Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e035069-3971-3a84-a87d-4a8d40b050dd.roa
File:                     1e035069-3971-3a84-a87d-4a8d40b050dd.roa (raw, json)
Hash identifier:          End4J71I++V1FCrDn3JGSPY/pyAe4PH1Jl1J5p9uMq0=
Subject key identifier:   63:68:1B:7D:79:F0:EF:91:89:12:04:90:37:DC:D2:00:9F:D5:C8:9D
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A081FA3398665071F80CC60
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e035069-3971-3a84-a87d-4a8d40b050dd.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        172.253.123.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:08:1f:a3:39:86:65:07:1f:80:cc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=b6036352-4173-4791-99f8-b879a2dadf70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9c:c8:02:7c:03:d6:cb:21:f8:d8:fd:18:06:
                    d0:d1:2e:15:c2:ec:80:d1:9a:85:54:48:05:41:e6:
                    86:56:c4:73:38:d2:d2:6c:42:1e:96:5a:3f:7b:10:
                    4f:56:3e:6c:35:1a:44:3e:02:05:06:17:be:2d:8d:
                    d2:9e:c2:6e:82:ce:cd:fb:11:58:f8:13:46:70:49:
                    19:c8:6f:d3:24:18:f3:fa:76:ee:2e:f8:c7:55:26:
                    99:0c:20:b7:84:e2:09:10:fb:5b:87:19:ef:21:c9:
                    60:9c:c4:32:39:33:26:43:28:39:9c:e3:13:05:a3:
                    0b:bc:35:95:12:04:a5:80:78:58:64:ee:18:01:4f:
                    f0:12:45:34:0a:50:48:81:d2:72:82:9b:05:c0:95:
                    2c:1a:69:73:d4:c9:1b:f6:56:49:b7:01:92:80:14:
                    22:42:70:1c:c7:3b:d0:9c:25:a2:1a:1e:67:62:e1:
                    db:5f:36:2d:2b:30:02:d2:bc:29:fc:c0:e9:39:b4:
                    70:02:30:a6:09:0c:2c:40:55:e7:82:1b:53:e2:06:
                    f1:77:54:3e:05:42:71:8e:d7:bc:58:4a:7d:c3:57:
                    fa:47:15:cd:d9:18:4f:15:eb:28:1a:50:35:1c:7f:
                    ac:ce:58:03:23:64:a4:e3:67:49:0c:f5:b4:90:f1:
                    f6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:68:1B:7D:79:F0:EF:91:89:12:04:90:37:DC:D2:00:9F:D5:C8:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e035069-3971-3a84-a87d-4a8d40b050dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.253.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:22:3b:3a:b3:38:0e:45:05:9c:c5:f7:cb:5d:94:5c:d4:5f:
         54:ba:96:a5:ba:82:3f:c1:a1:e7:bb:1a:26:5a:f2:81:8c:87:
         70:b9:cf:c1:50:dc:dc:b6:37:7f:6c:94:7a:e4:eb:b5:4e:fe:
         f7:74:59:8b:6f:72:e5:3a:fa:c6:b5:c5:c2:3a:11:9f:3f:de:
         f1:6a:d9:63:93:47:d3:df:63:57:c5:76:19:79:c4:ae:94:26:
         20:f4:c0:f1:4e:78:4f:7a:18:c0:a8:9e:22:b6:ef:5e:a1:08:
         ed:dd:c5:fb:9f:e3:80:6a:d6:e2:ec:ef:e9:a4:42:e2:94:54:
         f8:a8:c8:e0:5d:5e:c6:80:da:e7:74:de:e4:f2:db:38:45:60:
         10:4b:c1:09:6d:c3:41:a8:21:99:8d:f3:a4:de:6b:52:fe:16:
         64:69:6c:33:9d:9c:55:66:8d:47:40:44:46:59:e8:73:2a:3a:
         48:00:e6:ac:3d:0d:7a:85:9e:b3:bb:e5:b1:58:5a:22:62:cc:
         c4:e4:9e:1f:f4:be:63:65:37:6e:f6:9c:82:f3:0a:0e:92:6f:
         6b:c6:75:09:a8:8f:35:ba:21:dd:0c:d1:6b:df:a9:d4:b0:f8:
         00:04:0e:27:ae:ef:df:72:3b:8d:64:2f:0d:98:10:8a:59:13:
         b8:4c:c7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----