Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0740920c-b8fd-3500-9679-64bb9a158bd0.roa
File:                     0740920c-b8fd-3500-9679-64bb9a158bd0.roa (raw, json)
Hash identifier:          oVnVjcV6EzjkH270EtsZdPwvzzbsvFBwiQb54w63F7A=
Subject key identifier:   23:55:2A:9A:3C:59:AB:FD:D9:69:D3:81:AB:66:E2:07:64:78:BF:31
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A1F3E2E4BD5583CBAEF2840
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0740920c-b8fd-3500-9679-64bb9a158bd0.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.144.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:36:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1f:3e:2e:4b:d5:58:3c:ba:ef:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=a692b391-b760-42b0-8ad9-bcd8f1b1c413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9c:3b:66:88:60:eb:9c:ab:a5:84:2d:68:fe:
                    65:3c:03:6c:dc:2a:77:08:cb:7a:b9:39:e6:f9:ae:
                    f2:38:73:4b:d0:83:99:80:eb:0f:97:d3:4b:31:6c:
                    31:cd:85:ec:34:1e:bb:18:a3:00:f9:4b:6a:6b:3a:
                    01:d4:ec:8e:86:83:c6:75:7a:17:39:60:c2:17:10:
                    ff:d0:1f:4f:8e:13:a9:4f:9d:a8:b1:20:3e:8c:78:
                    5f:9a:d1:75:f2:2d:ae:e4:ea:cf:c9:8f:16:f4:bc:
                    c9:c8:6d:71:6e:1f:21:c2:65:0b:c0:8d:a6:ce:6a:
                    ec:5e:73:b0:dd:ac:c6:12:29:d3:ad:31:b1:7e:1a:
                    a8:7b:4f:75:90:28:e7:be:52:67:d8:24:7d:71:30:
                    65:24:c4:ad:7a:55:9c:37:f2:a7:46:74:23:10:ba:
                    ac:61:4b:cb:7e:f5:8c:6f:d7:f5:58:9d:03:6c:37:
                    ee:50:d9:bc:04:20:df:e3:6f:58:32:e8:0c:94:ca:
                    78:fa:3f:fc:ce:ff:1f:49:b8:58:35:c1:5a:a4:4b:
                    db:64:51:e1:9e:eb:99:7e:5b:a9:89:a0:67:cb:87:
                    33:56:00:b4:35:8e:09:15:f0:5c:10:27:9a:ac:f6:
                    3a:67:05:46:98:5e:91:c2:47:48:d7:26:95:2d:36:
                    65:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:55:2A:9A:3C:59:AB:FD:D9:69:D3:81:AB:66:E2:07:64:78:BF:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0740920c-b8fd-3500-9679-64bb9a158bd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:30:7c:ea:55:38:cb:94:c1:6c:7c:14:b3:c7:8c:75:91:cf:
         84:e9:7f:7d:d8:98:0e:a0:d7:08:46:b1:b9:82:8a:e7:84:e9:
         54:30:f5:a2:23:9f:e5:c7:08:ec:9f:3b:e2:2f:a8:68:69:88:
         67:05:7c:40:b3:d3:7e:b5:96:06:3b:0b:36:af:53:6c:56:9a:
         76:3a:89:dc:dd:f5:8d:de:ff:c5:a5:04:6d:6e:f5:07:f4:c6:
         d1:af:60:7d:fc:17:b6:26:a3:9a:85:a9:a4:74:c2:08:e0:31:
         65:97:7c:5e:30:cf:38:d5:61:f3:03:ce:a4:7e:bb:73:01:45:
         8e:4d:2a:be:2c:ae:6b:e1:fa:b2:57:41:82:d0:77:fa:70:bb:
         26:a6:a1:66:44:73:d7:1c:49:d4:d4:1f:48:05:61:2a:5f:89:
         ec:d8:d4:5b:6a:5d:15:38:b4:7b:d9:50:13:60:ce:b4:40:a0:
         9e:15:92:bf:dd:65:31:bd:2e:bf:39:a9:01:10:4c:77:d7:64:
         49:f0:ad:65:3c:0c:74:1e:2c:a8:7d:4a:c6:e2:97:c9:58:b2:
         82:05:de:9d:b1:a5:69:32:bf:25:f6:48:ab:bd:ee:ba:08:76:
         2f:d3:69:3a:64:66:29:2d:a5:23:2d:bf:7c:11:9d:44:1b:65:
         fb:9d:df:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----