Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b24a19f3-d156-3325-ac3e-443ead3ab152.roa
File:                     b24a19f3-d156-3325-ac3e-443ead3ab152.roa (raw, json)
Hash identifier:          LRjbvZPsWcskI6rUUbWlGp9bzix4bMnj6nF+1jJDOnM=
Subject key identifier:   5B:61:5A:CD:A2:65:DE:DD:51:5C:CB:7E:F8:0D:05:FA:3F:5F:0D:ED
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A0B0D44A5082002833BD100
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b24a19f3-d156-3325-ac3e-443ead3ab152.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        64.233.162.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0b:0d:44:a5:08:20:02:83:3b:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=a2377a6b-5a3f-44e2-980c-b9f31cb4b975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8e:6e:bb:9e:07:87:a7:5d:ee:66:c8:85:99:
                    ec:0b:47:73:2f:de:c6:0f:9e:04:87:d2:8f:41:a7:
                    88:7e:a7:10:b1:3f:5b:fe:42:02:a4:f5:bb:12:0e:
                    d2:4b:31:4f:d8:3d:51:70:7d:f1:82:e7:55:7e:12:
                    a7:dd:c4:e0:0b:5f:c2:fc:a3:cd:95:f3:28:8e:c9:
                    1a:ee:32:4d:26:d5:88:91:a7:6e:69:78:f9:c8:07:
                    9d:c1:42:33:1d:5b:f4:c6:6e:ce:20:d4:58:18:bc:
                    f4:e6:86:ed:16:76:ae:0a:23:b4:8c:a1:1a:16:fd:
                    bb:1e:0c:dc:fc:5f:32:9a:ef:31:6c:31:36:b0:09:
                    e6:99:7b:64:b8:0c:b3:83:2d:39:19:e5:e7:39:87:
                    13:35:b2:77:25:81:b2:7a:18:ab:0d:88:3f:eb:fe:
                    ce:6d:a3:74:99:d9:96:8a:4b:4e:3a:66:21:a5:fa:
                    f2:c5:78:ea:e7:72:7c:95:0a:2f:f4:d3:33:16:a8:
                    f5:01:59:8c:72:85:01:df:43:3f:b2:d7:c7:a0:ab:
                    7a:5c:53:9b:0d:93:24:a4:b8:1c:89:1a:38:76:9f:
                    20:18:f5:74:07:71:05:43:47:dc:04:8d:3b:86:b6:
                    80:0e:71:08:6d:58:d2:f1:52:f1:e2:fb:1e:cd:b0:
                    68:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:61:5A:CD:A2:65:DE:DD:51:5C:CB:7E:F8:0D:05:FA:3F:5F:0D:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b24a19f3-d156-3325-ac3e-443ead3ab152.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.233.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:84:cd:a0:91:27:7c:be:d4:d2:56:25:db:3e:1c:04:81:37:
         ef:00:53:b3:13:2c:e0:3c:a4:14:e9:43:20:4d:81:bd:ea:6c:
         2a:19:c9:0b:12:da:08:a4:68:bc:14:f9:31:f1:ec:8a:ed:f6:
         99:3f:da:a4:ff:44:b4:46:c0:bd:99:14:b7:33:b2:f1:4d:f4:
         b0:a3:4e:81:ec:50:6c:1a:be:2c:89:6b:6f:0d:d9:fe:59:2d:
         be:d9:3d:37:34:76:4c:50:19:9a:f8:ff:51:66:25:93:dd:81:
         cb:9a:e7:7c:fb:c8:e5:8b:a2:11:20:91:97:12:36:73:dc:c4:
         cf:85:de:a7:5a:60:a7:cb:3e:4b:52:26:74:d3:1c:4f:7f:1b:
         51:82:c1:08:59:65:c8:ac:5e:6f:92:7d:fb:4f:c6:c6:6f:75:
         18:56:0f:63:77:70:9b:63:d9:d9:6e:6f:66:23:80:73:a6:9a:
         36:3f:67:a2:65:27:ea:c6:bd:06:58:79:1b:08:b1:bb:d4:e4:
         e4:a6:0d:39:fe:5e:5d:61:b1:6f:3d:9b:fe:69:18:55:49:75:
         09:05:98:8a:69:6f:aa:e2:0d:56:7f:0a:23:46:51:8b:73:a3:
         09:e2:4e:22:62:e7:42:08:ac:31:cb:53:bd:1d:13:3a:ad:f7:
         5f:2e:02:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKCw1EpQggAoM70QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YTIzNzdhNmItNWEzZi00NGUyLTk4MGMtYjlmMzFjYjRiOTc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA445uu54Hh6dd7mbIhZnsC0dzL97GD54Eh9KP
QaeIfqcQsT9b/kICpPW7Eg7SSzFP2D1RcH3xgudVfhKn3cTgC1/C/KPNlfMojska
7jJNJtWIkaduaXj5yAedwUIzHVv0xm7OINRYGLz05obtFnauCiO0jKEaFv27Hgzc
/F8ymu8xbDE2sAnmmXtkuAyzgy05GeXnOYcTNbJ3JYGyehirDYg/6/7ObaN0mdmW
iktOOmYhpfryxXjq53J8lQov9NMzFqj1AVmMcoUB30M/stfHoKt6XFObDZMkpLgc
iRo4dp8gGPV0B3EFQ0fcBI07hraADnEIbVjS8VLx4vsezbBouQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFthWs2iZd7dUVzLfvgNBfo/Xw3tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjI0YTE5ZjMtZDE1Ni0z
MzI1LWFjM2UtNDQzZWFkM2FiMTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOmiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEmEzaCRJ3y+1NJWJds+HASBN+8AU7MTLOA8pBTpQyBNgb3qbCoZyQsS
2gikaLwU+THx7Irt9pk/2qT/RLRGwL2ZFLczsvFN9LCjToHsUGwaviyJa28N2f5Z
Lb7ZPTc0dkxQGZr4/1FmJZPdgcua53z7yOWLohEgkZcSNnPcxM+F3qdaYKfLPktS
JnTTHE9/G1GCwQhZZcisXm+SfftPxsZvdRhWD2N3cJtj2dlub2YjgHOmmjY/Z6Jl
J+rGvQZYeRsIsbvU5OSmDTn+Xl1hsW89m/5pGFVJdQkFmIppb6riDVZ/CiNGUYtz
owniTiJi50IIrDHLU70dEzqt918uAgA=
-----END CERTIFICATE-----