Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d95f0f0d-92c0-323d-87e7-a9292108b68d.roa
File:                     d95f0f0d-92c0-323d-87e7-a9292108b68d.roa (raw, json)
Hash identifier:          aqlGcAco0bRDXF5ypbW340+naASwn792JeublFAERqU=
Subject key identifier:   74:EC:C9:E2:4D:FB:0B:F1:A6:A2:A9:F5:D0:1F:D9:28:81:8B:F0:66
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858430A0F82D19059A3EA26DBDBC0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d95f0f0d-92c0-323d-87e7-a9292108b68d.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        104.237.168.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0f:82:d1:90:59:a3:ea:26:db:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=26db21be-bec9-45dc-a11c-77b16921b877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:04:24:82:ba:00:94:72:4a:1a:b6:8e:65:01:
                    0f:50:06:0f:61:19:02:86:01:0f:fb:53:9c:a2:a6:
                    44:83:3a:2c:27:55:f5:e8:72:5d:bb:8b:46:5e:78:
                    c2:52:ed:5f:f4:b6:3f:fb:45:b8:44:e0:b3:15:1a:
                    f6:c7:e3:0e:4c:38:6f:1a:e7:81:ab:d5:ab:d8:3b:
                    19:39:6e:e2:1f:53:3a:50:e7:14:f1:a8:3b:07:7c:
                    63:c0:55:0e:f1:6c:58:fd:de:33:6e:04:07:44:7a:
                    bc:69:de:0e:78:ca:47:57:97:62:89:48:26:df:4e:
                    79:dc:22:f6:b1:a6:14:2a:23:45:cb:7c:e5:25:96:
                    ee:55:90:1d:f2:f1:36:ea:d9:4b:60:92:d9:5a:b9:
                    e1:70:af:6c:71:aa:d2:ca:c0:f4:94:55:67:d6:5a:
                    35:02:ef:52:f0:be:e4:7a:d9:7f:4d:99:e5:28:78:
                    91:bd:41:87:80:a6:7b:08:1c:20:43:d4:18:6b:2d:
                    da:ee:72:ad:99:f0:a2:5a:31:ea:aa:d0:f8:07:21:
                    d1:b7:61:ef:94:ba:97:30:32:3f:6a:6a:7d:38:30:
                    d3:c8:51:ff:63:68:da:f7:3b:3d:a6:d6:6d:da:30:
                    f1:39:c8:4c:a7:31:ba:92:fd:6b:f9:f0:f5:21:d1:
                    2c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:EC:C9:E2:4D:FB:0B:F1:A6:A2:A9:F5:D0:1F:D9:28:81:8B:F0:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d95f0f0d-92c0-323d-87e7-a9292108b68d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:af:d5:8d:8a:7e:cb:c1:6e:80:59:e3:1a:13:3f:60:0e:2d:
         5c:83:91:b4:3d:3d:e1:b8:12:ab:ed:d1:5a:28:61:76:e3:70:
         89:ed:19:a9:83:b4:2f:4b:e7:f0:db:3e:44:46:b0:76:89:e9:
         fe:fc:5e:3d:9b:dc:38:80:53:8a:59:9c:d6:09:71:f0:ee:b2:
         6f:32:17:34:c7:ef:e0:10:30:45:d9:f8:6a:c9:7e:bc:33:55:
         aa:ec:8d:b1:39:81:fa:d7:f4:7a:fc:aa:37:65:7e:7c:8a:c4:
         7b:34:02:3d:38:cf:31:07:55:31:1d:01:25:fd:c0:e2:fb:28:
         4f:8f:83:fa:18:66:d4:65:3c:f6:57:23:fb:e2:7a:9e:49:c6:
         b1:c4:f9:f0:45:34:8b:74:6f:d9:05:73:c0:31:54:6b:d2:b6:
         55:33:85:2d:a6:d4:4d:5f:cc:a1:bd:40:79:66:0f:8e:bc:fc:
         9a:24:ab:b9:98:48:dc:9f:6b:80:ad:b2:d0:69:3e:d3:32:d1:
         87:5e:64:3c:e2:4b:5b:f7:61:e8:32:eb:42:0f:5e:d0:16:3d:
         71:35:3c:12:13:c7:d0:4f:5f:d5:3a:8f:19:5d:a8:67:e7:ff:
         02:a0:af:1f:4e:7f:19:b3:d0:5e:9f:e4:d4:30:7b:91:e7:62:
         90:11:55:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----