Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d72a0de-d977-37c2-8e09-b98637059d87.roa
File:                     1d72a0de-d977-37c2-8e09-b98637059d87.roa (raw, json)
Hash identifier:          hvfNNuvYhUuwgFNIkdkycUiK6OIDX/SIjgBha00tEzY=
Subject key identifier:   C7:7D:6B:D9:D5:A7:E8:06:CF:A1:E5:EF:7A:A5:70:FC:B9:83:44:7E
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A2005B876FC8DDD2F03EFA0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d72a0de-d977-37c2-8e09-b98637059d87.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        74.125.206.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:20:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:20:05:b8:76:fc:8d:dd:2f:03:ef:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=e38667ea-9a81-4b85-88fb-fb1768db1601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9b:ae:31:1c:cb:f5:d4:f7:a2:86:0f:92:df:
                    ef:1e:32:ca:62:16:d5:6a:03:5d:a2:b1:06:e5:dc:
                    e8:b7:4b:bd:e1:c7:88:03:21:31:51:d9:91:98:59:
                    7e:70:d0:65:f4:64:ec:a3:87:55:1c:9c:54:0b:92:
                    79:cb:fc:c4:10:da:f4:4d:74:83:2f:de:59:03:4d:
                    83:fe:e9:9e:65:85:72:85:1d:a1:c1:95:2c:83:52:
                    8b:5b:c4:31:4a:11:68:26:5f:fe:85:e6:48:bc:9f:
                    e7:a0:89:45:14:0a:37:5a:29:8b:e2:5a:f3:c3:01:
                    f2:c0:6f:54:98:e5:4f:64:13:5d:31:3b:05:28:bc:
                    e8:05:42:6f:fc:08:78:76:3f:23:8c:51:54:f0:5e:
                    e1:d1:64:80:2d:e4:6c:39:0c:c7:df:f8:eb:cc:c7:
                    a4:38:93:93:40:d2:31:d7:cc:3c:91:53:44:43:7b:
                    e1:5b:1c:bd:84:ad:e9:0c:17:64:28:21:20:64:7f:
                    10:2b:97:1f:58:45:67:4e:24:05:a0:b3:d5:ad:39:
                    73:15:73:88:18:7c:b4:2f:13:bc:28:be:51:04:36:
                    94:f0:42:65:17:d9:3b:38:83:e0:cb:06:5f:7a:7f:
                    d0:db:1d:96:f4:2a:7e:f7:3b:cc:57:67:33:3c:05:
                    e7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7D:6B:D9:D5:A7:E8:06:CF:A1:E5:EF:7A:A5:70:FC:B9:83:44:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d72a0de-d977-37c2-8e09-b98637059d87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.125.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:5c:37:a9:24:62:fb:42:4b:c0:83:58:44:d8:e0:c1:64:b7:
         b2:92:51:64:f6:3e:b0:95:80:dc:46:da:c0:02:54:69:e4:c7:
         91:f8:63:95:34:b3:35:3d:fd:fd:77:8a:54:89:73:4f:39:1c:
         b8:4b:b1:dc:91:52:f2:e0:d2:d3:f2:77:09:8e:f1:40:9b:d2:
         54:35:e1:6e:4c:10:72:90:72:15:7a:29:80:c6:af:05:af:ca:
         34:eb:bd:38:7d:13:05:db:03:d9:f7:77:4c:ed:db:6c:86:1e:
         19:f4:18:0e:fd:7d:eb:8b:37:29:2e:3c:03:28:18:72:8f:b8:
         7e:e3:97:6c:bf:3d:47:a6:44:51:32:42:a9:2c:2f:bc:d7:d8:
         ea:f9:7c:7a:95:0b:d7:fd:76:bd:e4:8f:31:88:06:b0:1d:8d:
         49:ac:74:d6:a8:0a:9b:60:00:e5:de:d0:82:36:39:78:5f:42:
         32:98:43:4e:dd:b4:20:24:40:78:00:55:63:3b:38:1c:6c:7e:
         2f:82:43:2a:bd:a7:e4:74:3c:2d:ee:5c:9e:52:df:39:77:2b:
         7b:d8:34:70:fd:07:fb:f6:92:90:32:83:c7:85:bf:f2:42:67:
         07:bd:09:4f:87:a3:6b:90:b3:78:a1:ef:d4:45:d5:9d:d5:a1:
         24:8c:76:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----