Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ec2178ad-86f7-395e-919b-56034e298224.roa
File:                     ec2178ad-86f7-395e-919b-56034e298224.roa (raw, json)
Hash identifier:          q244kwzjvAlg97aWMAcEukn6DlbKGKBkBjsM+0sTPoM=
Subject key identifier:   52:02:B7:A0:82:56:B4:36:0F:E3:CC:15:C9:95:AB:FF:12:D7:99:0E
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584309FF4167B5CD7696AE9F33C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ec2178ad-86f7-395e-919b-56034e298224.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        74.125.226.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ff:41:67:b5:cd:76:96:ae:9f:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=0970ffda-6f5f-43ca-b313-c4452a2f1fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:21:73:b3:f5:9e:ce:fc:a3:3e:cf:31:56:33:
                    cb:dd:1b:bf:fb:59:b1:bd:14:8e:2c:37:2d:f6:f7:
                    70:e9:25:47:1b:22:0f:98:b8:90:14:34:b5:13:d8:
                    37:fb:24:ba:e1:e7:7e:77:8e:de:ec:a3:b3:16:8f:
                    5d:df:48:bf:58:6b:7f:ea:c1:dd:44:e1:87:f9:cf:
                    21:46:96:4d:c7:36:fa:7e:11:23:4e:74:d4:0c:9b:
                    c8:c9:69:7c:66:b5:02:46:cf:40:8c:25:e6:e2:b0:
                    69:62:91:a8:7a:03:ff:ee:81:2c:eb:9f:26:25:40:
                    b3:6a:75:a6:70:18:44:44:d7:3a:03:ae:33:65:15:
                    ff:37:c6:88:55:45:af:7b:28:4a:7d:37:13:8c:ae:
                    d6:80:50:68:bd:b0:ac:35:17:27:5d:f7:04:7e:5c:
                    74:bb:fd:6e:06:b4:e7:da:92:c6:eb:99:89:ef:76:
                    75:87:db:35:b5:e1:31:a0:5a:f9:32:83:27:5a:8c:
                    d2:3d:05:d3:ee:2a:e1:3f:be:0d:73:f7:4d:41:d6:
                    3e:84:c7:a9:1d:0f:d8:78:39:08:d3:ad:ae:df:56:
                    b2:c7:79:8e:59:76:2b:2f:51:25:35:17:7e:f9:b9:
                    0d:ca:3c:6d:0e:0b:7a:8a:9e:c5:6f:4c:e5:24:6e:
                    ed:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:02:B7:A0:82:56:B4:36:0F:E3:CC:15:C9:95:AB:FF:12:D7:99:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ec2178ad-86f7-395e-919b-56034e298224.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.125.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:be:aa:00:48:8a:a4:b8:a8:cc:51:bc:40:41:e3:fa:dd:4d:
         2d:ad:b6:14:da:fd:40:13:87:f2:68:a6:56:2f:5e:1b:a1:fa:
         96:0a:ad:58:4e:17:22:3f:2f:6b:9e:fa:ea:6b:99:ab:63:a2:
         da:7d:34:f1:58:09:39:b2:d6:42:b7:7a:ed:57:10:6b:1b:25:
         67:36:58:00:f3:68:94:b7:a6:b6:65:67:d3:92:69:29:3a:80:
         af:3d:48:56:43:de:89:6e:2b:58:3a:6a:1b:1d:d4:79:f6:1f:
         e3:ee:76:55:f6:77:b0:11:d5:ca:c5:0c:da:eb:e2:92:61:ee:
         0b:1c:0c:17:5c:8a:76:df:21:e2:d8:f3:d3:7b:b8:7b:34:3b:
         29:11:dc:6f:de:d2:d6:3b:4a:1c:a2:ea:f2:33:84:c1:f2:d1:
         43:ca:d6:1a:4d:74:f1:bc:49:04:d3:88:5b:85:2b:87:59:f0:
         fd:e5:5a:c2:b6:9c:fd:9b:b8:e4:ec:83:26:e8:7b:3e:07:7d:
         92:5e:d4:3b:ac:54:a2:33:2e:0a:b1:f6:c2:38:37:4a:5a:3a:
         d5:4e:d2:6b:57:0e:3d:38:d0:2b:63:70:20:b4:25:6b:99:e1:
         a4:4f:86:87:30:c3:08:3e:89:88:e4:ef:f9:55:2c:aa:bf:a3:
         41:15:b3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----