Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db766388-1cb9-3616-bca0-3d7e4799f204.roa
File:                     db766388-1cb9-3616-bca0-3d7e4799f204.roa (raw, json)
Hash identifier:          tVItnFaWPu+PJV8zakyMhQsovfxefOF1xAmbJOQq6Dw=
Subject key identifier:   FE:3F:60:B3:59:91:17:46:26:4B:28:A9:DA:CB:B2:44:ED:99:E7:BB
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583F5FB8C6D54A8DDDC6C1494C80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db766388-1cb9-3616-bca0-3d7e4799f204.roa
Signing time:             Sun 25 Sep 2022 12:00:00 +0000
ROA not before:           Sun 25 Sep 2022 12:00:00 +0000
ROA not after:            Sat 28 Dec 2024 05:00:00 +0000
asID:                     15169
IP address blocks:        142.251.42.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5f:b8:c6:d5:4a:8d:dd:c6:c1:49:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 25 12:00:00 2022 GMT
            Not After : Dec 28 05:00:00 2024 GMT
        Subject: CN=eb6722f3-dedf-428e-a87f-151843854e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e5:9f:f7:bc:c6:61:31:ae:b0:c8:68:85:cf:
                    93:49:a5:c8:6f:67:32:e7:e8:44:6b:4b:ac:b1:0b:
                    f2:0a:f6:d9:e2:d7:80:eb:71:f7:8d:8a:9e:a4:71:
                    b6:d4:4f:fe:59:48:44:05:25:91:0a:1c:44:1f:7a:
                    c4:d9:fc:52:43:ed:17:d4:f5:90:aa:71:5b:5a:43:
                    dc:a1:9b:d7:9d:13:29:79:77:33:46:35:91:03:df:
                    20:c7:75:77:a4:de:46:22:5a:87:aa:d7:0b:d7:39:
                    e3:73:83:2d:17:7a:0b:e9:31:99:21:cd:fe:3d:37:
                    ae:2d:51:f3:a3:ae:4d:89:24:d4:8e:de:71:8d:4f:
                    eb:c2:03:39:0e:65:4f:46:2c:cf:14:96:f6:cd:2b:
                    15:f0:1c:e4:14:0f:c2:22:00:09:da:a1:ab:d1:2e:
                    b5:bd:70:d5:93:f0:2e:4c:7b:b3:37:9a:2c:36:cd:
                    d9:81:60:fc:56:66:03:08:39:5c:e2:0f:16:58:4e:
                    30:51:6e:ca:0d:96:01:e1:6e:51:62:81:e9:f0:9d:
                    f2:9c:83:72:25:08:c9:1b:50:01:b8:0e:c3:08:15:
                    f2:56:bd:38:0e:2e:6a:11:93:c3:49:83:78:bb:be:
                    7e:a9:a4:c3:4a:6c:9c:98:16:b1:c9:eb:d8:27:c2:
                    d7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3F:60:B3:59:91:17:46:26:4B:28:A9:DA:CB:B2:44:ED:99:E7:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db766388-1cb9-3616-bca0-3d7e4799f204.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:0b:dc:39:a5:31:19:22:80:ee:fa:93:c0:13:2e:5c:5e:08:
         36:f6:1a:3b:01:b4:5d:bf:31:84:f7:39:00:ef:b2:a5:ea:ed:
         9f:27:df:ce:92:0e:cd:e7:96:f7:8c:64:d0:64:7e:49:cd:0f:
         d1:0e:6b:b9:5d:89:df:47:4d:47:7a:5c:0d:29:88:45:a9:7c:
         a2:ef:7d:6f:52:5d:aa:ea:34:b7:b2:a1:ba:17:2e:25:bd:16:
         4c:63:c4:e2:3b:2b:c5:c9:a2:b5:84:61:80:bb:2f:21:39:dc:
         78:3d:2d:a9:06:fa:70:86:87:a8:67:74:39:14:f7:15:07:dc:
         2a:1d:6f:2b:78:d5:bd:6e:bb:15:17:3f:9e:a4:0b:fb:eb:a8:
         17:e0:6a:ba:c7:7e:6f:86:0b:0b:94:78:56:ad:6f:c3:c5:74:
         dd:45:25:8e:82:db:cd:8e:5d:f3:46:bc:23:75:97:89:41:03:
         01:02:15:58:f3:58:de:3f:8a:02:88:81:47:cc:9d:90:4e:41:
         73:88:8b:54:65:13:f9:76:a9:03:3b:30:d6:05:a0:47:13:69:
         84:1d:91:28:2e:14:74:9e:38:aa:28:f7:12:0f:bb:3f:a3:c8:
         38:14:82:f7:cd:a9:d8:f0:47:62:53:fb:3e:24:38:f6:8d:4d:
         9e:a3:75:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----