Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a1fefd2-8011-339d-b56b-f47297fdeb1a.roa
File:                     3a1fefd2-8011-339d-b56b-f47297fdeb1a.roa (raw, json)
Hash identifier:          oIdXyxPZslVqeITNVb2yjyu+h1d+2C4bPvGyKf7CD20=
Subject key identifier:   F7:54:39:28:08:9C:AA:A7:73:3E:05:C5:18:F9:5C:5C:CC:FF:78:C6
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A23A5E520516E8F62CE3A80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a1fefd2-8011-339d-b56b-f47297fdeb1a.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        108.177.121.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:23:a5:e5:20:51:6e:8f:62:ce:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=7d06cc6c-f339-47ab-90e0-e12bb7bc1ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6a:62:b6:bd:68:95:46:71:84:66:df:f9:ab:
                    67:76:49:66:d2:a4:51:7d:a5:fc:ea:18:05:19:b3:
                    28:d6:7f:96:37:a9:36:ac:ef:2c:bd:09:d8:74:a0:
                    ea:00:72:d9:66:e6:9c:80:d7:73:34:c9:d5:9c:af:
                    f6:fb:e4:5d:9a:da:6f:ea:b4:7e:e0:12:25:68:4b:
                    67:25:92:7a:71:5d:d0:b3:b9:19:f1:c1:a3:44:a4:
                    1c:45:a3:37:18:67:6b:eb:a5:ed:ec:7e:43:ea:9f:
                    5f:ee:98:ff:86:7d:fe:53:34:d6:b6:12:3a:ef:8f:
                    b7:fe:0e:df:9d:84:d4:9f:7c:63:b9:7c:1e:69:87:
                    14:53:39:72:56:a9:53:a2:cf:36:49:6c:84:7d:73:
                    86:b5:23:a8:9f:60:a8:de:34:c3:53:ec:f4:7e:43:
                    9a:36:f8:ea:f0:73:6c:17:ae:9c:2c:ad:bb:64:11:
                    90:58:c7:81:2b:11:7e:02:e9:39:7c:6d:62:9a:1c:
                    c7:55:05:13:27:6c:cc:ec:ab:33:1d:a2:ac:14:4f:
                    96:19:ad:de:f1:79:5d:4c:4d:73:e2:c2:89:70:5a:
                    50:20:03:58:14:3e:da:c0:ad:e2:b5:53:de:84:af:
                    c6:1c:e0:dd:af:84:1e:5d:8e:10:60:48:14:da:a9:
                    a7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:54:39:28:08:9C:AA:A7:73:3E:05:C5:18:F9:5C:5C:CC:FF:78:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a1fefd2-8011-339d-b56b-f47297fdeb1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:e8:55:ee:40:1a:f2:dd:04:d9:61:11:35:91:48:32:a9:05:
         85:8f:38:ac:a1:70:c9:41:bb:f3:7a:e2:1d:7c:15:2a:83:cc:
         61:52:a7:74:20:9c:d4:16:4d:e3:c5:c1:bb:ad:c5:b4:7c:e5:
         2f:23:5a:dd:e4:d6:f1:c3:f7:1e:7b:09:ed:09:7a:14:a0:3a:
         be:66:83:0c:54:00:f3:89:51:85:b0:28:aa:4b:8d:1b:18:ba:
         d8:a9:61:a5:7b:56:1d:24:61:20:d6:85:6a:bf:10:c0:57:a6:
         47:60:9c:85:2d:8b:25:c1:ea:ac:89:1d:a9:4d:6c:07:2f:a8:
         ba:e8:ea:e5:bc:fe:46:9f:cc:f3:cb:01:9e:5c:e2:04:14:9b:
         8a:1e:05:41:4d:30:02:51:9d:99:46:85:34:31:cb:ce:44:b3:
         f5:13:d9:08:3e:ff:03:27:23:c3:bc:ec:57:6d:0a:1f:e6:b6:
         8b:42:27:f8:94:53:13:de:c0:3f:ce:f4:af:a3:29:11:cf:12:
         6d:e9:ee:52:1d:4c:c4:4f:47:27:31:50:ca:18:57:57:b1:1f:
         f6:3e:13:2e:ac:6f:ec:c4:cc:41:e3:01:ff:d7:2b:fc:bf:b0:
         21:f8:ef:8c:4b:ec:d4:73:79:41:e5:c2:39:29:4a:b6:fa:b7:
         da:5e:2d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----