Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/522254a5-e1e1-3c96-9288-39538b41eda9.roa
File:                     522254a5-e1e1-3c96-9288-39538b41eda9.roa (raw, json)
Hash identifier:          awMVGQ+l99pcrv/Oty12JYFxu+5q7WNc+0hUzJqSeyM=
Subject key identifier:   99:4E:FE:05:4B:E4:A7:53:53:00:9D:8C:9F:EF:9C:99:03:3B:AB:C8
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A038CD305352C00D9A0DF00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/522254a5-e1e1-3c96-9288-39538b41eda9.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        142.250.17.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 29 Mar 2024 20:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:03:8c:d3:05:35:2c:00:d9:a0:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=facb9cd9-b3ec-47b9-98a9-4c3c947769a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b9:b6:19:b5:d4:4a:44:f7:39:10:c7:b5:47:
                    d9:9f:73:0d:57:73:00:6b:fe:ac:b1:2c:8f:d5:b1:
                    10:ca:65:a2:33:8e:66:97:14:50:e7:e9:f7:1c:33:
                    df:d7:94:a4:d9:2a:84:59:11:32:29:2f:f9:48:df:
                    44:05:80:e6:bf:77:05:50:06:24:d6:2f:55:5e:9b:
                    85:b5:9d:81:8c:94:3a:b9:47:1c:01:dc:f8:a0:07:
                    19:59:5a:78:eb:89:76:55:68:6d:93:55:10:74:18:
                    7b:30:19:32:9c:e4:e7:94:c3:44:50:66:7d:0a:79:
                    ed:28:7c:89:7b:17:3b:de:65:da:e9:b7:54:32:8d:
                    49:b8:52:f6:70:48:68:58:86:60:28:7f:78:06:f6:
                    ca:74:19:f6:d5:d5:cd:06:ff:47:f0:69:9c:dc:92:
                    ee:73:40:9f:f5:37:6e:e1:09:85:94:9e:59:14:18:
                    dc:ae:f6:71:4e:da:d3:c3:22:54:13:80:45:ea:ba:
                    79:5a:d5:29:3b:9a:a1:58:38:8f:27:98:4f:2b:32:
                    b5:a3:a5:3d:56:47:6b:b7:ec:c9:d3:56:94:9f:90:
                    d6:9c:95:16:f8:1a:34:5f:8c:fd:8f:a4:16:09:0c:
                    a8:55:14:8d:cc:f8:f5:20:60:7a:c1:24:80:c0:0c:
                    ac:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4E:FE:05:4B:E4:A7:53:53:00:9D:8C:9F:EF:9C:99:03:3B:AB:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/522254a5-e1e1-3c96-9288-39538b41eda9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:65:8a:61:6d:ac:e8:4e:3d:88:27:c0:cf:46:60:e5:70:d2:
         ea:33:bd:e7:c0:98:18:ab:af:8a:61:00:ce:3b:6d:e0:45:c9:
         32:bd:8e:db:a3:ea:e0:fd:c9:af:5f:33:4c:f8:35:ca:f7:a5:
         4b:98:7e:63:3c:8a:f5:c3:28:6d:26:09:aa:8a:54:5e:69:fb:
         a0:ed:aa:ef:35:5e:37:93:92:73:86:db:72:86:fb:5d:90:cd:
         65:1a:78:bf:7e:f2:82:e3:10:e9:a0:bf:6f:7b:35:c9:93:ac:
         44:29:21:39:32:41:de:a0:3e:dc:d9:95:d1:8e:fa:2c:53:0b:
         18:aa:7b:1a:78:6a:94:9a:fe:f9:99:b6:25:b5:5f:ec:c5:8e:
         e0:b0:4e:f4:e7:4c:60:26:aa:18:68:5f:9f:b1:26:21:b8:8e:
         a9:7e:b0:ca:cc:57:82:89:34:bc:92:15:1c:e4:e0:c7:ac:09:
         82:a9:b7:e3:eb:e8:ae:d3:53:53:35:84:54:b7:1e:06:6f:7a:
         73:40:08:08:05:2f:08:98:82:83:83:41:e9:6b:a5:c2:1e:32:
         bd:50:5e:b1:7c:f1:2a:67:eb:29:64:b9:97:c3:96:3d:81:14:
         b3:86:68:22:49:5a:b3:53:86:04:2c:bc:7a:94:4f:28:c6:8d:
         0e:cf:41:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----