Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9df797cd-29f7-3d15-b3bf-19a8e5dfa3d9.roa
File:                     9df797cd-29f7-3d15-b3bf-19a8e5dfa3d9.roa (raw, json)
Hash identifier:          eWUL2FmVyTA6c8/AlmJZMKJhpeqWUASc9pyqcnK0LoI=
Subject key identifier:   7E:69:8A:EA:90:95:5C:D6:C6:75:EC:0E:E2:47:A4:C6:E5:30:33:FB
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858430A23FBD0E98160F74D4A3400
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9df797cd-29f7-3d15-b3bf-19a8e5dfa3d9.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        208.117.244.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:23:fb:d0:e9:81:60:f7:4d:4a:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=1a5b946b-a6e7-4c49-9dc3-ed945388ad0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:24:ad:41:6d:13:7b:cb:ff:ef:48:ea:c4:3e:
                    9a:52:01:4b:9e:b9:6c:51:da:a1:cc:d1:9b:07:e5:
                    33:e6:53:52:c8:4c:c1:59:72:e5:74:84:e3:38:0d:
                    74:df:77:d6:fa:b1:21:f3:8f:a3:bf:af:91:65:57:
                    76:35:14:8e:40:4f:fa:8c:09:c4:2d:9a:86:b7:1c:
                    66:dd:70:d8:17:0a:8c:5d:41:01:89:2e:73:43:28:
                    6f:9b:5d:c4:57:3a:5b:c1:d7:0b:d0:c2:bc:91:ab:
                    30:4e:51:35:eb:51:60:c4:8e:53:91:d8:d0:6b:3e:
                    0b:da:c6:e2:ce:9e:cd:9e:af:8c:fa:d1:a0:11:43:
                    2e:89:28:55:7f:69:08:73:50:e4:d1:f0:ce:37:e5:
                    71:9b:84:50:21:c8:44:00:ee:e1:0c:aa:fb:3c:d5:
                    e8:14:7a:27:e3:f0:46:be:d0:d9:3a:59:cb:d4:42:
                    40:37:a6:41:af:90:59:c3:96:db:37:fb:1c:e8:a2:
                    9f:ab:71:bf:bd:80:6e:76:af:7b:58:94:1f:e8:25:
                    d3:e1:c6:b3:e3:7d:f6:66:49:60:56:37:07:0f:45:
                    65:5c:d8:be:9e:e9:48:e3:9b:93:10:11:ce:cf:29:
                    19:80:09:ee:d7:b9:8b:e2:64:88:78:f8:1c:d1:0c:
                    13:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:69:8A:EA:90:95:5C:D6:C6:75:EC:0E:E2:47:A4:C6:E5:30:33:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9df797cd-29f7-3d15-b3bf-19a8e5dfa3d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:6d:d6:5c:1b:08:a4:63:70:a2:d7:75:ce:91:d6:5c:be:56:
         3e:33:47:c2:14:a9:db:a1:f4:8b:7a:68:e7:80:14:ab:e9:bc:
         44:cf:d4:e3:74:b8:ed:2c:23:2f:35:84:73:f1:dc:00:96:55:
         e2:31:0d:d3:e5:ec:3f:f4:fd:a4:9e:00:62:05:3c:c5:f0:9f:
         d8:94:e9:08:45:82:ee:6a:dd:b9:38:97:45:3d:7b:60:c6:71:
         a0:31:a4:0b:1f:a4:30:a8:17:69:3c:e5:f3:36:58:ba:3d:83:
         b3:e9:cf:76:ac:16:fa:c2:06:a8:06:d6:7a:5f:e9:6f:e3:02:
         d9:da:ed:36:3a:43:ab:56:55:9c:d8:31:b1:bd:bc:a3:c9:82:
         a2:b1:b7:04:72:08:7f:b2:89:bf:37:f2:ac:7c:f6:24:04:14:
         62:96:73:b3:a6:06:3f:44:7a:98:80:b6:4d:42:55:bf:8e:ca:
         d1:60:6b:86:58:47:d2:9b:8e:c1:3a:c5:b3:8d:43:e2:74:18:
         ee:6a:13:a9:b0:44:d2:f5:64:ee:b8:c1:e0:2a:66:05:90:fe:
         f0:d2:f2:b0:2c:f1:f7:5c:54:d8:95:c3:0d:bc:35:56:34:d7:
         73:f0:ef:b3:ac:54:c9:d1:ee:9d:a3:df:7c:aa:15:09:fa:73:
         de:d7:02:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----