Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64d63e43-80af-37e3-a366-a43bdaed1331.roa
File:                     64d63e43-80af-37e3-a366-a43bdaed1331.roa (raw, json)
Hash identifier:          HTyIE7IIZmg4dDTa89xlXi+A8Od707fBw+FYw6wVwTA=
Subject key identifier:   66:1C:6F:2C:3A:99:AE:9D:71:B0:0D:7F:DD:91:11:06:0A:DF:24:1D
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A192450D1BB6B6DD1FBD000
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64d63e43-80af-37e3-a366-a43bdaed1331.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        108.170.209.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:19:24:50:d1:bb:6b:6d:d1:fb:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=a0afb22f-7103-4114-8611-d2db80ff2550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:48:8e:b6:41:6b:ce:41:79:de:1a:6d:0a:f5:
                    f8:80:bd:a4:6e:67:78:fc:18:9a:31:a9:b4:18:a2:
                    f8:6e:7b:76:0c:db:b4:7f:41:5b:85:c2:d4:18:08:
                    c0:f5:30:a5:3a:b2:41:ff:6c:df:3a:26:04:35:33:
                    f9:37:07:99:f4:0e:7f:c3:44:fd:cb:01:d8:0a:38:
                    a7:14:77:a0:3c:a3:96:e7:94:3a:f9:ef:a1:4e:ba:
                    61:aa:8e:bd:d7:c9:a4:fe:15:f7:3a:89:9f:7b:d8:
                    03:16:53:a7:bc:eb:11:38:f5:ca:86:7b:6b:0e:f3:
                    66:85:ab:94:9f:57:b8:06:d8:c7:93:d7:fa:56:92:
                    8b:55:48:67:5a:a8:39:b5:b7:2c:cc:c3:0b:06:07:
                    1d:c2:fb:74:80:22:db:87:df:ed:51:8f:54:c5:9d:
                    25:92:2c:52:10:7d:54:d0:dc:80:aa:76:f2:72:03:
                    18:c3:c5:a1:ca:01:76:db:b6:d3:d8:12:c6:10:63:
                    fd:35:e0:f3:a4:17:91:0a:ee:f9:34:bd:3c:16:f6:
                    61:89:49:2e:2c:60:c9:4f:1a:c9:11:53:65:43:af:
                    d0:88:bf:a7:e5:81:50:3d:1e:60:14:fe:6a:7f:35:
                    a4:4c:09:1d:fb:e7:7a:0d:95:c8:73:69:61:16:8f:
                    49:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1C:6F:2C:3A:99:AE:9D:71:B0:0D:7F:DD:91:11:06:0A:DF:24:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64d63e43-80af-37e3-a366-a43bdaed1331.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.170.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:a2:0a:f5:bb:74:67:30:20:84:d4:56:1a:71:9f:89:0f:72:
         51:46:87:07:bd:1b:21:4f:d5:2a:05:18:de:7f:08:d3:6f:7f:
         66:1a:b3:11:bc:56:07:79:87:86:63:a4:cf:9c:73:a9:9b:47:
         e8:b9:c1:be:66:08:a9:3d:89:7a:ee:34:71:98:ca:c7:8a:59:
         a2:47:ef:54:15:c7:45:3c:81:14:11:b9:fc:57:40:50:c6:d4:
         d8:6d:7c:76:33:50:11:86:c2:e3:25:1b:0b:7c:de:0a:4d:8f:
         a2:2b:c5:cd:18:0f:de:58:84:47:6d:28:fb:f4:fd:43:73:f0:
         35:ab:92:ad:0b:fb:ac:fc:b7:90:82:81:11:5b:be:39:09:31:
         7d:95:f6:82:6e:23:8f:92:38:59:37:fc:17:44:fe:f4:06:5a:
         ca:20:fb:79:c1:57:c5:24:d1:56:8d:4e:5a:7a:54:86:a0:f6:
         56:e7:11:40:cd:32:0f:66:6d:fc:60:37:38:a2:33:64:b6:ba:
         00:1e:67:97:71:b0:0b:30:96:ff:17:a7:6a:dd:a5:c1:f9:ed:
         9b:33:84:ad:1c:d2:a3:5c:ca:91:96:9c:cb:f1:e2:3f:64:19:
         c1:08:8d:81:33:24:95:ec:7c:e1:59:50:67:72:80:e5:22:01:
         95:e7:f7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----