Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2d8165de-4f94-3999-8b54-48e8b21a11fc.roa
File:                     2d8165de-4f94-3999-8b54-48e8b21a11fc.roa (raw, json)
Hash identifier:          V2uJa2/+V7OKIb2NzbpYKis+sRmGw/7VjSlGKyHBQRM=
Subject key identifier:   6C:0A:9C:07:A6:74:CB:FB:34:A3:3C:07:70:85:75:1B:BC:21:22:D7
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584309FB55FF4B7E6FFAF6E30680
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2d8165de-4f94-3999-8b54-48e8b21a11fc.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        173.194.36.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fb:55:ff:4b:7e:6f:fa:f6:e3:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=3a44e5bf-5e49-4799-aeb9-f25d99704755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:51:90:f9:a8:66:0a:ed:20:91:7d:f9:f0:f8:
                    23:c0:50:bc:1f:f7:c2:44:e2:f6:43:50:2b:2e:e6:
                    e9:d1:d3:3c:f0:54:69:6f:68:14:73:2b:45:39:3c:
                    71:5d:97:f4:9c:9b:14:9a:6f:9f:5b:bb:8a:cf:7c:
                    83:ba:9d:33:90:e0:65:28:4d:40:c2:fb:ad:31:ee:
                    e4:49:cf:ee:e7:85:a8:96:32:85:40:de:c0:91:60:
                    6c:df:82:09:4a:40:eb:90:81:f1:63:b5:76:3f:c8:
                    46:d3:39:43:82:1c:9c:e2:34:3a:7c:85:6d:2c:c2:
                    e5:36:37:93:48:50:30:c0:fc:08:41:76:ca:b6:12:
                    06:ac:5a:c3:a8:77:5b:a0:c7:31:65:ed:b9:95:68:
                    35:06:37:fe:1f:22:8c:d4:b6:52:77:56:cc:0e:17:
                    49:c9:0c:af:16:41:69:d2:51:d1:cd:f2:49:ca:76:
                    a9:7f:df:8b:bf:8d:cc:a4:ed:05:31:2f:69:a1:97:
                    17:7d:30:27:b5:2b:55:e9:d7:27:37:02:df:6d:37:
                    fd:62:29:d6:97:7b:0b:16:f8:33:11:5f:22:fb:2a:
                    c4:66:b8:50:50:f6:9e:36:c8:a6:78:c0:9e:a3:73:
                    c9:a1:c3:16:48:55:39:8a:31:bb:7a:e6:07:fa:43:
                    b5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0A:9C:07:A6:74:CB:FB:34:A3:3C:07:70:85:75:1B:BC:21:22:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2d8165de-4f94-3999-8b54-48e8b21a11fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:0a:02:83:9d:1d:7d:53:d0:55:89:d2:9d:59:39:45:d8:36:
         38:59:49:14:92:e4:ef:7a:8f:0d:89:16:e2:03:39:59:dd:b9:
         b4:ef:29:17:0c:46:85:2e:40:5c:24:c7:e4:07:34:08:0d:e7:
         09:0d:8b:8a:a4:0a:0e:4c:3f:e0:32:f7:86:33:37:1d:dd:6a:
         c6:34:43:f7:5c:da:88:7f:7c:ee:58:c2:b0:ed:35:75:e5:d7:
         1f:ec:ff:97:99:3f:1c:b9:20:0e:70:82:e2:7e:3e:bd:39:a8:
         21:4c:0a:cb:93:95:b8:49:2a:46:0b:15:45:ca:57:93:9e:32:
         4f:66:dd:e2:64:fa:23:c0:0a:ea:fe:d8:c0:b1:6c:7a:70:08:
         fe:14:21:bb:2d:b9:86:c8:dd:ef:25:37:25:29:97:19:8f:24:
         d5:05:8d:98:4b:d9:4f:4a:f6:9d:41:d3:0f:d1:18:c0:16:5f:
         4e:d0:ce:e5:dd:38:ce:41:e3:e2:04:15:b3:c5:c2:6a:5a:95:
         36:8b:1e:40:be:f4:d8:a4:78:56:b8:dc:ae:98:58:7d:bc:47:
         9a:41:fb:b7:84:36:84:4a:73:e4:5d:e6:38:df:7c:3d:5a:bf:
         77:87:15:55:b2:2c:4d:2f:e2:25:e0:2b:1e:6f:47:e4:36:ec:
         43:55:08:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----