Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e7b2570-789c-37d1-b09f-2783e75a61c4.roa
File:                     5e7b2570-789c-37d1-b09f-2783e75a61c4.roa (raw, json)
Hash identifier:          aBpUKXaqWvQeJqj5Bf4wWJnzAh6KH1Lt5iJ9atzbBOI=
Subject key identifier:   2D:9A:70:D6:F2:4B:90:3F:D5:1B:C4:41:6B:CD:9A:CA:ED:A8:70:A6
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A060FBEDCE6D3A7B91FF340
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e7b2570-789c-37d1-b09f-2783e75a61c4.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        209.85.232.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:32:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:06:0f:be:dc:e6:d3:a7:b9:1f:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ab42cabc-a779-4e68-8e34-026722cc930f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:34:ab:e0:b5:43:61:69:a2:ad:3c:03:fb:e7:
                    db:ef:80:9f:c7:07:51:62:af:b6:12:01:72:0e:74:
                    d3:25:60:2f:00:7c:cf:cd:d6:d8:c9:71:f1:72:67:
                    87:d6:5a:36:3a:4e:3e:28:cf:97:76:27:89:78:85:
                    1b:53:96:6b:91:cb:04:f7:31:03:d9:bb:96:74:61:
                    72:0d:43:65:00:48:72:8a:44:e0:d7:35:35:e3:5e:
                    72:8d:ce:63:f6:97:1e:e8:13:7f:8f:47:41:29:a5:
                    d7:41:29:a9:8d:88:6c:e8:0f:f3:d1:a1:3c:57:37:
                    ee:bd:f7:dd:95:3c:5e:e9:c2:2e:1f:a3:89:e2:3e:
                    fe:72:6d:74:e5:47:87:4b:3c:6b:e4:e2:e9:8d:05:
                    0d:5b:6c:5d:b7:9f:28:4c:03:8d:69:e1:22:d0:6e:
                    38:9b:32:a9:64:bb:c2:9a:f0:47:b1:a4:a5:4f:09:
                    e2:70:6f:c4:97:01:70:67:e4:f9:73:d5:c7:c3:ae:
                    67:1f:b4:2f:5d:2b:71:82:e0:fc:b1:6d:4d:73:e3:
                    4e:06:5b:b5:8b:81:bd:06:de:fa:51:4b:f3:c2:36:
                    d4:d8:89:76:64:7e:b7:48:39:b5:72:b6:63:24:ff:
                    15:75:3c:15:0d:71:55:eb:42:b0:75:e0:9f:6b:5e:
                    c9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9A:70:D6:F2:4B:90:3F:D5:1B:C4:41:6B:CD:9A:CA:ED:A8:70:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e7b2570-789c-37d1-b09f-2783e75a61c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.85.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:6e:54:cb:40:e3:2a:8b:32:9f:17:25:7d:f8:34:4c:93:9f:
         86:20:5a:86:de:1e:60:13:db:54:cf:e6:83:2c:1f:d7:95:e2:
         d9:d8:11:8d:c4:fe:81:a2:81:1c:bc:7b:b6:10:01:69:89:41:
         9a:4c:45:cf:85:3d:22:92:87:57:db:30:1c:a7:17:3c:02:8d:
         19:b4:ab:00:80:ae:96:d7:dc:2a:7d:c2:2e:df:26:65:ea:c1:
         55:f5:66:ed:5d:18:8f:b1:be:16:85:77:97:e2:a1:8b:07:82:
         d3:90:7b:81:36:d2:5a:cd:ae:c5:29:26:b8:69:41:35:69:74:
         1e:8c:22:51:70:67:ae:ac:0f:8a:d1:15:31:16:3e:12:f4:18:
         b8:1a:5a:c7:b9:9b:c8:4f:be:ca:e0:a6:c3:30:eb:3a:f2:a1:
         df:6d:f7:69:28:23:ca:af:14:98:38:84:0e:cd:a9:dd:81:36:
         5e:d5:c4:00:53:86:2a:2f:4c:13:ff:c7:72:02:bd:86:f9:28:
         57:2d:0b:54:45:ec:40:05:b3:03:19:ab:87:0b:0c:64:f7:72:
         ea:86:bf:5e:0e:d6:ef:0e:b0:25:ff:7a:1c:3c:ec:98:ab:2e:
         03:8e:19:aa:16:67:88:da:45:8a:da:f3:91:4b:22:06:86:b3:
         86:83:28:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----