Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43babb8a-e5cc-3921-a6a5-b22f5b92f181.roa
File:                     43babb8a-e5cc-3921-a6a5-b22f5b92f181.roa (raw, json)
Hash identifier:          Gbig0NzVcYRC0ZK/nHCZoQg8cTtIJIABMKDQPWutBOU=
Subject key identifier:   9C:B8:BC:92:79:B6:DF:69:F5:33:94:55:AA:CB:3B:F3:0E:76:7C:2A
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584309FA49FCD1C9E5CC3FAAD380
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43babb8a-e5cc-3921-a6a5-b22f5b92f181.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        142.251.96.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 29 Mar 2024 20:23:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fa:49:fc:d1:c9:e5:cc:3f:aa:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=2b3d8fcc-cd6d-49f5-93f6-b092dedc2292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f4:12:f1:59:95:8a:d7:c5:44:70:0c:71:d6:
                    e2:32:b8:80:eb:31:54:09:03:d7:ae:8a:db:4c:5c:
                    42:2c:a6:81:aa:a9:73:c6:21:f8:0d:3a:58:20:27:
                    a4:c8:bf:e5:a8:c2:54:4f:0b:a9:57:9e:a9:33:f4:
                    23:60:36:ea:92:06:4c:73:6e:0d:82:a6:4b:41:73:
                    03:75:6d:17:d0:db:1a:87:89:5f:cc:b3:99:3f:3b:
                    b0:18:ab:57:2f:87:da:d1:2a:f4:19:af:65:33:3d:
                    e4:a0:f8:ce:db:07:55:cf:2c:91:6d:94:31:f4:4c:
                    c3:5d:36:4f:25:52:53:a5:fa:e6:54:25:16:69:05:
                    61:33:ca:ce:8b:a7:9b:0e:1d:3a:ca:ea:64:b6:67:
                    a5:e3:28:9c:d9:e9:60:57:13:d8:72:2f:1e:bf:34:
                    aa:ef:6d:e9:2c:a6:c5:90:60:0c:c3:0b:4c:7a:65:
                    8a:43:12:09:15:fa:39:d1:f3:6b:e0:4a:4e:6d:81:
                    7a:ad:50:c3:67:da:44:04:64:bf:0c:7c:f4:f4:8f:
                    d5:be:5a:7a:1f:1b:71:fd:ad:62:86:68:29:81:08:
                    6f:a3:6a:58:40:97:62:df:ff:f2:8d:4d:84:64:f6:
                    ff:0f:78:4a:d9:89:d2:cf:23:36:94:d7:3c:d0:ed:
                    3c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B8:BC:92:79:B6:DF:69:F5:33:94:55:AA:CB:3B:F3:0E:76:7C:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43babb8a-e5cc-3921-a6a5-b22f5b92f181.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:d3:4f:48:8c:56:3c:f6:17:73:7f:5a:a8:55:10:1a:e2:83:
         31:ab:83:2e:4e:60:3b:33:fa:39:e8:1f:39:e2:92:c2:a3:2a:
         4a:a1:ed:93:cc:ac:dc:83:50:97:3a:a3:28:94:41:1b:3f:e1:
         1b:15:c7:be:b3:55:de:e4:9f:de:c6:ed:27:eb:66:42:96:ba:
         6c:50:ea:b8:76:99:6e:37:72:9d:dc:0c:ba:a4:19:f0:2d:a2:
         a8:81:3c:80:31:6b:c5:f9:29:8b:e2:3e:26:f9:d4:4a:3a:71:
         fc:f0:93:34:45:06:98:67:8f:0a:f4:6d:38:11:28:09:a6:15:
         54:6a:5c:ae:0a:e4:e2:3c:bf:a6:81:7e:d1:52:5f:8d:7f:03:
         75:86:49:59:54:d4:29:2d:c3:b6:2f:2d:95:e3:75:72:df:be:
         3f:e5:72:28:8f:41:24:2e:df:92:77:03:6f:21:c2:f1:38:ef:
         01:ed:34:cd:72:d1:32:3d:4c:7c:2e:df:c9:e0:fa:cd:7a:9b:
         34:81:d3:f4:b6:23:de:25:39:21:c6:7e:93:9b:84:b1:9b:ad:
         92:4d:1b:0a:8b:99:4d:5d:26:7a:c0:f4:77:fd:89:ae:a2:aa:
         18:95:cf:1c:3f:bb:93:a3:20:e2:e7:6b:06:b9:dc:52:2d:2e:
         07:0c:96:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----