Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b7098de6-b201-3fae-a9fb-ca039cfd94e2.roa
File:                     b7098de6-b201-3fae-a9fb-ca039cfd94e2.roa (raw, json)
Hash identifier:          Y1jBXI48omDKh0K1oe7bkekMAH7WAgMwNAqtkZqMmYk=
Subject key identifier:   25:93:3C:39:F0:D6:07:59:BC:DC:68:92:6F:B3:82:5D:82:84:B1:82
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584309FE8E3D9E75596445548440
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b7098de6-b201-3fae-a9fb-ca039cfd94e2.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        70.32.157.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:19:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fe:8e:3d:9e:75:59:64:45:54:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=41dcb4b8-8377-40f7-987d-4c7156e8b749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:98:c2:9f:0d:49:1c:64:b5:bd:d9:86:0d:4c:
                    fe:fa:8e:2b:5c:13:8a:15:5a:5b:85:c6:59:c9:1d:
                    ae:9d:bd:f4:98:77:3a:81:b6:dd:c1:f9:7e:1f:a6:
                    1a:55:12:c9:2e:38:8e:34:2c:2b:40:2b:30:6e:3b:
                    28:b0:be:0c:d6:0e:c6:48:39:4e:60:08:29:46:25:
                    19:fa:7b:74:fa:ea:8f:f8:63:e0:61:01:c5:41:00:
                    80:c0:cd:ca:24:9b:f6:1b:15:c9:45:a1:d1:fe:f1:
                    03:8e:af:be:53:c7:c1:92:83:3a:b3:71:76:7d:3e:
                    45:2a:dc:6e:6d:f8:cb:83:24:14:b1:52:1a:ca:84:
                    57:9b:65:fb:62:04:df:5f:1a:9d:fe:ff:d1:09:53:
                    80:12:b4:76:36:86:b1:36:f2:ae:fb:3d:a8:a4:bf:
                    72:61:0c:f4:ac:f4:aa:cc:47:9f:4e:a5:d0:db:61:
                    07:e9:6b:c5:4b:72:4a:1a:ff:c0:00:51:aa:ea:9f:
                    2c:61:8b:17:8b:d3:d7:f0:2a:fc:c8:42:13:4f:97:
                    35:3d:21:0e:49:72:07:f4:08:eb:cb:62:ae:e1:c4:
                    de:df:54:3f:f9:b6:8b:ea:a3:56:9b:52:09:22:36:
                    1a:95:ed:87:73:42:a8:30:22:69:c0:d7:80:51:e5:
                    fb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:93:3C:39:F0:D6:07:59:BC:DC:68:92:6F:B3:82:5D:82:84:B1:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b7098de6-b201-3fae-a9fb-ca039cfd94e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:fe:4b:b2:c7:e1:11:39:cb:69:28:24:03:95:c5:67:c3:c9:
         89:ca:a7:52:6f:db:70:f1:c8:11:97:72:b6:d0:80:cd:78:d9:
         92:cb:ab:54:2a:64:af:a7:39:89:80:10:c3:72:57:c2:b5:87:
         4c:ce:3f:2c:91:23:51:28:a0:d0:0b:ab:4b:ec:dd:de:1f:30:
         3f:3e:83:90:71:eb:47:2a:fd:cd:3a:71:2b:b5:ab:9a:b2:b5:
         5a:d8:97:4f:5e:76:62:f0:61:71:ea:f9:77:6c:c8:eb:e6:e0:
         42:89:67:9e:c0:72:e4:b7:12:08:e7:1c:6d:15:a8:79:e7:03:
         2f:aa:d3:64:f7:9e:7e:16:de:a8:5c:32:f8:29:d0:ec:00:91:
         b5:f4:12:bc:b6:fb:e4:b5:2b:2a:59:c9:4e:0a:a6:f2:57:c3:
         c3:26:f8:cd:a6:87:43:e1:c8:06:cd:c4:77:58:93:1a:53:73:
         a8:6b:eb:82:29:3c:fc:53:93:8e:a6:d4:0e:b3:06:48:1f:7f:
         d9:b6:00:d8:0a:16:0d:94:99:25:9c:32:68:95:05:e6:31:00:
         62:98:4a:2e:d7:82:88:6f:b4:bd:fa:ae:85:33:98:eb:41:89:
         3f:3f:a6:29:e0:5f:b8:4a:23:0e:49:69:2f:83:31:fb:54:10:
         70:23:16:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----