Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/994ad8b4-2f86-3562-bdea-cf6c2e770ed8.roa
File:                     994ad8b4-2f86-3562-bdea-cf6c2e770ed8.roa (raw, json)
Hash identifier:          74nPVrbRZQ2VEIAxdkMrqtjX3bLUVGx6eSExi0ap6Go=
Subject key identifier:   AE:8E:E3:94:99:17:02:70:68:78:35:35:05:E7:43:38:50:41:1C:3B
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584309EF2EAC7AE541E24AF2FF00
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/994ad8b4-2f86-3562-bdea-cf6c2e770ed8.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        208.117.231.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ef:2e:ac:7a:e5:41:e2:4a:f2:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=c11af729-da20-45a5-a2f3-12d6f6c14b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:25:a3:56:b5:f6:e0:b0:97:11:18:a7:b5:17:
                    66:6f:ac:81:38:79:63:61:3a:41:3a:c7:2f:87:91:
                    74:c6:2f:e6:2a:bc:df:55:98:b0:84:5d:96:47:af:
                    45:5c:c4:04:b3:97:9b:65:5d:19:0c:51:64:36:7a:
                    85:14:d6:da:ec:a8:d7:f0:51:43:b7:7c:fc:f7:1a:
                    c9:c8:d2:a0:4c:b6:c6:cb:2d:ee:ff:b9:2c:78:a9:
                    10:4a:e7:52:dd:0e:39:7b:a1:d1:56:5d:2a:2f:33:
                    cd:38:4e:4b:a2:9d:2a:54:d4:23:45:d4:99:24:70:
                    d6:d8:96:70:96:93:06:e1:63:10:f4:ff:9d:bb:44:
                    7e:5e:ea:76:07:9b:3a:38:f7:35:55:85:95:e4:eb:
                    eb:e4:69:40:a1:ef:ba:d0:69:7f:bf:11:c7:60:0d:
                    8b:47:01:f2:43:a7:73:05:e1:cb:e6:61:e4:22:3f:
                    f8:1c:53:2a:52:20:dc:36:d4:bb:56:00:c2:e1:7b:
                    c3:2d:7d:25:70:ae:e0:9a:43:f8:18:bf:fb:e0:5b:
                    6a:76:da:4e:97:83:f3:61:e1:b6:1b:30:82:35:50:
                    36:b2:50:54:df:3d:e1:55:ac:d5:1e:04:15:f9:b9:
                    59:c3:64:c8:63:94:6e:59:93:91:99:13:72:a3:af:
                    ac:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8E:E3:94:99:17:02:70:68:78:35:35:05:E7:43:38:50:41:1C:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/994ad8b4-2f86-3562-bdea-cf6c2e770ed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ad:07:c2:5f:0a:22:69:ad:1e:46:99:c5:12:e3:59:b8:bd:
         b4:79:e2:68:c3:c1:48:71:b7:de:c3:e6:b8:cb:27:05:24:a2:
         f4:b4:e8:49:c1:4e:29:3e:eb:9f:15:bd:d4:e7:07:b0:55:7e:
         a6:c0:15:bd:1c:a9:15:f6:a4:f1:50:c3:1e:4a:34:bb:cd:45:
         8f:ab:70:08:82:f4:34:cc:ed:4e:c4:ac:93:44:8f:c1:3a:cc:
         c5:82:ad:9c:d7:d6:fc:5e:23:f9:50:c3:7a:7d:c6:6d:47:ec:
         d4:86:7f:7f:2e:2d:12:6b:2d:b1:08:e6:e9:1e:8a:ba:a4:00:
         a2:da:7e:61:0d:1f:12:0f:52:2d:96:08:7a:2c:8c:f1:a9:14:
         84:bd:ed:d3:1e:d0:2c:e5:b8:3d:2a:63:98:9d:b4:28:45:ef:
         e1:0b:1f:3e:28:f8:1f:e6:a4:a8:0f:8c:d4:69:59:98:67:32:
         5e:30:d8:ba:e2:8c:33:60:5c:17:44:67:bc:11:46:34:64:9d:
         a0:a5:67:4b:a7:d9:d1:cf:52:3d:b5:d0:c7:71:c1:ea:62:56:
         4c:ce:88:3c:85:ab:ca:5e:65:84:8a:61:87:22:ea:33:5f:9c:
         be:61:5e:12:d5:bb:a0:d4:8f:d1:eb:5a:36:9e:f5:47:c0:8e:
         22:f6:c4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----