3e:e1:db:86:16:70:fd:09:7e:49:b4:0f:36:b2:
                    91:7e:8e:0c:74:01:ad:1e:7e:21:62:a0:1d:fd:e4:
                    10:e1:e6:1b:03:51:14:97:a7:ab:9e:5d:bb:b6:ec:
                    3d:a7:df:fb:b5:cd:a7:1b:34:13:be:09:98:0e:9f:
                    fa:48:74:11:03:51:48:8d:ba:53:02:78:15:80:e1:
                    42:4a:c3:6c:e1:4c:e0:8c:ea:3d:03:87:18:cf:aa:
                    84:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:82:4C:47:FA:74:63:F9:5B:E8:49:28:4A:47:FB:90:6A:49:81:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f86604c0-4ae2-37bf-a328-7295105b705b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:17:11:b0:b3:94:c4:31:87:c5:5b:72:43:9a:14:dd:fb:b6:
         6c:52:dd:43:3c:40:7b:b4:9a:8f:23:c1:2c:99:ff:5e:ca:a1:
         b4:de:97:ea:53:3c:6f:6e:f5:48:b3:9a:a1:08:ff:d0:93:00:
         9b:b5:83:a9:92:ee:3a:28:33:7b:43:a0:60:41:5b:ac:b7:d8:
         dc:fa:b6:83:1f:85:70:fa:94:e7:87:61:e3:28:37:8a:f6:f7:
         b6:89:b6:60:31:43:82:e9:d4:8a:69:73:8a:91:27:c3:6d:99:
         49:a3:69:92:a2:4e:cf:9a:13:0c:30:a8:73:c3:e2:f6:e9:71:
         1f:e0:ef:99:3b:a4:18:2a:99:f1:4e:05:f2:bf:54:29:b0:54:
         99:69:db:04:39:8c:c4:ea:24:5b:e0:93:25:b1:93:d9:a0:06:
         53:e3:49:bb:28:25:7d:6d:ae:30:f0:aa:2d:eb:54:4e:34:34:
         0b:5b:d9:dc:21:7f:8b:be:d3:db:ec:32:ac:61:cc:82:1d:f5:
         46:f7:b0:c6:5c:8f:ce:cc:ac:27:8c:d4:a6:0c:cb:8c:a0:2a:
         cd:fd:21:42:50:7b:b0:c5:f1:a6:6b:55:16:e0:00:9c:4b:90:
         12:38:74:6d:47:6f:39:31:2b:0e:1d:1b:2a:c2:91:75:59:1d:
         08:6f:17:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----