Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4240520c-ec3a-3fda-aa09-b3f356c0129c.roa
File:                     4240520c-ec3a-3fda-aa09-b3f356c0129c.roa (raw, json)
Hash identifier:          Ob4dTM5Y3MtK24PpB4ZH1A2CeaTsOtSJRSYMCj3LNt0=
Subject key identifier:   87:89:07:AF:5C:E3:F8:0B:93:3C:C2:40:B7:92:59:74:F4:97:82:E9
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858430A21EE6BA29F6E45FC826030
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4240520c-ec3a-3fda-aa09-b3f356c0129c.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        208.117.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:23:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:21:ee:6b:a2:9f:6e:45:fc:82:60:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=c57c1814-8f6c-4761-ad1d-99354e45312f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c7:82:74:f8:de:2c:07:4e:18:a2:aa:d1:b1:
                    88:e5:ea:09:35:3c:bd:fe:f6:06:56:4b:43:e2:fd:
                    3f:bf:f4:53:62:46:d4:5a:8c:f9:a0:52:a4:8c:6d:
                    d6:8d:24:71:39:69:72:51:93:2d:08:55:da:55:b3:
                    6c:c0:dc:9d:7b:ca:90:72:ad:f7:b8:73:3e:9a:d9:
                    e2:eb:cd:a1:aa:b9:3c:55:c4:80:62:ef:4a:ab:45:
                    e1:ef:62:4d:e5:d9:89:d4:52:31:fb:0f:4a:ca:43:
                    dd:bc:06:6b:03:69:0d:74:47:11:58:43:55:73:20:
                    b4:ec:d0:06:e4:fe:46:cc:1d:e4:81:d5:ec:41:c1:
                    8f:f9:7b:15:0a:e4:20:67:1d:aa:22:b9:11:40:42:
                    34:55:18:eb:d6:ae:e2:eb:3b:98:1f:f1:46:4a:aa:
                    c3:af:53:0b:f1:97:ed:9c:9b:58:69:24:3e:f1:57:
                    18:11:33:fd:f4:97:82:34:56:16:8d:d4:33:7a:58:
                    9a:46:e4:83:7a:55:0f:98:58:f8:7c:9a:95:25:94:
                    65:e1:36:b1:b7:43:04:f8:98:1d:be:83:58:03:e2:
                    9c:43:68:39:5a:c3:f3:97:9f:04:d3:db:bd:34:cd:
                    6a:87:19:dc:0f:a9:9a:91:b0:71:d0:a5:1c:76:ec:
                    6c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:89:07:AF:5C:E3:F8:0B:93:3C:C2:40:B7:92:59:74:F4:97:82:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4240520c-ec3a-3fda-aa09-b3f356c0129c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:d5:c3:92:a6:c7:d3:9a:33:88:75:34:01:be:02:28:8a:35:
         08:7f:67:b1:a8:0b:f4:b9:29:3e:2b:d3:2c:e9:c4:b2:29:0f:
         35:5a:8c:fa:9c:04:64:e1:9a:5b:c9:c4:93:3d:cc:d3:d2:92:
         8a:f1:c2:b8:36:5d:aa:33:97:76:7d:ea:41:b2:73:1e:23:26:
         10:a1:76:3b:ff:3a:90:20:5e:72:d5:ce:e5:70:5d:24:c4:d0:
         32:5a:01:42:84:57:3a:c1:37:9f:8c:c7:cc:ce:68:6b:f0:75:
         0b:f7:bd:c3:88:57:5f:b3:0c:97:50:e0:39:28:4f:f4:78:15:
         00:0b:60:6d:4c:20:1d:ce:da:6b:53:4c:b0:a2:9d:0a:34:56:
         a3:e8:ba:b5:aa:e5:36:e7:1c:40:8c:3f:93:45:46:12:f9:c7:
         53:5e:73:0c:11:79:26:ad:f7:35:40:f3:9f:06:5d:72:99:14:
         13:cb:61:77:d7:96:f0:83:41:98:6d:b0:d8:52:30:7e:ae:a1:
         57:d2:07:03:38:a4:3f:8c:a7:b3:73:fc:5c:f5:45:27:5b:5b:
         44:bd:d0:3e:14:08:52:ff:d0:87:92:09:2e:14:84:8d:33:40:
         a5:cf:45:29:de:58:9d:96:60:43:ce:dd:c1:13:fa:d2:a6:de:
         d1:54:6c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----