Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/c4f73724-3fa9-3aef-b8ce-a3d68da1bae5.roa
File:                     c4f73724-3fa9-3aef-b8ce-a3d68da1bae5.roa (raw, json)
Hash identifier:          MzgmAXfXAYNCql2HggHD4A9DPVI25IhJTvNq16MXjIY=
Subject key identifier:   F7:B9:64:D1:95:3C:73:59:F2:22:46:2D:F0:7F:00:E1:5A:F1:75:4A
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584309EEE48C3087ABD3F4BE0A60
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/c4f73724-3fa9-3aef-b8ce-a3d68da1bae5.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        208.117.241.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ee:e4:8c:30:87:ab:d3:f4:be:0a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=e19386aa-1a46-4243-b923-8c0e7df2e676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:00:e0:83:52:05:99:02:e2:59:04:ee:6f:3f:
                    61:71:8f:1d:85:6d:85:fa:34:64:25:8e:44:cb:e1:
                    47:c9:b3:90:26:23:f6:aa:09:bb:ef:58:5f:25:3d:
                    be:ca:07:d5:bb:36:f2:65:17:0e:3b:a2:10:fc:b8:
                    58:f0:20:ca:df:48:c7:a5:1e:cf:97:a1:e0:3d:7d:
                    3e:5f:8a:8e:71:5f:17:86:0e:90:bb:67:ff:ac:7a:
                    e9:95:0f:95:8e:0e:66:49:b2:37:bd:f2:9b:bb:7a:
                    1f:bf:f0:c7:da:f2:ba:2a:8a:76:76:dc:7b:a3:27:
                    d0:6c:cb:07:9b:54:1d:b3:dc:f7:af:b4:3e:85:a6:
                    ef:6c:0c:48:cd:bb:3c:c5:bd:25:95:cc:b9:e9:ab:
                    66:96:e2:97:dd:b1:ca:44:aa:b9:eb:35:aa:a7:e1:
                    28:a8:46:d3:33:44:cd:80:2b:ab:c6:61:08:82:49:
                    ea:b3:a1:a5:07:0f:e3:bd:bd:18:78:90:75:60:8e:
                    41:b5:84:4a:6b:ea:c0:a3:ba:51:0b:de:f5:b5:87:
                    e6:88:87:ce:11:97:3d:d9:46:70:1d:2b:a3:eb:39:
                    e7:f4:b0:59:0e:29:78:da:f5:51:ef:2c:79:aa:45:
                    bf:2c:2a:ec:78:65:aa:89:f7:2a:1a:02:35:fb:89:
                    1c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B9:64:D1:95:3C:73:59:F2:22:46:2D:F0:7F:00:E1:5A:F1:75:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/c4f73724-3fa9-3aef-b8ce-a3d68da1bae5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:28:34:04:9a:cb:3a:36:e3:32:d7:de:09:86:e3:b8:b9:c1:
         eb:8f:8e:14:4e:3b:eb:87:a8:92:5d:d3:0e:3f:68:58:bb:11:
         4d:77:4c:a2:4a:14:ad:75:95:25:23:b4:99:27:a0:f3:de:3f:
         34:48:9b:ee:dd:1a:3b:ec:70:ec:80:27:09:6f:de:b8:cf:01:
         91:a2:5c:31:bd:fc:87:d6:0a:ee:27:ba:d8:d3:05:d9:2e:20:
         23:22:de:84:ab:35:0d:a3:7e:ee:44:43:f6:c6:9f:5f:20:29:
         1d:63:a5:36:6f:ba:c7:d3:f9:14:a0:3a:ce:27:ab:3c:ce:6b:
         c1:77:26:1e:f6:e2:07:af:f8:ce:9a:94:cc:32:87:33:34:b8:
         c7:d7:49:1f:c3:84:68:20:c0:99:04:84:85:72:1e:99:28:cb:
         95:2f:60:05:8b:31:bd:b6:2e:41:e3:a1:13:fc:1a:36:bb:34:
         73:e3:99:b3:9f:45:6d:07:de:b9:24:d7:d7:b2:23:ae:70:c0:
         d4:e9:05:29:d2:72:08:0a:84:8e:15:4a:49:a7:fa:96:48:95:
         7b:5a:a9:f4:8a:d2:96:2d:e8:dd:06:7a:fe:d6:cf:1d:71:5c:
         94:fc:62:e3:54:d5:08:55:e6:40:7a:6b:89:16:88:25:67:c6:
         60:8c:c4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----