Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/1be1b2fa-becc-3157-a867-95348bcb14c6.roa
File:                     1be1b2fa-becc-3157-a867-95348bcb14c6.roa (raw, json)
Hash identifier:          eG6XdQtWenXcCTioV7PxGEkU5K5wbp+62Xpba/98GXY=
Subject key identifier:   12:F4:FF:9B:C0:45:A3:5B:11:36:49:68:84:F0:DF:8D:68:E3:E1:DB
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858430A04C0B0F0D6D565DF15AF00
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/1be1b2fa-becc-3157-a867-95348bcb14c6.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        64.15.114.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:04:c0:b0:f0:d6:d5:65:df:15:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=fb39fdd6-6655-4857-8150-d153f34f0f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1b:64:f2:80:a3:7a:2a:aa:e2:f9:65:9a:83:
                    63:cf:1c:96:ec:41:1f:17:26:b5:08:38:8c:71:e0:
                    b6:47:78:62:62:a1:09:ec:4f:be:ba:55:98:a5:17:
                    48:95:09:5f:d9:13:69:1c:02:91:8f:77:81:89:6e:
                    e2:14:2d:13:9a:34:4f:87:96:e7:41:93:78:c1:53:
                    4d:dc:f6:46:1c:8d:16:e6:b0:22:29:b0:ab:ca:e4:
                    17:ec:13:1e:44:75:47:5d:8e:91:4d:26:b1:06:ce:
                    e7:25:f7:14:5d:74:a2:13:35:3f:c2:9c:78:4d:07:
                    58:0a:00:f3:6e:39:73:c6:59:d4:f1:e4:41:0d:51:
                    90:7f:70:f3:d8:61:e9:20:9d:b4:4e:e0:e8:07:7d:
                    dd:61:3e:dd:3b:de:39:a3:19:de:73:42:e8:ec:22:
                    02:94:a8:9c:4f:c9:97:24:1f:5c:0c:6e:b6:a3:b8:
                    fa:5f:e7:b2:94:94:18:3d:57:d0:a1:24:75:74:3b:
                    6e:fb:53:99:8c:9a:26:e5:90:20:f2:b4:78:19:69:
                    6e:66:47:53:89:d7:32:74:de:17:9b:96:98:2d:b5:
                    05:98:d3:85:6d:3f:dd:7d:80:5c:7c:b0:81:02:c8:
                    40:11:0a:a1:0a:f2:d3:0c:c0:18:98:af:9b:12:6e:
                    d3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F4:FF:9B:C0:45:A3:5B:11:36:49:68:84:F0:DF:8D:68:E3:E1:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/1be1b2fa-becc-3157-a867-95348bcb14c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:06:1c:eb:56:23:5f:e9:43:0c:0a:59:6e:47:ee:e9:b1:67:
         7f:7f:86:64:f3:9a:de:e7:af:ab:bb:ef:45:56:b1:13:d2:fd:
         4b:b5:15:39:24:68:07:38:3d:af:d2:fa:df:78:a1:1c:12:55:
         be:1f:ae:92:52:e5:83:2a:fe:3d:c3:df:94:86:3a:39:a3:38:
         10:8a:f2:ef:1e:dd:8e:86:f2:2b:91:2e:07:d5:95:a1:2b:0a:
         c7:4c:28:52:e1:a2:be:e9:d2:f0:90:e6:ab:a2:9c:7b:b3:c9:
         7f:d4:05:0c:46:6b:9b:e5:57:cb:e6:97:32:c3:10:fd:40:82:
         64:e3:8f:f0:5f:d2:ca:dc:54:00:12:98:6b:55:ee:d7:d8:4f:
         5b:46:f5:a4:7f:6b:6d:16:c8:47:29:6b:34:3c:e4:1a:f1:af:
         65:ac:88:02:e6:8d:1f:1b:94:9d:85:bc:0e:c6:89:18:4f:d1:
         c4:ae:75:cd:ea:ab:37:4b:98:94:f2:69:8e:6e:92:ae:e3:87:
         17:0f:b1:9c:6c:51:53:85:f6:91:0a:37:ce:61:3f:94:b4:40:
         c0:53:1b:16:7b:6b:5e:fb:2d:f7:d9:a5:d8:33:94:c6:30:74:
         53:2b:97:ed:76:4c:88:69:87:85:bf:72:2b:3a:bd:d2:12:08:
         35:fd:f7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----