Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/dfb906e2-9f6f-336b-b0ac-52033d9cc58c.roa
File:                     dfb906e2-9f6f-336b-b0ac-52033d9cc58c.roa (raw, json)
Hash identifier:          9CuCePf3+ka83MeIyzUjBxf3H0lf7nldzvms6+pjgQY=
Subject key identifier:   63:F0:BA:D9:A8:07:F6:FD:F3:EB:9B:4D:48:22:A1:9F:57:AC:F2:A9
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584309FDA233CD41F0116BBF0B80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/dfb906e2-9f6f-336b-b0ac-52033d9cc58c.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     43515
IP address blocks:        208.117.224.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:23:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fd:a2:33:cd:41:f0:11:6b:bf:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ef439006-5137-4ef5-92a1-9a554177874b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2d:8f:40:1a:91:57:f1:54:eb:c0:6e:40:8f:
                    12:82:bf:db:4f:c5:8f:34:ae:ed:9f:ca:7d:da:83:
                    b0:4e:96:e1:50:2c:83:d4:75:ce:47:e0:f5:9c:3d:
                    c0:27:3c:7e:9d:88:c3:24:b5:e5:2f:c2:c8:6e:1d:
                    c1:36:1c:c8:d9:44:33:c1:7f:85:5e:b9:91:1b:3f:
                    eb:51:58:1e:64:7f:aa:6e:01:39:4e:08:de:48:d9:
                    b7:7d:5b:80:6e:0d:bc:3f:3d:60:2b:45:ce:c0:d5:
                    c9:27:e1:ee:fd:ce:4a:81:76:a6:f0:06:2e:a9:13:
                    14:a9:d4:ee:49:1f:42:d0:a7:43:95:c1:3a:89:5c:
                    d7:cd:b6:9f:5f:d7:aa:16:a6:9f:79:f0:30:38:da:
                    28:53:63:f3:09:7e:ee:77:80:14:9d:22:af:8f:a3:
                    f0:07:07:1f:12:16:77:f5:19:a9:ce:80:87:7e:19:
                    7a:1d:3b:90:73:7c:69:0a:7f:39:6f:e7:0b:79:d6:
                    ef:e6:21:b5:80:a4:71:af:f2:a4:cc:c3:60:49:c4:
                    96:67:23:e1:81:3f:a8:c0:fb:2f:9e:f4:e5:c4:62:
                    fc:af:13:9b:9e:2e:01:15:6b:81:c4:33:6f:68:04:
                    05:b6:df:63:d6:a2:e4:0f:6a:b4:92:8c:e9:0e:ba:
                    8a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F0:BA:D9:A8:07:F6:FD:F3:EB:9B:4D:48:22:A1:9F:57:AC:F2:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/dfb906e2-9f6f-336b-b0ac-52033d9cc58c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:3e:bf:4c:b2:76:3f:6b:3f:52:ab:3a:37:6e:27:a9:4c:9a:
         3b:41:cd:b0:a9:17:6e:4a:c5:b5:17:43:13:f3:6e:ca:4d:f1:
         b4:4d:05:45:1a:95:72:bb:bb:fb:21:86:2b:c5:61:b2:92:e6:
         3b:df:4f:02:3c:d8:08:26:37:c4:0d:da:98:ed:95:1e:46:cf:
         93:fd:8c:47:c1:fd:87:e0:ea:5c:1c:71:bc:b7:70:b5:48:45:
         90:1d:48:7f:48:d9:96:e0:79:7e:f5:f8:4b:9e:dc:fb:42:5f:
         20:03:ea:01:d1:f1:e9:f8:2b:f9:f6:c2:02:65:18:c3:90:3f:
         70:5e:9f:4b:39:f1:a4:e9:ad:c7:44:b0:b6:d1:fc:d9:0e:5f:
         e8:f8:1a:8a:26:db:51:55:51:36:61:d0:97:7c:fa:2f:ee:9b:
         1b:eb:ee:c5:5a:ae:b6:47:c4:0e:2a:8d:36:51:b2:96:6b:47:
         1c:dd:55:58:8a:fb:c3:1f:89:02:87:b6:ff:c0:20:84:84:a1:
         a3:ce:e0:d3:97:2c:35:2a:ff:37:d9:6e:76:70:5a:ec:30:24:
         03:45:51:05:fb:8f:02:15:2f:04:f1:9e:3e:be:c1:21:88:01:
         d9:64:95:83:29:f2:50:26:1d:4e:44:dc:84:cd:c7:8f:8b:90:
         48:45:53:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----