Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bfbe2557-96c6-3d05-a8e8-e7f7298e07fc.roa
File:                     bfbe2557-96c6-3d05-a8e8-e7f7298e07fc.roa (raw, json)
Hash identifier:          Nbjrfj+LbgKwA+vX3EKbUCSiVasBXXZxBiZOJdzXjGc=
Subject key identifier:   3B:89:BB:7D:D1:67:A4:23:4F:69:C0:9B:42:C7:3D:8A:2D:72:61:17
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A155A9795664E95977DC400
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bfbe2557-96c6-3d05-a8e8-e7f7298e07fc.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        173.194.72.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 29 Mar 2024 20:24:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:15:5a:97:95:66:4e:95:97:7d:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=665e9c4e-c49a-48a9-bf2c-4fcac4aaa196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:58:6d:e5:3c:bd:6f:c8:07:1f:f3:b4:1e:e1:
                    e8:7a:2a:c4:81:7a:b6:9b:06:c5:65:63:f5:bc:ea:
                    5e:77:67:08:78:94:0f:47:82:ce:e0:50:d2:e2:4e:
                    45:3f:f6:3f:87:9a:49:63:8d:ec:ca:a3:aa:b0:fb:
                    13:55:1a:ac:ea:f1:67:63:87:ac:a4:50:f9:72:a9:
                    74:39:7f:42:a1:76:0f:67:4a:d2:e5:d3:9f:aa:84:
                    66:86:86:0f:5e:68:59:96:b1:3c:21:03:58:e3:47:
                    6a:10:b6:2f:2f:a9:8b:69:50:9c:48:eb:3d:ad:f9:
                    97:1c:f5:2a:3b:86:c7:f0:3e:8f:df:ce:b8:49:fb:
                    ae:fc:ea:f1:0f:84:b6:f0:a5:44:b7:b5:ef:3b:87:
                    31:cc:8e:9f:2a:f7:e1:ec:53:d6:ed:4b:d5:7d:e5:
                    57:25:6c:55:fb:b4:11:c5:e8:7c:0a:87:db:88:0e:
                    16:fa:ec:48:09:35:72:ad:5c:52:72:76:c9:b0:34:
                    ca:ca:d1:b9:95:e8:a5:04:f6:54:16:e3:dc:3a:4f:
                    ec:e7:db:77:7e:93:74:76:dd:f3:1b:ec:f4:1b:77:
                    80:65:60:25:84:13:1d:3b:5b:3a:a0:be:76:10:fa:
                    2d:35:3b:7f:d2:90:e1:18:3e:b4:31:37:e0:92:5e:
                    1c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:89:BB:7D:D1:67:A4:23:4F:69:C0:9B:42:C7:3D:8A:2D:72:61:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bfbe2557-96c6-3d05-a8e8-e7f7298e07fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:82:c2:ad:4c:5a:60:7d:42:7a:de:83:3a:58:b1:38:69:09:
         fd:9f:f1:c8:df:a8:13:0c:e6:da:bc:06:06:f6:bc:21:91:b1:
         cb:1b:5e:68:40:ba:25:86:cb:08:71:f9:4e:d7:72:75:cb:e1:
         6f:b8:c2:5e:1f:d9:a4:35:1d:0f:aa:43:71:0d:f9:75:7b:bb:
         30:bd:e2:b0:13:f2:ba:75:66:2f:bd:eb:61:ef:0f:cb:34:c7:
         60:73:24:e6:13:02:20:dc:0c:6f:19:85:d0:16:24:67:82:e3:
         b0:a1:3d:a8:a9:63:4a:74:8d:fa:a7:8a:9b:88:85:8c:f0:eb:
         20:09:d3:c6:86:e0:e0:83:52:f7:ec:f9:c1:7a:06:29:f3:33:
         04:a3:9f:e1:ea:a0:3e:85:0c:23:f1:f6:d2:6c:3d:b7:5e:45:
         b4:57:97:5c:70:5c:79:be:ca:93:f2:2b:2c:a0:2b:18:d2:e6:
         6d:5a:e9:bc:17:f5:0e:17:0f:6e:76:2e:95:07:96:1f:81:f0:
         13:c7:eb:10:34:de:90:ab:38:e7:b6:d4:17:6a:c3:c2:aa:57:
         6f:df:9b:74:5e:fd:63:3d:57:6b:3d:47:04:92:85:6e:30:6b:
         28:a7:c3:2e:69:3a:01:77:ef:fa:89:dd:a3:3d:ab:54:d1:eb:
         47:e0:80:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----