Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1f1b623f-4c33-371d-b6d2-b8436ab0bf24.roa
File:                     1f1b623f-4c33-371d-b6d2-b8436ab0bf24.roa (raw, json)
Hash identifier:          XCNMb3SFIAhbWoaFBJJAC8hD2t9JyhskI16t2YLd7Rw=
Subject key identifier:   2B:92:B5:05:DC:A7:2B:EB:69:70:AD:D5:4E:5D:89:D1:29:8F:5C:D3
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584309EB6F445274E74C01E880F0
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1f1b623f-4c33-371d-b6d2-b8436ab0bf24.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        209.107.182.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:11:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:eb:6f:44:52:74:e7:4c:01:e8:80:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ae21daa3-52f1-4ace-b408-4874c1f92911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:10:c3:b4:43:fc:1d:1b:e4:0e:e6:39:e1:af:
                    55:23:aa:8b:e9:e9:b5:71:e6:85:12:ef:28:e3:ec:
                    eb:16:b1:63:c8:84:03:ae:de:7f:9d:1a:6a:13:4c:
                    76:c7:ff:0c:ca:78:a7:0b:b4:a5:33:23:5c:d6:0f:
                    2d:5b:d8:6b:73:5a:c4:f6:81:da:f6:8b:70:43:10:
                    64:ad:ef:d1:50:1e:f3:31:e9:56:46:ae:0e:e6:ad:
                    1c:10:76:d0:cd:b8:8c:3b:ac:e6:ad:1f:fe:8f:b4:
                    f5:93:c2:4a:72:bf:ac:ab:aa:46:9a:3d:28:ea:d4:
                    d8:c1:2f:10:89:44:e6:cd:1c:5e:05:8e:65:d1:b7:
                    37:14:d1:d9:2b:81:9f:9a:7b:9e:38:c3:05:50:03:
                    90:68:8b:4a:fb:49:06:56:84:2f:2e:22:9a:82:13:
                    70:29:0a:61:f7:39:5c:88:14:f0:2c:20:24:61:80:
                    e9:3f:94:9e:9f:2b:d7:c9:d9:20:14:cd:91:ff:9b:
                    f4:f3:d9:1d:64:86:6b:57:2b:31:21:ea:2d:b0:1d:
                    f8:37:e2:5c:c2:84:70:bc:ba:31:38:bc:ec:01:cd:
                    2a:c7:fd:5a:d6:40:85:87:1e:f4:2d:f6:ef:86:62:
                    67:f8:03:a7:6f:b5:91:63:10:2d:b5:14:f9:40:4e:
                    8d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:92:B5:05:DC:A7:2B:EB:69:70:AD:D5:4E:5D:89:D1:29:8F:5C:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1f1b623f-4c33-371d-b6d2-b8436ab0bf24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:a9:d2:e5:34:07:b1:8c:54:b6:5a:d4:4c:2b:16:e0:98:6e:
         94:b6:65:85:17:71:87:f2:a2:89:a8:53:3c:76:ec:3f:5c:b7:
         e1:af:86:a6:31:9f:3e:11:4f:8d:6b:1b:0e:41:8c:f0:33:2b:
         0d:4c:59:4f:22:f4:0b:10:a2:35:50:d5:1e:2c:cd:83:67:6e:
         56:2b:a4:4c:7c:26:3c:7e:db:17:20:f3:f3:0e:ac:c9:8d:9e:
         2f:0e:51:d7:1e:9c:55:28:cc:0e:99:4a:87:df:e2:32:6b:97:
         bc:a2:13:7a:6e:fd:66:cd:ab:b4:ac:92:c1:51:86:08:e7:33:
         a7:bf:43:b8:7a:9f:bd:c5:f8:35:30:f4:87:21:15:74:6d:40:
         9f:ff:ec:6c:37:bc:ec:e3:b4:17:8b:0b:3d:18:52:5b:0d:b6:
         70:e1:28:0e:e4:b9:87:87:b5:0a:a4:c5:30:32:cd:b3:c6:4a:
         51:d9:51:c4:57:88:1f:e8:4d:c5:be:1a:24:37:55:53:6e:c2:
         c1:5c:09:7c:45:c6:e8:68:4f:94:55:ac:37:32:5e:57:8e:12:
         95:9a:96:3d:b6:9e:98:a7:57:dd:da:2d:b7:f9:2b:f4:c2:75:
         7c:32:f1:53:ac:c6:48:39:47:81:0c:a2:3e:d7:6b:2b:40:ea:
         a8:77:e5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----