Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/7c485a0b-cfe2-3d7f-a288-14e1218e0155.roa
File:                     7c485a0b-cfe2-3d7f-a288-14e1218e0155.roa (raw, json)
Hash identifier:          MgCLmfw2qRiBsp6erNrYydP3/NaecGLAXis1LQcfI64=
Subject key identifier:   11:68:E4:FF:62:B9:1B:14:32:0C:54:15:3D:5A:4D:28:EB:06:A6:EB
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584309EE5F22C2AB0023EDFA9F80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/7c485a0b-cfe2-3d7f-a288-14e1218e0155.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        64.15.120.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ee:5f:22:c2:ab:00:23:ed:fa:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=8e613e1e-ddc7-4810-9c36-d101079a48f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8a:55:ea:e5:d3:3a:06:8f:58:26:d3:45:40:
                    59:5c:fe:d1:6c:d7:75:43:91:66:2d:90:22:e3:95:
                    60:b4:ff:cc:5f:50:44:50:4e:82:6b:7b:b1:98:89:
                    2b:ea:10:36:bd:0e:e2:67:5a:99:f8:e8:c2:34:17:
                    f1:04:12:d8:ff:4f:0d:69:f8:ce:2d:37:91:94:5f:
                    ff:7c:96:9e:4d:98:db:32:89:54:b2:e1:11:4a:5f:
                    44:05:27:08:0a:35:35:d6:1b:00:9b:8f:14:ef:bc:
                    14:cd:4c:c3:b0:33:99:67:23:28:fa:d5:ce:7e:75:
                    e8:e0:92:fe:b8:5d:6d:89:d1:c5:c0:4f:d9:60:70:
                    b6:54:48:cd:a1:67:b0:16:7d:e6:ff:c2:98:3e:5c:
                    40:28:49:cb:ff:b1:19:dc:a7:3d:94:24:79:ee:6b:
                    26:1c:4b:b1:39:64:0e:9c:28:ae:60:57:56:6e:83:
                    67:80:20:5a:82:8b:91:bb:2a:b6:90:9e:c3:36:a1:
                    2b:ff:cb:52:64:ea:d5:ae:38:af:a0:47:37:4c:29:
                    2e:7e:fe:e6:ff:11:86:40:a1:ae:7a:b4:b6:96:45:
                    50:cc:2e:19:3c:de:48:01:0c:9d:70:6e:76:ba:af:
                    f7:f8:47:4c:81:2e:e0:22:45:70:b8:5a:1b:9a:37:
                    82:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:68:E4:FF:62:B9:1B:14:32:0C:54:15:3D:5A:4D:28:EB:06:A6:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/7c485a0b-cfe2-3d7f-a288-14e1218e0155.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:f4:1c:85:06:34:0a:93:cc:ce:78:51:cc:e4:d9:23:02:15:
         27:56:90:85:02:55:c3:83:36:d9:17:dc:92:88:85:9b:63:6b:
         54:e4:bc:88:af:38:60:0a:39:30:bb:7d:2c:88:23:50:4e:c4:
         5d:2a:ae:b7:d8:34:8d:b5:47:d7:73:c9:f2:70:ae:50:ed:41:
         8a:80:ee:46:a0:86:0d:81:46:f2:05:06:43:d4:84:f5:54:0b:
         35:b7:61:46:02:72:70:5b:df:f4:b3:02:27:73:d6:ae:d8:04:
         cf:a8:d7:e1:85:0c:f1:ea:da:8d:08:55:3f:50:b3:1e:2e:f5:
         94:aa:c1:27:3c:4b:aa:e0:bb:21:a3:0c:43:89:4b:9d:2b:5b:
         1f:3e:9b:1f:ca:07:67:f8:4d:1d:14:17:21:cf:64:7b:00:9b:
         4c:bc:ff:de:0c:2d:8c:cd:ac:e6:cc:c0:19:5e:fd:e2:fb:fa:
         c4:30:21:c2:9e:e6:b0:b7:a4:e2:ec:76:a4:06:d0:fc:50:07:
         ac:b7:b4:e7:63:28:cc:b5:9a:77:6c:db:3b:26:ce:e4:b8:61:
         da:35:00:7d:58:b0:35:04:2c:e6:86:c0:be:be:52:7c:94:24:
         31:0f:c2:7e:6c:51:fc:ff:10:2b:ef:34:52:3a:b3:0d:46:ac:
         b9:62:3a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----