Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b5d8670-7370-30c3-aece-0a25c873e3d7.roa
File:                     2b5d8670-7370-30c3-aece-0a25c873e3d7.roa (raw, json)
Hash identifier:          2QJ0RE9Vhka8qs+Cm6lLxAcub9ZRFSJ9/1WNV5ooVsQ=
Subject key identifier:   3D:AC:51:FA:E2:7A:98:A0:79:C1:A1:E0:43:4B:AF:3B:6E:B8:EB:F7
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584309F69ECB9985E226B0F37200
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b5d8670-7370-30c3-aece-0a25c873e3d7.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        108.177.112.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f6:9e:cb:99:85:e2:26:b0:f3:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=341a6070-d90a-4978-8c77-251a6ffab674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5b:df:27:a8:62:a8:d1:b2:16:ed:d3:15:03:
                    a7:10:96:a9:f6:4b:c2:28:83:8d:9d:b2:18:eb:88:
                    ec:3e:69:27:7e:e6:ef:ea:f7:3b:79:38:57:19:d0:
                    da:16:74:7f:a7:5e:dc:27:a9:66:38:87:43:9e:96:
                    05:0a:38:df:e3:63:c5:b2:7d:cc:10:9e:c5:3c:1c:
                    f6:61:ba:01:b7:64:9e:3e:6f:c2:5a:92:01:7e:ff:
                    f9:65:f8:89:45:31:3d:a3:b8:71:33:a9:9c:e6:e4:
                    a2:65:f8:c5:5c:e8:0d:cf:a5:72:11:6f:84:c5:b6:
                    de:56:82:91:ce:02:eb:5a:e1:76:25:26:a5:c5:12:
                    4f:1d:e8:97:0c:26:bc:0d:27:d7:72:a3:e0:3f:28:
                    b0:3c:01:04:15:22:04:06:69:b0:b9:06:50:4b:c3:
                    0d:51:98:76:07:91:6c:6c:60:d6:7b:5b:a9:cb:c2:
                    a5:82:24:04:80:7d:4f:c9:fe:9b:dc:f9:02:3c:dd:
                    1f:6e:e7:73:12:3e:d2:4f:41:7d:a8:a3:c1:f3:d2:
                    b5:d0:9b:8b:a0:fc:0e:a1:e3:3f:2b:aa:e8:11:fd:
                    4e:f1:5e:91:73:f4:b5:d2:ed:66:8f:4d:9a:9e:fb:
                    c8:be:77:f2:ab:37:d0:4d:9d:79:8b:45:2d:15:40:
                    c0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AC:51:FA:E2:7A:98:A0:79:C1:A1:E0:43:4B:AF:3B:6E:B8:EB:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b5d8670-7370-30c3-aece-0a25c873e3d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:27:56:b6:f7:a3:e0:31:f3:7c:c0:d3:4d:5d:78:e8:fa:08:
         af:51:42:ce:8d:d1:1e:b5:c5:9f:28:df:db:46:b3:24:97:33:
         17:92:d4:ab:58:18:9b:6e:65:b8:84:eb:18:80:38:91:9f:a2:
         e1:c4:ab:34:74:e3:25:3c:19:08:46:f3:e9:a5:31:4f:4d:76:
         fa:47:56:ec:ae:b6:af:a7:ff:f0:b8:43:b4:ce:e2:52:b0:49:
         38:3b:ce:68:8a:69:7f:91:a7:86:5c:5f:9e:b2:5a:ee:0f:30:
         59:dd:f4:87:47:4b:79:01:bc:f7:99:e0:d1:14:90:45:ef:c2:
         1c:17:8c:a9:d0:d3:b9:6a:a3:b1:7b:e3:95:a4:9e:d2:31:cd:
         c7:81:9a:80:97:7d:d0:36:20:29:79:94:12:58:42:8b:98:3a:
         69:c8:9c:7b:ab:fd:12:85:c3:6f:9f:0d:7c:e6:9f:28:2b:db:
         b7:71:bf:2f:36:44:24:de:75:e3:bc:0d:5d:68:9d:4d:99:81:
         35:ab:18:12:58:18:88:41:c9:4c:88:a2:0e:fd:be:a5:a5:1e:
         8a:d2:86:b9:f4:44:86:b1:bd:66:23:4f:60:b5:27:4a:88:f9:
         0c:66:35:19:0b:7b:d6:63:5e:fd:84:8b:92:79:b1:15:dc:bb:
         8e:e4:c5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----