Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48c44c70-41ef-3731-8296-c9966e9ea5f3.roa
File:                     48c44c70-41ef-3731-8296-c9966e9ea5f3.roa (raw, json)
Hash identifier:          DITI9AmgHkYLuDf0ysokxOQfKJ5xglX0G+WhF+K92/c=
Subject key identifier:   7B:12:C9:A4:D0:96:2A:CA:9B:2C:8B:79:C4:FF:0F:C9:1F:6C:3D:5F
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285842B0655B5F0060C1C27FF43900
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48c44c70-41ef-3731-8296-c9966e9ea5f3.roa
Signing time:             Wed 26 Jul 2023 12:00:00 +0000
ROA not before:           Wed 26 Jul 2023 12:00:00 +0000
ROA not after:            Mon 29 Jul 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        2607:f8b0:4005::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b0:65:5b:5f:00:60:c1:c2:7f:f4:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 26 12:00:00 2023 GMT
            Not After : Jul 29 04:00:00 2024 GMT
        Subject: CN=d96a8bc9-28eb-4307-a080-4d33e5dd656b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c0:5f:8a:f3:a2:d9:a3:3f:df:8d:7b:2f:82:
                    ba:06:d7:e3:36:c0:47:55:56:be:a8:78:4a:b6:3f:
                    7a:7f:ed:af:f9:9a:ef:3f:57:44:b9:c2:08:60:c9:
                    a6:bf:18:e8:1c:51:f5:68:8b:13:80:1c:ab:54:83:
                    31:27:53:45:29:3a:03:55:2c:da:ca:92:94:a9:1b:
                    f5:bc:24:52:2e:8e:65:2c:4f:08:7c:6b:6e:46:33:
                    3c:d6:b7:6f:32:f8:29:f5:13:40:08:4d:64:ef:63:
                    bf:29:6f:eb:b8:cf:c2:70:87:c2:04:76:65:4e:2d:
                    96:1b:31:e0:6b:ba:e1:ac:c1:10:3b:2a:2e:f8:c4:
                    ce:08:71:ba:ad:67:8a:f8:cf:96:f3:1f:e0:27:dc:
                    1b:7d:36:3c:01:d9:c6:84:92:bb:ef:81:bc:eb:11:
                    00:7b:6a:e6:d0:59:1d:af:86:4c:64:42:18:00:e8:
                    bb:85:ce:f1:0d:4e:2d:28:4b:8f:3c:e1:8c:41:ce:
                    5f:7e:a9:32:2b:ce:ef:55:e1:f7:1a:e1:27:7a:23:
                    e8:f7:7a:72:10:2a:10:5f:d0:bf:ed:c7:79:89:21:
                    ff:24:b2:51:b5:6a:fa:61:5d:8c:be:85:d1:3e:66:
                    d5:90:36:02:3f:2c:46:41:a9:91:80:0e:0b:6a:4f:
                    51:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:12:C9:A4:D0:96:2A:CA:9B:2C:8B:79:C4:FF:0F:C9:1F:6C:3D:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48c44c70-41ef-3731-8296-c9966e9ea5f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8b0:4005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:69:ab:f1:51:3d:7b:76:16:4c:ff:f1:b3:14:58:3e:78:d1:
         8f:45:85:51:01:69:26:e1:f8:ee:ad:24:3f:4d:df:8d:9d:41:
         8b:3d:6c:67:31:86:c6:99:28:3f:99:e6:71:a2:54:ce:b2:f2:
         87:05:0c:bf:2a:75:fc:98:fd:05:e4:da:16:54:6a:00:22:33:
         6b:61:96:26:32:84:17:b2:73:0d:eb:ff:88:de:b0:ba:f2:e0:
         b3:f7:58:2a:dd:9b:4c:35:ee:23:e4:eb:1c:dc:63:11:3f:36:
         15:e3:4e:a7:fd:e6:e9:e6:f0:7a:02:b4:fe:4f:69:d5:22:b5:
         71:c0:0d:59:c6:6c:ae:56:e3:11:15:d5:f8:6a:66:ed:12:1f:
         02:bb:9f:16:1f:72:39:47:82:81:f4:66:f6:5a:9a:6d:4e:0f:
         b6:73:f3:6b:70:2b:25:b2:89:5e:06:2b:c9:f3:2c:cd:ff:4b:
         d5:1f:ed:69:2d:58:8a:2a:90:ee:f8:4b:3f:c1:40:0a:2d:25:
         2e:31:e1:46:81:ff:7e:0a:00:5f:70:a1:64:f6:64:71:ef:a7:
         89:90:d9:20:3f:d4:79:5c:f9:29:5e:c1:69:27:cb:d5:70:21:
         1f:e5:b2:21:42:23:49:27:10:8a:1f:c1:81:58:42:2e:33:5f:
         99:12:b1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----