Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a0cd50f-c91f-3bb2-aa33-daa5600bf42d.roa
File:                     3a0cd50f-c91f-3bb2-aa33-daa5600bf42d.roa (raw, json)
Hash identifier:          UVVCobvuEcu7bTTzZRthxOikRlcKne8UIfxb5NRfTMU=
Subject key identifier:   B9:6B:FB:CF:35:BE:0F:FB:55:C8:41:9C:5A:70:16:57:5C:6A:D3:33
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584309F094D0648859874E9BA680
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a0cd50f-c91f-3bb2-aa33-daa5600bf42d.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        216.58.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f0:94:d0:64:88:59:87:4e:9b:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=9b76f27a-fd52-405a-92c0-69064c7cc7a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:24:b2:73:29:e9:70:0b:b2:4e:f0:e7:3a:a7:
                    a2:7d:4c:ae:f2:7d:4c:89:d4:87:79:4f:83:a0:bc:
                    78:d8:bd:89:73:d7:2b:08:43:67:cf:69:d4:c9:1a:
                    f6:47:f1:7b:70:6b:2e:5b:d8:76:01:d8:3f:82:c0:
                    1a:c1:52:f7:3e:77:8b:d0:7c:f2:c1:df:d7:63:82:
                    fb:14:37:f7:9f:90:df:9e:db:3c:37:2c:34:0a:4b:
                    bb:75:29:d6:6e:47:c4:5b:91:fc:1b:09:ef:41:7e:
                    f2:41:ac:88:1f:ac:64:a5:b0:2d:d4:ca:36:fa:ea:
                    3b:a5:5f:5d:ed:8a:19:cd:00:41:0c:9c:c1:41:0a:
                    38:58:ec:a6:52:12:05:f2:be:b2:42:51:e8:f1:92:
                    89:91:dc:ed:88:33:c3:46:81:12:41:98:42:ef:66:
                    6c:f7:4b:c0:ba:bc:03:c5:11:68:dd:e3:fb:b1:17:
                    d3:c5:11:a5:7b:9e:bf:e3:01:55:e1:26:67:5e:f8:
                    81:41:e7:08:49:91:9f:23:10:70:18:8c:fa:44:9e:
                    b5:cb:7a:85:dd:37:6b:22:9f:42:7c:2a:05:98:9d:
                    fc:7d:c7:ce:50:17:ac:89:83:73:d9:05:72:d8:e0:
                    33:c7:f1:0f:39:98:ed:52:e6:5b:ea:98:6f:b2:36:
                    06:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6B:FB:CF:35:BE:0F:FB:55:C8:41:9C:5A:70:16:57:5C:6A:D3:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a0cd50f-c91f-3bb2-aa33-daa5600bf42d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.58.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:51:df:d8:2c:6c:69:95:63:41:88:a1:37:58:4c:af:2c:6b:
         0c:2b:9f:73:2b:b1:a6:83:1d:09:2d:2a:54:8e:65:eb:4a:60:
         45:ff:c7:3c:1c:16:5a:30:e6:04:ca:5b:1f:7f:a4:8d:04:3b:
         3f:11:9c:50:5b:25:5c:84:28:6d:d3:31:cc:0a:3e:72:23:57:
         6b:1a:9e:e1:b8:7d:c9:aa:f6:bd:a8:3a:97:9d:4d:06:32:b0:
         96:87:6b:b2:ba:fd:ca:7d:b0:e8:63:72:64:d6:0f:eb:2d:50:
         a0:f9:f4:13:56:21:14:da:e2:4e:d0:49:83:46:4f:48:f2:e4:
         e2:5b:be:59:bb:d0:71:f2:36:96:5f:97:e9:b3:79:2d:ca:5e:
         51:8a:3c:59:6a:c4:93:e5:cd:42:06:e1:a8:5f:3a:ae:e0:c1:
         a8:9c:38:98:14:28:d3:bd:a6:99:45:68:b8:58:75:d6:6b:61:
         35:3c:82:3c:fa:4a:cb:8e:9b:c3:06:4b:72:c6:f1:e0:ae:50:
         38:fc:0d:08:3d:71:4f:28:ee:17:75:1d:76:55:cb:ee:d4:c1:
         74:c9:09:b2:cd:4f:7d:7d:70:1c:b3:ae:4f:33:2a:bd:24:34:
         df:48:30:2b:25:18:60:58:eb:91:5b:4f:6b:87:61:50:51:cf:
         06:ea:14:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----