Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87b5d191-f536-3ff4-9813-a6979a027bde.roa
File:                     87b5d191-f536-3ff4-9813-a6979a027bde.roa (raw, json)
Hash identifier:          7y0hV2DAlCDl9DHnrQEfutTtoNJmNzmPYyzV6d9KIU0=
Subject key identifier:   69:A4:1D:C3:07:C9:40:7A:AA:9E:38:21:14:0F:80:09:E3:CA:0E:7F
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584309F36AFBDB407A2BA6D88AC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87b5d191-f536-3ff4-9813-a6979a027bde.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        64.233.186.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:17:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f3:6a:fb:db:40:7a:2b:a6:d8:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=44761fef-c49c-4e57-8e7e-7b25c0afc4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e0:56:8b:0a:45:85:5a:10:7f:d4:24:cd:61:
                    19:da:1f:39:84:a2:82:76:e3:32:54:56:33:3f:7c:
                    20:c9:03:1c:da:0f:0e:7a:2c:cc:37:23:13:f6:7d:
                    cd:45:78:4a:b9:9e:fd:c4:fe:bc:9d:84:d9:42:4e:
                    18:94:ba:a5:7f:0f:f8:21:99:72:9e:9f:b1:2b:0f:
                    06:33:16:e3:99:ab:d7:62:6e:51:3f:03:18:c4:d9:
                    27:f2:cd:4f:d8:f9:27:9d:2d:b6:a8:25:0b:2e:86:
                    15:ed:11:20:58:8a:88:f5:4a:97:34:bb:d6:fc:7e:
                    6a:f0:53:4d:dd:82:7c:1e:f6:22:9d:9a:e5:8f:63:
                    a5:6d:99:38:b1:6c:9f:9d:9a:27:65:bb:e0:35:09:
                    37:83:f1:46:7c:3e:97:34:58:5d:44:04:ad:10:e8:
                    51:08:9e:60:89:e0:f6:c8:b6:72:c6:92:20:9a:16:
                    a8:6e:1b:fc:e5:60:03:9b:06:3c:4c:ad:cf:07:d3:
                    d3:84:7b:81:82:6f:5b:aa:6d:e7:77:d4:75:26:f2:
                    5b:59:ac:dd:09:96:ba:cf:aa:54:f9:40:3e:ec:49:
                    71:80:15:a3:f7:f7:1a:59:ee:48:45:f7:f4:82:fe:
                    0f:29:cf:50:bd:af:5f:cb:fa:80:56:f0:b8:5a:3e:
                    bd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A4:1D:C3:07:C9:40:7A:AA:9E:38:21:14:0F:80:09:E3:CA:0E:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87b5d191-f536-3ff4-9813-a6979a027bde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.233.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:21:f0:8f:a6:d7:a6:cc:25:13:53:dc:b9:a4:44:02:79:bf:
         9d:c3:22:f7:73:a3:f8:4c:ae:1c:2c:d8:55:39:76:e5:c1:26:
         3d:89:1e:e1:11:85:56:fe:2c:e3:47:a6:65:32:9a:1f:eb:a9:
         77:b6:d8:d3:61:72:6b:d7:11:04:3d:f9:22:90:66:4c:d9:71:
         0a:6d:20:57:48:5c:a0:06:9a:26:ba:74:3e:1d:07:6d:bb:a9:
         c5:43:2e:1d:8a:6d:5c:1a:7b:c7:7a:30:a5:b3:a2:c8:1c:fb:
         f9:76:87:b3:26:9e:b2:bd:e3:11:0a:c3:ac:a5:4e:87:8c:a7:
         ec:5c:6e:ca:80:42:61:0f:f0:6b:c6:81:94:fe:0e:b5:6f:64:
         93:01:02:f5:c1:56:10:0c:39:12:89:7d:ac:16:f9:55:1a:c9:
         af:7c:a7:3f:51:6a:79:9f:c0:2f:cf:8e:a3:53:1a:bb:cf:90:
         41:61:fa:54:d7:56:dc:dc:37:5c:85:4a:3e:84:e6:27:4d:e9:
         7b:26:99:7e:5b:6c:94:b0:46:19:91:2c:18:14:b2:60:c1:4f:
         c4:72:be:f5:c9:c7:36:2a:96:90:bd:e3:05:03:7e:c1:11:58:
         ed:bd:80:5a:72:2e:5d:e6:d7:9b:23:00:c9:84:3f:d8:3e:c0:
         f7:ba:72:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----