Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/78c20863-6a6f-317d-a904-6c40fac54b60.roa
File:                     78c20863-6a6f-317d-a904-6c40fac54b60.roa (raw, json)
Hash identifier:          sk5fEQyw8VhiVwfc++RdHjDwRidQjSdS9IiS9FnDIIg=
Subject key identifier:   10:0D:22:34:AF:21:0D:0B:FE:AE:37:30:6B:77:CE:26:CE:D4:05:22
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584309FCD3DABF2EC6D938455F80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/78c20863-6a6f-317d-a904-6c40fac54b60.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        64.15.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fc:d3:da:bf:2e:c6:d9:38:45:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=e7c2e30a-cfaa-4ba1-90ba-9dbb3382d05a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a0:24:c6:a4:5e:fc:8b:bc:a8:c7:7c:09:e4:
                    1d:ff:d0:5b:48:8d:80:0b:f8:d3:12:cd:08:c0:b1:
                    69:34:c3:0f:59:f1:d1:f7:c3:e2:b2:b2:f0:50:f5:
                    03:aa:77:63:a6:52:38:9a:dd:71:14:d7:02:f8:61:
                    97:66:cf:f3:be:da:ee:69:e8:e1:1b:0c:99:74:7f:
                    4f:92:0c:0d:23:2f:ac:57:db:f4:43:13:79:f3:fd:
                    68:9c:b1:17:bb:45:89:09:46:c0:e5:24:b2:a6:da:
                    56:8d:cf:6a:fb:cd:fb:d6:b3:19:62:b9:44:5a:47:
                    82:cb:8d:b5:ab:67:97:37:99:7b:d4:70:95:2c:1d:
                    a2:0a:84:ee:ab:8e:f1:ba:b3:7b:4f:47:3b:96:e6:
                    ab:99:b1:0b:13:96:dd:a6:04:c6:ac:b6:5b:e3:74:
                    8a:5b:4c:2e:75:89:92:f6:c2:d4:db:d6:bc:bf:89:
                    f1:5e:3a:66:d0:1a:af:5e:ea:e0:2e:c7:bf:50:42:
                    ff:c1:d2:eb:29:02:04:59:f6:e5:7a:1b:1f:91:97:
                    3e:fa:e5:75:16:c0:dc:8e:77:8d:f4:69:7f:b4:4c:
                    96:77:38:c8:93:2e:bd:c5:81:57:39:59:c4:77:2c:
                    ed:5e:cf:a2:3b:bb:b4:18:ab:46:0a:a9:62:c4:67:
                    ca:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0D:22:34:AF:21:0D:0B:FE:AE:37:30:6B:77:CE:26:CE:D4:05:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/78c20863-6a6f-317d-a904-6c40fac54b60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:ea:3d:3f:f7:3f:34:15:cd:3b:b9:9a:10:7e:f4:b3:eb:79:
         05:8c:b4:20:e2:35:37:70:46:ce:c2:83:4a:bc:53:6b:4a:bf:
         3c:b4:15:8b:0c:88:65:f5:dc:f8:ff:55:4e:cc:bb:59:37:30:
         cc:16:33:d2:66:0b:a0:46:2d:6b:3e:13:16:64:2d:ab:15:98:
         a7:95:78:16:3c:eb:8e:8c:21:cf:ac:b0:34:a0:70:4b:6a:1c:
         19:1e:8d:20:7f:c2:21:71:bd:a0:83:3d:0c:54:61:a0:7f:43:
         57:4a:4b:17:ec:83:82:0d:9a:b6:62:1e:b9:01:3e:c6:c0:4f:
         48:7e:25:cd:6a:10:3e:68:4b:f7:53:66:3c:71:55:09:0f:3f:
         09:19:80:f7:5c:06:f2:b5:7b:f8:a3:14:66:e6:16:bc:4e:85:
         6e:a0:28:61:06:5c:ba:1c:ef:2e:1b:f9:b9:85:31:47:f4:eb:
         ed:19:32:9f:a1:ba:23:1f:56:07:f2:5a:31:d0:ac:42:14:35:
         ca:38:8a:0e:79:c6:9c:5c:c9:e4:ab:ea:e6:27:e2:8a:53:bb:
         d1:b8:a5:fa:59:5d:2c:e8:47:2b:45:83:73:33:b2:5e:a1:88:
         a0:09:68:6e:88:81:e7:8a:78:92:a4:fa:d6:97:df:e2:fe:bc:
         a9:63:50:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----