Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8d74bd66-cd87-3a4c-8fd9-d25b25c6b669.roa
File:                     8d74bd66-cd87-3a4c-8fd9-d25b25c6b669.roa (raw, json)
Hash identifier:          5qfl2W3Njh1bB0anZB8iY+JH4BzkJYJn7gVvbwE+ACA=
Subject key identifier:   1B:B6:6F:96:D5:9B:B6:96:D0:1C:E5:0D:8D:0F:E4:F3:1F:80:19:5F
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A0C58131FF6E83842014820
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8d74bd66-cd87-3a4c-8fd9-d25b25c6b669.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        192.178.0.0/15 maxlen: 15

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0c:58:13:1f:f6:e8:38:42:01:48:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=bb4bec78-9427-4960-82ad-c99971774ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9f:61:76:43:44:11:9d:b6:07:d5:ec:f5:69:
                    3d:a4:12:af:17:78:93:23:18:de:82:7f:60:5d:a2:
                    a6:0b:8f:61:b7:5b:e4:b2:1b:0a:68:36:4b:d9:2b:
                    c6:5e:8c:4e:ff:21:3e:e1:b9:86:19:36:a6:67:c2:
                    65:45:3e:19:4b:66:93:b4:4c:26:48:80:d6:40:55:
                    e8:01:7f:2c:4c:ba:21:19:b0:0f:74:1e:97:d0:aa:
                    91:77:23:b7:50:78:ad:27:c3:05:95:9f:02:d4:fd:
                    12:2d:34:4b:ef:1f:4a:28:41:87:2f:6b:ee:10:6a:
                    d1:05:a1:e0:c1:32:86:c4:8d:69:ac:5f:d5:07:ea:
                    6d:b2:cf:08:b9:8d:86:91:02:3e:22:f3:de:46:fb:
                    44:f9:6a:0e:2f:cd:86:59:3c:c1:c4:63:53:ab:f5:
                    ba:8b:a2:eb:a2:8b:4c:dc:91:43:4f:28:cd:58:69:
                    77:ce:ac:84:f5:57:3d:c2:9d:6d:be:4e:da:64:c4:
                    7a:59:4e:20:a2:21:e3:c6:1d:f2:6b:55:0e:90:3b:
                    82:c3:4e:57:ac:2e:b6:c8:df:48:e5:21:24:7b:81:
                    bd:0b:80:bf:22:cb:a7:2d:6e:e1:4f:b7:cc:1c:2e:
                    cf:7a:62:81:6e:f5:27:83:be:81:59:af:3b:ff:e8:
                    12:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B6:6F:96:D5:9B:B6:96:D0:1C:E5:0D:8D:0F:E4:F3:1F:80:19:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8d74bd66-cd87-3a4c-8fd9-d25b25c6b669.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.178.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:50:35:f1:c1:fc:56:70:6c:c6:c4:97:8b:8a:6e:0e:5c:c0:
         95:1b:4c:6c:77:d3:b7:c8:96:65:6e:f2:8c:02:c7:36:4a:7e:
         4f:b2:07:f9:54:99:d3:e0:55:a1:5e:80:ba:a7:c7:66:7f:53:
         39:29:72:87:a7:2f:3c:ed:f1:9e:c9:ea:36:3d:f3:9a:10:84:
         88:e1:7c:ff:8c:e1:90:f2:9d:9e:c6:37:a2:33:37:a4:68:c3:
         b0:f4:26:8d:91:87:23:34:3a:bd:e1:4e:0c:e4:e6:7b:f2:f5:
         42:b4:5c:64:1b:8a:d4:53:5a:45:4a:46:9f:9c:38:e1:68:2d:
         4e:74:92:62:7e:8c:9b:a1:74:be:83:37:ee:60:fe:5a:3c:dd:
         51:25:2e:f2:5e:51:13:18:d6:99:d7:5a:a2:94:da:30:15:a7:
         40:1d:df:35:17:5f:ec:d4:af:e5:f6:f5:6f:47:56:33:c0:39:
         1e:46:42:25:90:e6:65:f3:9d:40:b9:32:48:c7:a9:d0:b3:56:
         45:8c:68:a3:f7:54:28:9b:eb:3c:23:a7:ae:a7:6a:a8:44:ab:
         db:99:4a:63:43:f0:24:5c:85:2f:89:a4:57:c9:ed:bb:e7:dd:
         47:f6:ff:80:5c:66:e1:c9:22:87:f8:f1:1f:2a:6a:8e:75:12:
         39:95:ce:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----