Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e3727626-8f84-3d5e-b263-ade7a703b87f.roa
File:                     e3727626-8f84-3d5e-b263-ade7a703b87f.roa (raw, json)
Hash identifier:          5EJh6OyJJVTPFpTQexxpgOXJZGWhxIrpEcOk4e2DcBs=
Subject key identifier:   5D:91:7A:9E:5C:C2:7C:A2:2F:B8:22:3B:78:9F:2B:EF:FE:22:E6:DA
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A0E2D2B911B97A4FFA3FD00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e3727626-8f84-3d5e-b263-ade7a703b87f.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        172.217.203.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0e:2d:2b:91:1b:97:a4:ff:a3:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=9078d030-d0b6-477f-8227-8ef47778516d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ed:56:98:ef:52:16:34:3d:56:f2:64:f8:e0:
                    fa:ee:48:b9:ef:81:32:4b:0e:1a:57:35:d0:55:21:
                    d9:ad:33:fa:87:db:31:d5:be:8e:fe:22:4b:7f:ba:
                    4b:a7:17:1b:6e:15:f4:5c:b3:f7:09:68:2a:d3:40:
                    6c:9d:3c:fc:8a:33:98:7a:13:9d:e6:dd:a1:13:72:
                    89:3f:4f:2c:8d:9c:2e:19:d0:33:12:ce:d8:7e:9a:
                    d6:2f:2f:59:cc:72:99:05:8d:3f:87:9e:74:05:8e:
                    ce:7b:c6:56:a3:c9:09:c5:ec:cb:71:3f:b8:2d:68:
                    33:e2:f2:a3:30:f9:92:48:37:62:a3:b5:95:f3:05:
                    e1:c7:47:19:a4:16:37:21:4c:e5:e8:5b:1a:7b:ce:
                    fa:36:da:7c:c7:84:72:7b:53:e2:4f:bd:c8:64:d8:
                    53:e7:7a:45:9b:9b:9c:4b:2f:9d:b0:d9:8a:4f:b9:
                    31:b8:24:e2:50:fb:88:8b:0a:8a:84:0a:7e:db:12:
                    79:fe:ff:a9:3c:f7:16:3a:43:b5:b5:ce:4b:fa:28:
                    b7:de:e6:5d:08:f7:02:90:f3:0b:c2:ad:73:02:fc:
                    c1:99:68:e4:a4:ca:1e:23:5d:9a:9a:64:09:31:41:
                    f8:c1:36:dc:b1:60:eb:00:85:d7:bd:1f:a4:18:bb:
                    b3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:91:7A:9E:5C:C2:7C:A2:2F:B8:22:3B:78:9F:2B:EF:FE:22:E6:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e3727626-8f84-3d5e-b263-ade7a703b87f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:2d:a5:e3:5a:f6:61:ef:67:fc:06:98:f4:5a:01:f6:e7:de:
         23:05:b2:7c:ec:e4:78:27:05:e0:b4:d3:1c:dc:52:a7:68:5a:
         d9:bd:89:da:3b:8e:6f:2f:c8:60:dc:2e:09:4f:b7:ed:fc:1d:
         41:72:0f:d3:ce:77:a2:cf:81:46:8e:b9:6f:7b:b7:21:ef:32:
         03:a0:a1:6b:2c:c1:b3:6e:f6:be:9c:d7:ce:04:92:1c:7d:46:
         be:e6:20:b3:03:fa:c8:e7:17:05:da:ea:d9:fb:2f:e1:36:8f:
         c1:cb:14:5e:51:36:f7:78:cb:11:93:43:e6:65:36:ae:56:54:
         a2:38:24:16:f1:9f:23:fd:1a:4d:6b:a9:64:50:8a:18:65:23:
         59:df:1b:50:2d:ba:c4:51:62:4c:c4:a2:9e:59:83:30:ce:62:
         45:35:85:19:3b:05:da:c8:8f:8b:5a:67:db:2e:80:d9:83:f9:
         6f:b5:22:72:7f:ba:23:91:53:ed:17:2b:f0:02:69:40:d3:42:
         cf:07:f6:c8:55:72:3c:a7:b4:5a:52:e8:ce:2f:79:f0:a2:f2:
         54:f1:7b:a3:d4:35:4d:80:f0:a3:cc:74:97:29:89:cd:fe:1f:
         6c:ca:74:84:14:01:47:f9:df:5b:df:87:d7:c1:65:99:a6:49:
         2c:f2:58:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----