Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/040747bf-b296-3115-ae7a-f373e043b0d0.roa
File:                     040747bf-b296-3115-ae7a-f373e043b0d0.roa (raw, json)
Hash identifier:          X0Ab2DKMbPe+pcqtXg1HwlZBlffRTx58F8LrLULu7fo=
Subject key identifier:   48:F9:6F:30:4B:79:D6:59:91:2E:CC:80:31:26:A0:FC:BB:71:DE:08
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A1768CCFDADC69D787C8800
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/040747bf-b296-3115-ae7a-f373e043b0d0.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.146.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:17:68:cc:fd:ad:c6:9d:78:7c:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=1b66fb61-bf68-423f-9779-0784a79368f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fa:4d:21:e2:4d:5a:e5:46:a7:b2:6b:7c:e7:
                    6f:88:f7:53:cb:8f:ff:cb:d3:b3:6d:d0:b7:69:f0:
                    60:6f:8e:93:2c:38:9d:a2:c8:95:6d:61:6a:fb:0a:
                    28:78:87:b7:cd:c6:39:6c:1c:2c:2b:e2:5a:23:a8:
                    ff:85:9d:b8:46:99:b0:46:ee:a2:e4:b7:ad:d5:83:
                    bb:79:9a:d0:68:96:e9:10:b7:36:49:56:16:0c:b0:
                    20:e7:b8:5f:35:df:bd:8f:f0:36:d9:af:ae:b3:8c:
                    6d:54:22:06:16:0e:79:1d:36:36:85:db:8b:70:16:
                    a0:44:d7:c9:7e:c9:86:27:ba:fb:04:e8:c7:26:d7:
                    f7:7a:bd:3c:f5:66:cd:e5:fe:d4:d2:ca:ff:79:0f:
                    bf:0c:da:03:6b:d1:34:cf:01:76:af:d6:a1:b8:39:
                    4b:6d:51:98:3c:47:80:8f:31:b9:22:ea:14:69:ac:
                    72:79:73:7d:d7:bf:c1:cd:60:5d:07:5c:64:a5:ec:
                    ba:22:ee:fc:af:ea:f7:82:17:38:d7:10:55:ae:a9:
                    a8:65:38:3e:15:50:4d:bf:6b:24:4d:23:17:8a:8e:
                    81:3e:aa:0e:a8:c5:f0:cc:72:27:dd:9e:51:61:d2:
                    7c:f6:91:c1:c0:bf:a9:fb:1e:0c:c6:9e:5b:fb:d9:
                    48:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F9:6F:30:4B:79:D6:59:91:2E:CC:80:31:26:A0:FC:BB:71:DE:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/040747bf-b296-3115-ae7a-f373e043b0d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:8e:47:40:91:dd:27:76:24:3f:10:ad:31:d2:7f:15:51:00:
         f6:d2:8e:87:27:7d:46:eb:e3:df:a6:03:e6:5d:83:27:46:47:
         ae:87:c8:4b:d7:8d:d6:2c:7e:e5:5d:93:86:f2:ab:8f:9d:94:
         25:63:fd:f3:ea:d0:5a:a3:c0:d3:39:b6:e5:b1:07:54:fe:10:
         22:86:8d:21:d5:a6:5a:5c:41:ae:ea:cb:10:0d:6a:12:46:27:
         c7:15:8c:fa:56:67:c5:b2:10:96:fc:e6:a2:85:59:d8:97:bc:
         ef:5b:75:59:bc:42:c9:90:63:44:23:60:a4:0a:ad:b3:78:bb:
         b0:4b:74:33:41:8f:8a:58:3c:10:c2:25:64:89:14:8a:50:c0:
         a4:61:d4:8f:5d:c2:e8:0a:40:42:7b:3d:e6:3a:e4:a0:77:7a:
         cc:79:ff:a8:b7:02:4a:36:cb:4a:47:c9:cb:09:62:f7:6a:7d:
         d8:87:ee:84:76:93:dd:85:4d:55:79:85:50:93:1f:1c:cf:1a:
         4f:0b:03:b8:39:12:c7:21:0d:5c:bf:a7:52:e6:81:c0:6f:dc:
         5f:07:b8:7c:2a:f1:0a:47:74:d7:96:ee:d9:6f:f6:43:d5:b6:
         a0:34:ed:95:56:0f:bf:d8:a0:1f:82:b4:ea:0b:e1:02:4c:d9:
         fb:37:f3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----