Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5b7279f-6a4b-3c1b-944a-f501f35cc111.roa
File:                     d5b7279f-6a4b-3c1b-944a-f501f35cc111.roa (raw, json)
Hash identifier:          ziVtySBbjrRzp5lixMTqiTTHdpCAt/EPKqEyhPfSH1o=
Subject key identifier:   7A:10:F6:61:81:12:B3:0A:D5:DF:1E:42:80:98:AB:64:ED:5C:13:1F
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A0BE542F08E70B751D5C260
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5b7279f-6a4b-3c1b-944a-f501f35cc111.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        70.32.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:19:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0b:e5:42:f0:8e:70:b7:51:d5:c2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=64dbbf63-a765-41da-87bc-698fd01fd757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5a:07:1b:61:cc:6e:3e:7b:1e:14:d3:04:20:
                    f5:57:22:37:c1:61:1b:de:30:7a:93:e4:cb:e2:b6:
                    3a:b7:e6:66:f2:6d:c0:bf:e0:9e:0f:8c:0a:77:19:
                    7a:a5:65:7e:4d:8e:61:e6:89:64:1a:a7:b7:25:3b:
                    30:cc:32:41:56:60:2c:28:79:8b:47:5b:38:f4:00:
                    3a:35:20:f0:8c:bb:d7:19:35:e9:b0:35:11:8c:db:
                    91:19:3f:67:f0:a3:09:93:70:c6:f5:74:0a:fe:4f:
                    e4:5f:28:61:1b:11:23:dc:0d:3f:c7:3a:1c:60:ce:
                    41:f6:1d:08:de:4b:31:f6:2e:75:12:2f:59:2e:b9:
                    b7:5b:bb:23:c4:c3:ec:88:75:05:eb:db:24:d8:2f:
                    b4:64:ed:b2:49:d8:14:db:88:43:0c:ba:3a:fa:b8:
                    ba:d5:c0:cd:17:e8:ea:52:1e:5f:47:30:7d:1a:56:
                    d7:35:54:b5:41:33:91:4d:7b:c4:9f:6b:30:8d:1c:
                    da:8e:4b:87:c2:ef:d2:87:28:dc:b4:5a:74:dc:40:
                    08:70:29:13:cd:1d:20:05:e5:50:7d:ba:a3:02:ec:
                    68:ce:e3:2f:2a:c2:1e:3b:d9:a6:89:0f:ef:ab:1f:
                    d7:17:c2:11:18:ab:37:69:a6:14:49:03:a5:e1:d7:
                    a1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:10:F6:61:81:12:B3:0A:D5:DF:1E:42:80:98:AB:64:ED:5C:13:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5b7279f-6a4b-3c1b-944a-f501f35cc111.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:c8:19:4c:e3:b0:76:c3:1a:5c:fa:d0:b5:06:52:f9:fb:83:
         eb:95:04:7f:34:1f:c5:37:b5:dd:a7:ba:72:12:12:3b:56:93:
         da:9b:9c:33:84:57:ce:62:a8:00:d9:93:23:53:49:f3:02:2c:
         be:d9:42:f7:a4:a5:ed:88:81:c9:a4:a5:83:d3:d0:f1:bd:ab:
         d3:ca:e5:eb:c8:46:e7:1c:99:25:c0:b5:27:12:49:4f:24:ba:
         4a:81:fa:0a:6c:54:41:b2:de:32:d7:ac:0d:b6:53:5f:ce:bc:
         3e:93:a2:fe:73:40:2c:f1:b3:52:4f:4d:5e:9c:63:0c:bd:6f:
         1f:c1:cc:c3:ff:48:7b:88:a1:40:93:ed:c3:d5:86:d2:60:ab:
         f1:63:63:d8:6d:85:7b:88:50:ef:b2:5f:be:29:aa:9e:85:27:
         40:20:e3:1d:17:70:17:07:86:58:b2:3b:9a:33:d2:fd:ed:90:
         19:03:72:12:94:d3:18:ab:86:9f:f5:90:e4:d4:5e:f1:ed:54:
         35:70:b6:93:21:a0:f3:50:1c:de:3f:b0:50:0c:e0:00:60:d5:
         e4:6f:b6:16:c9:8d:b3:41:45:29:9e:51:7d:0a:3b:eb:c7:a9:
         ce:c0:ae:9a:c2:e7:66:e9:76:90:e5:45:d6:ed:06:80:98:83:
         7d:64:92:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----