Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f4c4c47-e1c4-344c-acf8-e4186bbe2fab.roa
File:                     0f4c4c47-e1c4-344c-acf8-e4186bbe2fab.roa (raw, json)
Hash identifier:          CwdivkIQvGY9ZkCeRHEGjofY17H0WN1zHK/IqYH46S0=
Subject key identifier:   69:F7:2F:A5:C3:FC:27:0F:14:2C:34:B2:FB:DD:AE:67:B8:EB:04:E6
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A0D1FB27CC90532A9B3C780
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f4c4c47-e1c4-344c-acf8-e4186bbe2fab.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        70.32.132.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:18:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0d:1f:b2:7c:c9:05:32:a9:b3:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=c55cc4ba-9a13-4b14-a3d1-18fb9a0e0b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dd:75:9d:ce:74:0c:f7:48:51:14:73:fb:7c:
                    39:2d:60:ec:03:ae:ef:ce:7b:17:bd:1a:8d:ff:e9:
                    25:8f:c6:74:9c:b0:57:bc:e9:05:2e:e2:a3:d4:cf:
                    9c:a6:27:3c:17:a0:8c:1e:eb:43:d7:b8:79:43:fc:
                    36:13:62:bb:e8:c7:3e:e8:f2:b5:54:61:82:78:82:
                    6a:e7:bd:c8:82:cd:3a:97:73:3e:55:91:c9:f5:29:
                    63:55:50:15:ee:75:78:f9:cd:d3:d4:67:9d:6f:d2:
                    b7:96:19:77:ee:3b:35:79:6b:79:82:cf:95:92:02:
                    bc:f7:ee:53:09:14:fa:d3:de:cc:83:46:e2:98:92:
                    28:e7:66:f2:5b:a1:91:01:f8:81:64:68:cf:76:5c:
                    a2:dd:3f:32:d5:9c:c3:c8:6b:73:bc:19:9a:8d:00:
                    4f:eb:e4:e2:bc:2c:5f:ed:bb:1a:30:7f:9c:da:d9:
                    b3:ff:7c:f7:c8:05:0c:9c:f5:40:02:23:41:8e:71:
                    94:25:3c:0b:ce:24:6b:82:49:9e:b0:77:8c:a1:b1:
                    70:5d:b9:a9:bd:90:97:73:85:77:bb:85:9b:c9:36:
                    1a:db:56:cd:1a:c1:48:ce:3f:55:c4:2a:21:c3:05:
                    69:51:b8:83:c7:96:5f:15:12:89:0e:46:43:6c:96:
                    d6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F7:2F:A5:C3:FC:27:0F:14:2C:34:B2:FB:DD:AE:67:B8:EB:04:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f4c4c47-e1c4-344c-acf8-e4186bbe2fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:9d:dd:68:1a:e6:32:1b:2e:fd:6d:f4:97:fe:ef:4d:02:07:
         2d:b2:1f:08:4f:bb:e7:d7:5b:d8:56:59:b8:8e:aa:52:b2:55:
         54:1f:53:68:8d:29:94:41:fc:f5:b4:20:65:28:68:19:bf:8f:
         60:20:1c:85:40:ac:83:18:ab:32:3a:52:78:51:a1:93:6e:26:
         6a:ec:86:61:0b:45:43:1d:e7:30:77:ad:63:8e:49:fc:3b:6a:
         a9:22:7a:dc:ab:1f:8a:a5:6b:3e:25:68:08:91:ed:89:aa:f6:
         99:dc:a5:1a:e1:fc:0a:fc:42:47:59:f3:5e:fc:4b:10:a3:0b:
         10:5b:a3:8b:9d:1a:72:a4:04:57:25:59:08:70:19:cd:51:b8:
         69:94:30:67:f0:49:a1:05:fa:b1:b6:e5:53:14:07:b1:ff:a6:
         6e:bc:e5:4e:e8:7b:a9:8d:9d:bd:da:d6:15:a9:61:d6:fb:c2:
         62:a5:12:16:8b:22:a3:f4:e2:47:e1:92:a3:b8:32:2a:89:a9:
         b8:73:73:ec:9d:d4:cc:9e:ad:19:bf:a6:65:33:72:09:8f:72:
         f7:0c:47:57:00:ee:7b:ba:87:56:f9:96:31:3f:d2:fa:cb:32:
         52:63:c1:46:8c:30:87:40:12:bd:9e:b6:b4:08:e2:95:67:f1:
         ec:4b:9c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----