Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b04449d7-0519-377c-ad98-595b41956f31.roa
File:                     b04449d7-0519-377c-ad98-595b41956f31.roa (raw, json)
Hash identifier:          UFVkVj681WMNrLKFg1u1OJBFMQGresRFCNIuFElLclE=
Subject key identifier:   07:51:61:91:F9:14:03:8A:56:CC:60:0A:3B:AB:A8:4F:99:35:CF:10
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584309FD5C76C628E79EC2B7DB00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b04449d7-0519-377c-ad98-595b41956f31.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        70.32.136.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:18:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fd:5c:76:c6:28:e7:9e:c2:b7:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=7fd0be5d-16ce-416c-b328-fd773eb4818d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f1:a4:1b:91:6b:eb:5e:3c:7f:8f:5a:af:b4:
                    12:70:36:26:cb:f2:1f:b5:5a:31:64:23:fe:a7:8e:
                    e0:27:18:a0:70:6b:3c:33:5e:e0:41:45:93:a2:f3:
                    d8:c0:34:7a:ce:68:c3:f9:4b:5a:80:bf:76:88:02:
                    8d:2b:7e:cb:29:7b:19:46:e4:a0:96:74:91:f8:59:
                    b0:c1:0a:bc:b0:94:f8:3f:67:73:af:09:ac:ce:f5:
                    17:69:0c:b8:ce:a9:da:ab:6a:50:f2:9f:ad:fa:c6:
                    f8:b2:eb:fd:76:6a:c7:0c:1d:67:dc:18:76:9b:95:
                    f9:c4:0f:3d:9d:af:23:2e:ef:af:8f:4e:3a:15:f4:
                    a3:33:ac:4a:3e:ed:2e:eb:15:91:69:07:52:7f:16:
                    33:3d:57:a4:03:17:75:03:de:6a:1c:5c:ff:96:9d:
                    e2:92:dd:3a:ee:57:f1:ac:fd:a4:62:08:20:c6:4f:
                    88:2d:51:5c:75:ef:7d:f8:78:53:98:9c:6b:90:59:
                    8a:18:40:e6:f0:11:46:fb:16:12:59:84:c1:7b:e6:
                    17:ea:6b:28:60:88:86:d9:35:58:57:be:63:f8:c4:
                    02:a9:89:b0:d3:2b:b9:95:f9:59:7b:a9:87:b9:dc:
                    5d:0b:fd:6e:cd:6a:12:98:b7:92:06:b1:39:ce:d1:
                    c5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:51:61:91:F9:14:03:8A:56:CC:60:0A:3B:AB:A8:4F:99:35:CF:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b04449d7-0519-377c-ad98-595b41956f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f5:d8:53:23:5a:70:4c:1f:a7:93:31:98:73:48:4b:03:1e:
         06:1c:ce:ba:2d:ac:a2:5d:82:05:c8:0a:4c:94:f2:13:06:91:
         8a:35:ab:71:09:eb:4a:df:5c:6d:16:d1:10:ac:69:07:7d:51:
         bf:e1:14:70:4a:fe:b4:31:a3:45:f9:6c:fa:a1:99:e6:59:16:
         55:aa:55:c0:67:19:bb:25:a3:48:92:b3:e0:75:2e:e2:22:d2:
         0a:20:17:7f:09:0f:9d:bd:8f:f0:9d:c9:fe:58:15:a2:a9:40:
         84:66:98:00:00:f3:d1:bb:8e:5c:8d:f4:3c:42:4d:68:ad:df:
         93:f2:38:96:39:9a:08:66:af:7b:5a:b1:df:33:e8:c9:66:2c:
         1d:a2:2d:83:f6:5e:59:d4:13:b0:be:47:39:31:ad:73:80:a2:
         c2:59:5d:21:a2:93:7b:6b:cf:d4:c3:ae:04:4c:4a:58:16:5f:
         da:78:d6:98:85:03:37:38:53:22:2f:cc:fa:e1:35:53:d9:68:
         e2:d8:86:d5:8b:42:2b:c0:ae:ba:1c:4b:9c:f2:eb:1e:53:b3:
         39:b2:88:7c:08:5b:fb:85:c6:e0:62:42:0b:eb:71:99:13:32:
         f7:22:77:d6:19:f5:bb:50:06:1c:71:c4:ee:61:fd:b6:e5:7e:
         fb:60:27:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----