Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1ec090f6-b2e2-3d9c-b9ff-6a5b50404d67.roa
File:                     1ec090f6-b2e2-3d9c-b9ff-6a5b50404d67.roa (raw, json)
Hash identifier:          G+RYL+Cx+o/hKUcBzBteDVvXrRn98zyQAOrVMVLBWJM=
Subject key identifier:   C3:3B:DD:5A:A6:36:CC:8C:A1:66:03:B7:2F:2A:C7:22:D3:69:53:EE
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584309EDECED9A7254414AB33A80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1ec090f6-b2e2-3d9c-b9ff-6a5b50404d67.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        172.253.114.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:28:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ed:ec:ed:9a:72:54:41:4a:b3:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=83cac4d3-5100-468f-a048-983a019dd21f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c0:3f:f6:54:18:a4:0a:e8:e7:4f:31:7a:be:
                    f3:5d:b7:58:29:c7:50:02:0c:80:3e:ac:ac:ec:25:
                    b4:95:9b:95:da:9a:2b:c4:7e:2b:6c:a4:a6:d6:a1:
                    54:b2:42:76:2c:90:d4:38:3c:d9:8b:81:ea:17:c5:
                    5f:39:16:24:11:68:6b:74:be:0a:87:40:d1:0c:32:
                    9a:85:a3:96:65:3c:5b:e6:a3:22:1f:3b:d0:bc:8b:
                    2c:b0:fe:66:4d:81:9e:1e:7d:cf:44:50:97:6f:03:
                    25:3b:5c:fa:17:c0:64:f7:85:c9:c5:b3:ef:69:44:
                    0a:6a:d9:16:5e:de:b6:f8:b8:af:5e:87:34:43:78:
                    de:9b:3e:16:0c:f2:ed:51:c4:be:2a:e8:22:e7:df:
                    01:af:2b:91:6d:5d:52:17:10:8e:b0:9f:df:1b:a1:
                    d7:b8:92:f6:55:82:41:c9:1d:2a:e1:c0:58:b1:b7:
                    8a:b6:0f:ab:a7:e7:89:29:e8:8d:66:be:a9:d3:dd:
                    79:de:3a:db:bd:e2:9d:3b:36:d3:6b:93:27:69:b9:
                    6e:6f:36:bd:1f:bd:aa:7b:d7:40:16:3b:b9:42:02:
                    51:0f:f1:7a:20:cf:32:1d:57:bf:29:ec:a6:38:ee:
                    a1:4b:15:00:f1:d9:cc:1d:54:c7:a0:82:b6:2f:87:
                    f4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3B:DD:5A:A6:36:CC:8C:A1:66:03:B7:2F:2A:C7:22:D3:69:53:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1ec090f6-b2e2-3d9c-b9ff-6a5b50404d67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.253.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:aa:8d:2b:cd:7c:dd:3a:64:4a:a7:fc:0d:59:84:43:e5:01:
         0d:ef:f5:8b:4a:38:6f:5b:ad:e6:31:f0:e7:91:2e:1b:c3:2f:
         85:4b:50:3d:d4:28:b2:9c:c8:81:45:79:ab:48:9a:ea:0a:93:
         48:95:2d:a7:cf:36:22:27:b3:5e:1f:90:f3:a0:ba:cb:4a:f5:
         e0:81:81:ad:83:c4:a5:b1:41:e4:c6:55:3a:7e:a8:82:ff:f7:
         db:c5:a7:eb:44:ea:57:a5:9b:e7:a6:37:5c:10:96:a2:18:ea:
         87:9e:56:2d:04:bb:56:df:06:6f:b8:21:39:6e:1c:ec:21:18:
         9e:3e:9d:f5:e8:b7:49:ff:73:72:5d:1e:88:cd:36:77:82:4b:
         ca:31:15:c8:f6:ca:09:40:8f:b8:ef:90:6b:62:2f:b6:ea:2a:
         12:56:51:c6:a4:8a:0f:73:2b:44:68:97:ba:5f:40:0d:77:c8:
         fc:74:1a:15:56:df:4e:99:0c:54:a0:2d:b6:47:e1:86:76:d5:
         30:14:87:3e:d5:8e:fc:ec:bb:63:ee:e5:59:14:3b:98:31:c0:
         b7:16:87:5d:dc:1f:45:14:d0:28:68:6c:41:a8:4c:83:5d:3a:
         31:47:3e:d6:9d:f4:f4:61:64:0e:43:1a:c3:9b:26:d9:e4:f6:
         cf:4f:bf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----