Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b935744-7f9d-341a-8473-6d639a8461f3.roa
File:                     1b935744-7f9d-341a-8473-6d639a8461f3.roa (raw, json)
Hash identifier:          9Cco7xLRDQB2388gXfej3w62S0TU3mn+yUFspGo6gXY=
Subject key identifier:   78:DC:9A:E5:E1:C0:5F:0F:9C:61:22:5D:86:10:8E:C9:2A:47:FD:D5
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584309EB9EA437AB237B2B501E80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b935744-7f9d-341a-8473-6d639a8461f3.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        142.251.18.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:eb:9e:a4:37:ab:23:7b:2b:50:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=603f9d8f-d943-4ac8-bf3c-7e9660328115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f4:0f:ae:ed:70:df:2a:a2:0c:1b:75:35:ce:
                    7a:2f:3a:d6:12:20:54:0f:0b:7d:48:83:a3:86:9e:
                    dd:9e:d4:fd:17:22:c5:e3:d5:e7:28:9b:d5:81:be:
                    2b:81:11:1e:6d:36:4c:bf:3f:ce:6f:87:a4:79:bf:
                    4a:bb:ea:34:44:c9:e1:f9:f8:bc:4e:be:82:eb:95:
                    f8:05:fc:08:ce:31:f8:62:45:15:68:33:5f:06:29:
                    f4:d4:7b:6f:89:76:c3:d0:ef:ff:ee:47:88:e9:80:
                    da:72:a4:bf:05:b6:c2:48:cd:f7:c7:3f:43:8d:17:
                    c7:23:77:70:34:a4:cf:d0:c6:5a:09:67:05:54:03:
                    fd:7c:5f:45:55:78:7e:26:2f:58:34:3f:fa:c4:27:
                    ed:1d:e9:01:95:8e:dc:eb:4a:66:c0:46:1e:6c:0f:
                    b6:e3:76:b5:bc:c9:d5:e9:e3:27:09:41:cc:8e:9b:
                    3d:f0:fd:fe:99:c1:85:79:ee:9a:2e:cc:68:49:43:
                    b7:52:6d:5a:b5:c1:12:9e:39:61:9b:6b:5e:5a:f2:
                    b0:21:13:0e:fb:9c:10:87:16:92:5c:dd:23:e9:c1:
                    4e:41:d9:45:17:02:bd:39:da:56:8a:2d:3b:38:47:
                    9d:09:7e:a5:ef:d2:ce:97:b5:0a:a3:35:52:aa:f7:
                    1c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DC:9A:E5:E1:C0:5F:0F:9C:61:22:5D:86:10:8E:C9:2A:47:FD:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b935744-7f9d-341a-8473-6d639a8461f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:9b:c7:9d:9d:74:c0:23:d6:21:ed:4d:d9:e7:f8:71:c3:49:
         86:57:d5:7b:a5:30:53:a6:27:34:0e:2a:9b:8c:61:17:0a:fc:
         b6:aa:da:28:85:03:0c:23:3d:d8:91:b8:ab:4a:c7:21:a0:14:
         4c:e3:e4:b2:d7:66:43:52:04:9a:4a:23:19:d1:5f:b2:df:dd:
         2d:a5:96:87:70:2a:bd:35:78:09:91:50:15:45:d3:6d:f7:67:
         d3:e5:f1:9e:34:13:f7:a1:64:8d:2d:fa:a7:81:9a:51:90:87:
         39:56:22:41:0c:5c:7d:18:d9:ef:44:87:7a:11:0a:95:bd:a5:
         48:5b:15:c0:70:ff:49:45:db:80:ea:02:e2:fd:85:78:ac:39:
         b9:17:29:c3:dd:3a:e2:77:2f:0e:33:64:5e:70:ec:ae:d0:ec:
         23:8e:22:6a:7b:69:dc:54:39:eb:ef:54:bc:17:0a:8c:8e:d9:
         d5:9d:de:c1:4a:d5:a7:64:02:6b:0c:92:e3:6d:db:b2:a9:f3:
         38:48:54:8b:66:30:25:14:ff:86:c9:ef:89:18:7f:26:e2:64:
         85:db:81:ac:2c:1b:85:b8:da:d9:19:db:19:92:a7:88:64:d6:
         91:69:c0:c1:ac:d6:0b:5f:89:10:9d:18:a4:3c:a4:68:8c:7b:
         7d:3e:26:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----