Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7505740b-b23f-3e95-a7f6-a2c5f22496db.roa
File:                     7505740b-b23f-3e95-a7f6-a2c5f22496db.roa (raw, json)
Hash identifier:          /88X0LaDMJeInzhzk3AbIpnZwNa1bt8mxFuGT21uEJU=
Subject key identifier:   84:47:41:22:92:94:8A:89:F4:61:A5:03:CF:7C:05:20:6C:2D:18:22
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A17C509D81A6DE8512C5600
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7505740b-b23f-3e95-a7f6-a2c5f22496db.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        142.250.127.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:23:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:17:c5:09:d8:1a:6d:e8:51:2c:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=b2c6f131-1e7d-4200-8fe0-0ab5a1a2a3f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d3:9c:ab:1d:f2:b1:8a:89:6b:49:b5:87:bb:
                    e1:0a:09:77:40:13:87:a5:98:97:86:31:44:90:46:
                    e2:19:09:f9:2d:07:45:44:03:3b:a5:e0:37:7d:56:
                    b3:0e:ce:d5:d7:05:c3:4a:97:af:32:35:0c:4e:d8:
                    c8:c5:47:84:3e:62:77:17:3d:f8:e2:e9:1f:d4:5a:
                    82:a5:af:68:38:c2:e8:5b:08:52:03:5d:a5:bd:12:
                    4e:49:69:74:2c:88:f6:a6:04:e6:b1:7e:2e:c3:ad:
                    ee:37:d0:0e:d5:3c:d6:ca:ce:6e:ec:41:08:f6:34:
                    e7:bd:73:39:e1:84:86:ae:27:2e:5d:c9:93:f5:31:
                    04:9e:9c:c9:5b:20:b5:5e:c0:40:c7:3e:50:ee:2f:
                    04:cb:b2:d6:2d:88:13:1e:ce:ee:66:db:33:8e:d5:
                    90:2a:a4:0a:6b:52:1d:1c:4f:7f:08:8b:f3:b3:fb:
                    d3:39:f1:fc:86:06:3d:82:29:90:ae:2b:e8:41:d2:
                    c8:74:b0:45:56:12:b4:64:ba:b8:fd:b5:db:e3:46:
                    5f:69:32:13:0a:a3:aa:e1:c6:a6:dc:4d:23:8f:bb:
                    2d:e2:47:60:ab:47:2c:78:a6:fc:a9:31:84:32:b9:
                    0b:8b:88:8c:5a:2b:8f:3d:e4:e5:15:6c:9b:2e:6d:
                    3b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:47:41:22:92:94:8A:89:F4:61:A5:03:CF:7C:05:20:6C:2D:18:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7505740b-b23f-3e95-a7f6-a2c5f22496db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:14:e0:8f:4c:e3:53:43:81:12:1c:34:5a:f4:51:c4:b6:24:
         d0:14:79:5f:8a:3c:ba:d4:5d:de:b9:2d:3b:d1:bf:5c:58:aa:
         8b:63:fa:5f:2c:8e:ad:b5:c1:47:a3:09:b7:7a:f2:16:d0:4e:
         f9:ed:d4:2d:96:f1:e7:f4:e5:65:5e:5a:1b:78:e5:9d:14:a7:
         47:5c:45:19:4e:21:69:0b:2f:07:0c:ac:86:41:ce:c9:09:99:
         aa:7f:c0:c9:ce:be:f0:67:72:9a:2c:33:1d:17:0f:49:cd:4f:
         d1:99:16:ea:db:44:ef:1b:57:e6:20:45:8c:57:32:43:07:12:
         b4:79:4e:36:60:53:99:25:56:33:80:74:a5:60:dd:08:e3:ca:
         3e:45:6b:bc:12:20:86:da:a0:33:7c:6d:74:f8:49:ce:ff:92:
         5d:f2:55:af:35:b2:a7:cc:97:52:df:cb:7e:d0:61:b0:d1:5e:
         31:68:ef:02:38:55:31:ce:df:b4:ec:61:9a:d7:27:e6:71:6c:
         c6:82:cc:91:53:11:aa:dd:4e:2b:14:51:e8:ab:f9:fb:41:c4:
         d6:0e:37:aa:ec:80:a4:b0:a3:70:6e:c3:7b:59:74:49:56:b9:
         3f:51:1f:01:01:4d:17:30:4a:8a:de:7e:26:dd:d0:57:a7:f9:
         ef:43:6f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----