Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d1f04583-6663-31fd-9e15-c42c0ab86e7a.roa
File:                     d1f04583-6663-31fd-9e15-c42c0ab86e7a.roa (raw, json)
Hash identifier:          tTlN7PUyTPl2YUPPcSUTofSxRXLOshToz5Fc9EVTiIQ=
Subject key identifier:   39:5D:AA:6F:9B:36:69:05:B8:99:22:7B:D3:2D:C7:21:EC:0B:A4:C3
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A19D22326A5078C68F5A440
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d1f04583-6663-31fd-9e15-c42c0ab86e7a.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        142.251.99.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:25:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:19:d2:23:26:a5:07:8c:68:f5:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=d7672cca-42d9-486f-80cc-4c1a5258a266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5b:ac:c8:37:56:20:1f:54:3b:98:f8:d3:51:
                    bc:bb:0b:81:46:9f:cf:a0:c9:78:e7:23:2a:80:64:
                    8b:72:57:46:8d:5f:7d:86:a1:3c:a9:63:c0:98:42:
                    74:93:20:53:1d:5a:12:7b:c0:2f:f3:90:1e:b4:dc:
                    67:08:49:67:06:2e:f0:ba:02:87:b5:13:08:c0:a7:
                    af:23:ad:bb:59:09:de:6a:28:99:19:a8:ff:51:07:
                    8c:e4:6a:c6:16:50:e8:fb:6c:aa:4d:6f:ef:1c:ab:
                    b3:27:cf:9c:39:32:71:a5:19:0e:38:8b:68:99:51:
                    c0:3f:c7:59:45:38:28:4d:c4:2f:11:01:95:72:d4:
                    c9:7c:94:62:b7:51:1f:c5:7b:9f:d6:0d:62:96:db:
                    27:30:ba:26:aa:23:a5:5a:52:fa:ea:59:12:1b:3d:
                    06:67:d5:68:c5:f3:8f:3e:27:57:40:f2:e5:00:81:
                    b5:4b:8e:33:cf:e2:ca:80:0e:4c:5d:06:68:cd:51:
                    03:44:cf:08:58:64:23:ce:14:c3:d9:c7:18:a3:3c:
                    ae:09:85:d3:89:ac:bf:b5:eb:b5:61:43:3a:f8:94:
                    72:90:e5:72:2c:2b:6c:46:fe:38:6d:fe:a1:ab:a4:
                    a7:10:08:c7:65:03:f2:d4:ae:23:a0:8e:5a:43:b9:
                    ee:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5D:AA:6F:9B:36:69:05:B8:99:22:7B:D3:2D:C7:21:EC:0B:A4:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d1f04583-6663-31fd-9e15-c42c0ab86e7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:fe:3f:e8:c3:da:b2:06:b0:80:c2:63:bc:dd:2d:e3:90:08:
         51:f9:f4:05:de:a3:a6:e6:dc:1c:e1:0e:7b:34:bf:0b:1b:39:
         e9:30:db:a2:8a:b4:76:a1:f2:ae:40:03:57:f9:a9:49:ec:d8:
         4b:ab:69:37:61:9a:49:57:78:39:ea:6c:ac:38:2e:46:23:6f:
         dc:91:9d:55:5b:67:c2:6e:03:ca:62:fc:28:e2:b8:b3:3a:3d:
         08:fa:14:59:1e:6b:85:f5:92:12:18:48:7d:ef:0e:52:55:35:
         f0:dd:2b:c3:c1:7d:91:0c:6c:4d:01:8f:74:15:32:99:21:59:
         1e:1d:dd:64:3a:1a:9e:16:c1:c6:36:b0:45:0e:63:52:b6:dc:
         85:54:a5:05:b3:d8:de:ff:1e:c4:41:70:4b:58:28:9a:42:91:
         47:8d:94:93:b7:a3:80:e0:f2:b6:33:ca:60:06:89:28:94:74:
         e6:85:9e:83:d1:da:24:31:14:b5:3e:d6:8b:6d:a6:e3:ec:c5:
         37:84:b3:5f:55:fe:c2:57:fd:41:5c:1c:ad:a3:6c:99:e0:7f:
         80:27:61:f0:33:67:51:18:34:d0:6b:25:ce:38:1f:c4:76:53:
         08:4e:bb:98:8f:82:19:e9:70:02:83:b3:a2:11:d4:aa:b3:16:
         7f:db:3d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----