Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b2c896c-84e1-37f3-b5be-56f2c0c9db67.roa
File:                     1b2c896c-84e1-37f3-b5be-56f2c0c9db67.roa (raw, json)
Hash identifier:          0uckBXpI2k1maZQoHtFIkLFGiiY9mp99q6aUunfkW2U=
Subject key identifier:   AC:19:9A:31:14:C6:7F:CF:E5:81:4A:C9:26:30:57:29:A5:07:53:A1
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A17E907E9107732F7375D00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b2c896c-84e1-37f3-b5be-56f2c0c9db67.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        199.36.157.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:17:e9:07:e9:10:77:32:f7:37:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=40be1f24-e437-4aee-9a4c-b87b94283dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:92:27:78:a0:b8:a3:f0:f7:ce:46:80:f6:4a:
                    07:61:27:2f:58:45:a1:09:7a:0c:14:e5:61:28:c0:
                    e0:60:49:01:e5:4e:fd:4a:cd:90:1c:04:ac:4c:51:
                    71:16:35:9b:d1:78:dc:ea:ca:cf:d6:e9:14:aa:b3:
                    74:73:49:00:19:4b:6e:f0:cc:21:9c:03:5b:1a:4d:
                    dc:0c:4a:5b:03:74:60:12:33:81:bf:9d:67:5e:16:
                    49:59:2c:e2:22:a3:84:e8:76:75:5b:8a:2f:69:72:
                    6b:92:86:2e:33:b5:56:2e:3d:53:48:93:24:a3:20:
                    8c:a5:fa:92:03:8e:a8:fc:d0:9c:c5:3d:1a:db:0e:
                    e8:18:a2:f8:fb:3a:54:3e:aa:a4:eb:3e:95:c5:c1:
                    77:01:f9:8d:bb:54:4e:f7:c5:46:aa:0d:a9:15:09:
                    8d:79:00:6f:b8:e1:ad:94:14:4e:b7:ac:76:98:51:
                    b0:85:63:ef:fa:cb:19:b0:c2:4c:39:84:3d:74:1b:
                    21:fc:81:2e:f3:b1:8f:49:fc:c3:90:f3:85:38:4e:
                    34:12:52:8d:3f:f3:8b:3e:81:9c:f7:52:3b:a2:e3:
                    d4:6c:ea:29:9e:7a:c3:32:56:4d:e8:7f:2e:bc:d8:
                    76:8e:7b:b7:d0:61:5c:44:38:fe:af:db:6c:86:a9:
                    39:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:19:9A:31:14:C6:7F:CF:E5:81:4A:C9:26:30:57:29:A5:07:53:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b2c896c-84e1-37f3-b5be-56f2c0c9db67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:32:e9:3a:39:b1:0f:98:39:3b:cb:c3:05:21:ef:ec:47:1f:
         94:e2:33:da:59:26:e4:e0:e5:5b:8f:d0:ec:f5:aa:e3:e3:77:
         ad:37:0b:6a:21:5d:28:9d:1d:9d:15:cf:93:60:c4:ea:01:96:
         77:51:92:6e:ec:f6:8c:d3:cf:fa:a5:35:b3:59:89:7d:10:aa:
         e7:72:02:97:19:03:16:4c:67:d2:df:a5:73:4b:98:60:d2:bd:
         a0:1c:01:6e:37:04:b9:ef:fe:70:bc:c0:d6:31:00:b2:77:ef:
         55:7c:97:a4:ce:ae:e3:05:f1:fe:92:23:bf:c0:c3:e3:44:f8:
         75:63:ab:38:cc:f9:a9:59:dc:75:58:d4:81:1e:4a:26:23:6e:
         a3:cb:32:e9:4c:67:6f:4f:db:9a:9f:a2:d0:57:09:49:40:8f:
         a1:75:7b:6b:71:61:58:4e:27:64:09:ed:79:cc:2b:48:87:fd:
         f0:a3:c3:76:da:b0:6b:97:96:1e:fc:53:31:22:a2:38:54:88:
         72:68:67:de:8f:c8:76:c0:60:50:b2:f4:22:69:0f:1b:83:98:
         b8:8b:33:f9:0e:cd:ca:94:6a:a5:e5:0c:ec:08:1a:c8:de:95:
         11:08:d4:fa:a9:dd:a1:90:90:b6:99:f4:b2:c1:40:be:a9:9c:
         14:32:e4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----