Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7cf31e54-e604-3ddc-a2f4-89359a4083f5.roa
File:                     7cf31e54-e604-3ddc-a2f4-89359a4083f5.roa (raw, json)
Hash identifier:          N+sAXYlx3Ay5XWG4DTYBaxIdTzsrEFB1m0bbxA87nig=
Subject key identifier:   43:78:53:99:5D:70:63:6B:EA:CE:25:DE:A5:67:92:06:65:4C:20:66
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584309EE04309AA72EC45DBEA400
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7cf31e54-e604-3ddc-a2f4-89359a4083f5.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        108.177.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:21:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ee:04:30:9a:a7:2e:c4:5d:be:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=2df30d87-5037-4c48-aaf4-a277af3178ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d4:eb:e9:72:de:68:a8:e7:57:bc:73:7c:3c:
                    16:18:e2:b4:6e:82:53:1f:6a:b5:6b:16:83:8c:31:
                    f5:f6:34:d0:3e:b4:3c:73:33:e0:f4:b8:05:98:b6:
                    1e:0e:ed:0f:0b:ad:17:1d:3d:fe:b9:83:47:3d:e5:
                    b9:e8:19:80:e5:3b:d5:60:3c:3a:3b:3d:2b:b5:7f:
                    ee:59:4d:34:25:8b:3c:27:d0:13:09:84:d2:7d:f0:
                    e0:e1:92:ca:7d:27:5c:7d:e2:02:f6:00:21:a7:fe:
                    13:df:85:c8:f7:9c:b6:65:99:a2:78:e0:30:35:ea:
                    43:4a:14:d6:3c:aa:67:3a:ee:d5:e0:98:db:98:c6:
                    64:35:39:8f:49:4c:a1:cc:81:0b:5a:bc:9f:7c:1a:
                    ee:a5:2f:8e:1a:0f:f1:b1:54:a4:19:9f:09:ee:9e:
                    d0:4d:fc:08:9a:40:fa:e0:3c:d2:0b:a4:37:dc:ee:
                    ce:eb:61:bc:c8:6b:88:f4:0b:72:27:11:a0:df:6d:
                    c4:45:27:79:af:4d:87:3e:41:3c:ed:9f:11:ae:0f:
                    80:53:95:a4:0c:e1:3b:df:9b:a3:8f:41:75:69:66:
                    6d:74:c9:e1:36:bc:f7:26:d8:cd:7c:fb:b7:bf:b1:
                    a5:86:3a:23:ad:71:fb:4f:d8:06:82:e5:b5:25:09:
                    ea:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:78:53:99:5D:70:63:6B:EA:CE:25:DE:A5:67:92:06:65:4C:20:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7cf31e54-e604-3ddc-a2f4-89359a4083f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:4c:a0:7d:e2:6e:29:67:86:89:bf:e3:48:b6:3b:8d:de:13:
         87:9f:b0:0c:7c:f8:91:bb:d8:40:ba:3e:14:bc:3b:f0:ad:72:
         8f:1d:c4:eb:b5:79:83:98:69:7f:18:cd:78:68:fa:4b:1c:ea:
         9c:56:10:d8:c1:b5:ca:5e:04:42:c8:04:bb:b9:09:4e:12:0c:
         6c:51:45:70:c0:47:7a:5d:bc:d3:3e:4d:7b:9f:61:c4:71:28:
         cb:cc:a7:8b:c4:d9:2f:4c:26:03:c8:c1:cf:b5:8b:1a:8d:33:
         e1:31:b6:e3:c1:4a:c0:56:fd:5d:4a:fb:4e:e3:17:17:ee:c6:
         37:74:c3:8e:ea:ec:bc:4b:c2:37:e8:2b:6e:5d:81:95:f1:34:
         8c:ea:b6:7f:8c:96:53:c8:4a:08:56:13:38:fa:61:75:dc:cb:
         59:33:3e:0c:79:79:ca:36:a3:61:ba:59:86:31:be:a3:f2:00:
         9d:f8:1a:09:c9:d9:47:55:32:b7:c7:87:89:a2:05:b1:27:2a:
         d1:57:c4:71:41:89:00:f9:be:f1:d9:23:0c:ea:53:b3:ee:ea:
         47:9a:13:02:99:f1:b4:81:44:48:bc:28:a2:ce:22:59:f5:b2:
         97:e6:8c:df:fd:48:e8:30:a9:a5:c2:d9:26:d8:09:e8:45:74:
         1f:64:67:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----