Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/e12cb7f8-f9fe-390d-8013-82e9a35a5a90.roa
File:                     e12cb7f8-f9fe-390d-8013-82e9a35a5a90.roa (raw, json)
Hash identifier:          xQigTbN9VXhU/w31QcILodLowun7hhSAm/WCJWlY8mQ=
Subject key identifier:   D5:8C:7A:2B:EC:5D:E8:ED:E2:C8:FE:77:3A:EC:B4:F1:AB:01:54:9F
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858430A166E5658ADE389ADEB84C0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/e12cb7f8-f9fe-390d-8013-82e9a35a5a90.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        208.117.240.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:16:6e:56:58:ad:e3:89:ad:eb:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ff606540-6794-4fea-9edc-50cd2670b7df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3f:a4:5e:4e:b0:f7:85:69:19:04:c1:0c:80:
                    64:05:05:87:23:41:64:98:e3:ca:f2:c2:aa:93:0e:
                    49:6e:b3:21:e4:02:da:29:82:67:ec:4c:59:b3:57:
                    e4:63:28:46:f7:2d:49:65:2c:be:e8:3f:73:50:2e:
                    53:76:70:a3:a6:3e:a8:e3:bf:d7:57:45:c5:75:ea:
                    df:64:28:13:36:a4:e6:94:c1:25:20:17:13:59:4d:
                    bc:53:c6:bc:f0:9a:f1:72:63:e8:dd:88:c1:75:64:
                    64:b4:ee:67:55:5a:47:63:89:b3:91:8b:df:86:f0:
                    ce:78:69:d2:86:f4:66:64:52:9a:53:01:dc:6d:bb:
                    1e:27:be:ed:24:df:61:20:c6:e5:26:4f:2f:29:93:
                    8e:32:d6:ed:f5:1e:32:42:f3:81:90:70:4d:16:9c:
                    e4:bb:94:e3:ce:a3:86:c9:a4:ee:61:32:9f:2d:c3:
                    32:1b:10:19:48:fb:61:91:a1:87:3f:69:a8:92:4c:
                    b4:76:95:3d:5a:92:44:13:ab:4c:bf:6f:0c:0f:a8:
                    0c:f9:47:6d:a2:e2:bb:a1:38:92:44:b7:6c:6d:e0:
                    90:38:4f:8f:5a:97:30:b8:c9:e6:be:5f:d2:4f:48:
                    c6:6a:55:94:9f:b9:7c:f6:40:7f:b9:7a:6a:40:bc:
                    d0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8C:7A:2B:EC:5D:E8:ED:E2:C8:FE:77:3A:EC:B4:F1:AB:01:54:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/e12cb7f8-f9fe-390d-8013-82e9a35a5a90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:e9:bd:dc:23:68:13:ee:da:8b:f8:7a:6f:d4:b2:41:a7:86:
         af:ea:ad:87:08:a6:e3:2d:0a:7c:e5:ff:65:5b:0e:89:2a:e3:
         ad:10:0f:13:ed:30:9f:e8:95:3a:80:99:16:7a:18:e4:bb:0a:
         7d:d9:95:38:86:ae:3b:0d:ae:b6:55:34:3c:d9:d7:e6:67:d4:
         58:5b:12:a1:72:6f:79:db:ee:64:55:b3:23:36:de:ec:1a:aa:
         d9:a0:bf:c2:61:f4:91:0d:d8:b4:60:0c:86:78:82:ef:b8:09:
         78:1b:fe:77:d7:a2:0f:6b:d7:34:c7:19:b1:7d:ec:da:cb:a2:
         6c:61:5b:ef:96:2e:ee:8b:3e:66:37:9d:fc:2e:9e:62:61:2a:
         e0:8f:53:8b:dc:24:42:a4:e2:7e:0e:f9:1b:e1:38:b8:2c:2e:
         2f:72:5b:4a:20:1b:86:02:3e:3d:14:49:28:6c:f8:b8:58:6a:
         35:eb:f1:64:17:f8:ef:0a:30:5e:24:d8:47:d2:1f:6e:f5:ef:
         43:d0:18:32:00:64:4f:eb:5e:b1:1e:1d:26:70:11:fc:f1:98:
         be:20:ae:e0:3d:4d:a3:19:22:48:0e:06:28:4a:dd:7f:90:3b:
         f5:6d:fb:02:69:0b:75:30:b2:be:1a:f5:7f:73:a5:2f:e8:88:
         43:a5:a8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----