Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/7d6e522a-4850-3d5f-9b82-69c78e20a35e.roa
File:                     7d6e522a-4850-3d5f-9b82-69c78e20a35e.roa (raw, json)
Hash identifier:          FTWTzlThXBdQQ8KpiG8Veu4/KcOF108qdfbxJP++MHY=
Subject key identifier:   DD:72:F4:D3:E4:74:6A:BD:46:46:27:7D:BC:2C:C1:33:94:96:27:63
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858430A1271D24E3E0A9E62B76280
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/7d6e522a-4850-3d5f-9b82-69c78e20a35e.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        208.117.224.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:12:71:d2:4e:3e:0a:9e:62:b7:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=4ef9f883-01ee-4db3-82ee-e44befbd60ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:98:b8:e3:82:73:dd:7d:9d:d1:4c:3c:9d:69:
                    3b:42:9a:48:a6:c0:13:b9:7c:35:aa:41:80:28:4e:
                    65:5b:8c:b6:90:9b:55:84:fe:07:86:b2:64:46:ae:
                    52:6b:d2:0a:96:02:33:8a:cc:da:03:3d:cc:07:7a:
                    56:1c:db:57:1a:5f:cb:b3:88:c9:2b:67:a8:a8:07:
                    54:90:79:70:f7:61:e9:b4:34:9e:03:eb:ea:92:fe:
                    37:8a:ad:0c:0f:60:1c:c8:f9:4d:14:c4:7d:c0:7a:
                    c4:98:43:dc:58:a3:f1:24:f8:14:05:b9:3e:23:56:
                    fb:c7:28:85:8b:6f:08:2b:d9:9e:8d:03:91:9a:99:
                    bc:9f:1c:52:83:fc:7e:18:30:27:30:80:c7:38:29:
                    70:fe:f3:4a:ed:31:05:3e:69:24:5f:d0:15:68:56:
                    57:33:5a:8e:8f:dc:3e:b1:90:22:b1:c6:c4:81:d2:
                    b9:4b:8c:24:e9:17:58:82:b1:91:42:03:94:9f:e6:
                    e9:de:bb:a1:21:3c:72:a5:39:81:23:b7:6e:08:f9:
                    0c:7f:8c:68:8e:81:09:65:7f:83:8a:4d:f9:0e:6d:
                    11:dd:75:07:0d:bd:eb:2a:c9:c0:d2:60:22:7a:d0:
                    dd:6d:ec:01:60:d5:6b:e3:ae:76:81:94:10:54:48:
                    b5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:72:F4:D3:E4:74:6A:BD:46:46:27:7D:BC:2C:C1:33:94:96:27:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/7d6e522a-4850-3d5f-9b82-69c78e20a35e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:d1:b2:ce:49:1b:bb:98:68:4f:01:11:05:14:1e:cf:b3:a8:
         f4:44:ab:dd:16:78:e1:5e:ee:ad:32:5e:4d:03:af:b8:23:cd:
         77:e6:a5:38:6a:e4:bb:81:71:ed:7d:24:b8:7d:c5:55:a7:20:
         ca:44:e7:9a:00:4e:36:37:4a:2a:06:13:c6:ba:96:6d:ef:2e:
         32:10:20:1a:1e:33:c4:e3:e3:e8:45:d5:08:48:13:23:65:1f:
         fd:29:b4:7a:53:8b:ea:8b:a8:e0:3d:28:af:24:d5:e0:43:4b:
         91:b8:44:ec:07:6d:6d:79:a6:de:6e:91:3e:4c:85:99:a1:de:
         d6:cf:26:a2:f7:22:9c:c6:1c:5e:1d:c2:27:c7:e6:ab:75:26:
         eb:1a:9c:1f:ea:22:cb:32:c0:e0:a5:17:02:61:1b:a5:37:27:
         18:ff:aa:18:26:1e:d2:22:7e:2e:db:eb:bc:f5:24:80:24:86:
         99:22:d2:11:ea:f7:6b:f4:51:fa:4f:93:65:4f:cf:46:3b:ca:
         a6:e0:a5:9f:14:37:6d:21:15:91:94:5f:f2:ae:a9:30:b9:6b:
         4b:75:aa:f9:7a:ea:f6:14:bb:79:71:c3:2d:d6:80:dc:9c:e3:
         4a:c9:40:c0:ac:fc:be:2f:9d:88:c5:b9:be:38:a5:c1:5a:9b:
         89:d8:9c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----