Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81dbd0a5-a2f3-35de-bada-6b69be89efa9.roa
File:                     81dbd0a5-a2f3-35de-bada-6b69be89efa9.roa (raw, json)
Hash identifier:          8n8cqFM+eXoxvnlK416KrW+g5u2WuY8Yx9nC1cWqLVo=
Subject key identifier:   55:1F:A1:8D:DA:F6:FB:F9:50:D1:40:1D:3C:53:4A:3F:C2:C2:B6:45
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584309EFEC01B37C5E3D96A3A8C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81dbd0a5-a2f3-35de-bada-6b69be89efa9.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        142.250.113.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:23:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ef:ec:01:b3:7c:5e:3d:96:a3:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=3d291e32-6273-4599-9320-dc00599e87c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bb:2b:3b:39:ee:a0:65:99:84:fe:d0:2f:e6:
                    a5:cd:44:ad:2e:b1:82:50:d6:7b:9c:02:07:36:2c:
                    64:ac:4b:af:d6:6e:82:09:4a:c8:bd:c9:1d:c3:d7:
                    21:e9:7a:f0:89:b2:0c:89:de:53:ed:2f:0d:86:1f:
                    57:3c:d1:64:1a:41:94:19:e8:30:45:9f:50:e1:da:
                    32:21:6c:5d:54:c3:7d:79:e3:43:df:6c:55:51:3b:
                    2f:21:ac:c8:d0:7c:1f:b1:53:e2:90:b5:b7:a7:b1:
                    54:10:c7:53:37:ba:19:80:bc:4e:5d:75:e4:06:0e:
                    0b:13:0a:58:ed:7e:ae:df:51:c0:0b:22:62:f2:20:
                    cd:2b:27:2e:71:95:4f:32:54:d9:1a:1e:ed:1b:3f:
                    7a:b4:b7:b6:7b:81:86:cc:97:58:fd:99:4f:f0:2e:
                    fa:8d:a5:e7:9b:62:44:21:05:ad:df:de:2b:b4:e0:
                    e8:be:c1:95:d3:50:fb:95:18:cf:e6:f4:ad:41:45:
                    bf:09:8f:9d:c4:6b:15:96:91:af:02:bc:c3:96:1f:
                    d7:3e:ed:a3:62:d5:eb:79:b1:5f:b3:ce:3f:4d:5a:
                    43:53:c8:57:7e:cd:e0:80:a5:87:04:a1:62:35:ce:
                    ee:58:9e:49:c6:35:f6:a9:5d:39:64:42:4a:0b:67:
                    e7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1F:A1:8D:DA:F6:FB:F9:50:D1:40:1D:3C:53:4A:3F:C2:C2:B6:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81dbd0a5-a2f3-35de-bada-6b69be89efa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:96:69:34:41:13:93:f7:48:95:b4:b4:f4:9c:4d:43:c5:e2:
         28:10:9c:e7:85:5f:74:da:26:3e:cd:17:2c:50:e2:6b:77:7f:
         93:92:0d:08:8b:4a:75:91:c5:1b:b2:e2:53:e5:15:11:b3:5f:
         d4:87:de:23:59:76:0e:5d:35:7b:43:27:9a:5a:ae:4e:7e:a5:
         c7:88:25:9a:bd:dc:60:f9:b8:be:81:78:69:4f:5d:1f:0d:fc:
         c0:04:b7:d8:78:58:9b:c2:ce:ad:51:e8:66:86:94:66:91:e2:
         b0:93:09:53:ac:ba:b9:76:11:64:c6:a6:49:73:dc:89:eb:f7:
         87:a9:0c:32:2f:2b:61:fa:b9:27:6d:8a:98:23:52:8a:64:ff:
         ee:da:d4:35:fc:76:5d:ee:21:05:d6:69:80:e5:88:d3:e8:ef:
         16:a6:84:b9:af:55:81:5a:07:37:c7:68:54:85:53:69:ad:25:
         09:c0:3c:9c:2c:30:7a:88:a6:41:ab:6e:0c:ea:c0:9c:0d:21:
         75:82:6e:be:74:bf:e0:59:d5:16:1d:b5:88:64:7a:b5:05:bb:
         33:7b:ed:8f:6c:e0:f9:d3:82:87:7a:c3:8d:50:67:b5:a5:f7:
         95:83:1b:5c:2b:df:fd:99:0c:6d:dd:dc:b7:a2:d9:5c:95:cb:
         08:c1:40:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----