Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f43ebba3-1ee8-3abe-baed-569a7fdcb96b.roa
File:                     f43ebba3-1ee8-3abe-baed-569a7fdcb96b.roa (raw, json)
Hash identifier:          8TtcAK2mb7D0C6Y58XzUMSEiDotvF0uHhjewZg6qDFA=
Subject key identifier:   D4:BF:07:33:D9:F9:7E:6B:6F:11:F3:27:65:E5:2B:7A:1B:CE:0D:29
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584309F7A9A470154002F17A3800
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f43ebba3-1ee8-3abe-baed-569a7fdcb96b.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        172.217.213.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 29 Mar 2024 20:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f7:a9:a4:70:15:40:02:f1:7a:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=224cc50f-1092-417a-971d-88bc1bd9026c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a7:c3:a1:75:09:b6:ec:25:6d:66:b4:b8:c2:
                    91:c5:52:a0:11:6e:99:87:68:69:6c:9c:b7:34:22:
                    8d:a3:b3:80:5c:5f:7f:11:1b:a5:ab:28:de:cf:03:
                    0f:15:1b:d5:14:91:0f:de:fb:6b:54:b3:81:c4:06:
                    6d:74:aa:8b:5e:aa:77:43:8d:89:43:a4:58:78:07:
                    c6:6a:bb:8f:87:82:94:e3:bd:da:8b:af:d3:41:e5:
                    be:8e:2c:16:29:eb:4d:6e:35:0e:a4:68:71:e3:29:
                    d1:fd:ba:0f:68:46:2b:56:f9:f1:8e:76:84:22:55:
                    de:77:c2:4d:07:55:0a:3d:ec:ba:32:52:46:c9:19:
                    e7:d8:14:d6:7d:1e:13:6a:f2:e6:26:27:4e:f2:17:
                    c5:71:1b:e3:a7:dd:4f:b8:f4:db:71:58:d8:33:23:
                    21:8b:ed:a9:90:2b:77:ef:85:fa:62:d3:e7:29:5f:
                    84:00:0d:53:70:54:db:79:34:52:ed:cd:12:33:58:
                    9f:c1:44:23:16:fb:03:1b:10:0d:9a:d6:0a:85:13:
                    b8:30:fb:4a:cb:1b:35:76:30:9b:15:50:37:eb:20:
                    13:60:62:15:af:fa:0a:ef:98:33:af:1a:ce:c3:52:
                    a6:de:e7:97:29:4a:2d:55:1f:10:ff:fe:f9:d9:3c:
                    12:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BF:07:33:D9:F9:7E:6B:6F:11:F3:27:65:E5:2B:7A:1B:CE:0D:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f43ebba3-1ee8-3abe-baed-569a7fdcb96b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:52:12:3e:38:30:08:ea:f1:a4:30:f1:b7:9e:52:9a:bc:59:
         db:35:11:43:32:ed:2b:1f:77:7f:20:e9:28:e2:9a:85:c6:dd:
         28:53:0d:cb:ce:a4:75:87:09:57:88:f8:88:26:e1:70:14:c0:
         a1:42:61:ae:ea:9d:09:7c:4e:e3:1a:0b:4f:3d:d8:16:9c:a4:
         09:f6:d3:57:6e:fd:b9:02:eb:fb:23:24:f1:4b:a6:72:8d:30:
         41:4a:6a:76:1b:e6:5f:bc:b9:60:49:e9:dd:be:83:35:b9:71:
         c1:c8:c2:22:42:27:46:5e:2b:7f:50:dc:aa:a4:92:02:54:e9:
         48:e0:b5:83:ec:57:1f:2a:cb:77:90:6a:67:35:4e:fb:8b:c5:
         8c:1a:48:76:cd:43:7c:1d:20:5e:0f:77:c4:9e:65:6f:6a:39:
         a3:44:06:c8:28:3d:52:d3:29:05:13:bb:46:1e:2e:ec:60:df:
         df:87:cf:37:ba:c0:6f:8d:ea:3c:c8:6f:57:bb:89:0e:f6:9c:
         94:d8:18:96:72:31:85:55:2a:38:a3:e5:d0:50:fb:fb:63:45:
         19:4b:f9:c7:8d:32:6c:b5:74:47:b1:18:af:69:4f:d1:f3:45:
         3c:63:2e:34:01:8f:4f:cb:38:e2:57:c4:b1:21:c6:9e:02:40:
         4f:1b:e0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----