Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0a57a79f-7fb7-31dc-94f9-45b1da2a1f74.roa
File:                     0a57a79f-7fb7-31dc-94f9-45b1da2a1f74.roa (raw, json)
Hash identifier:          HT+UNptrAEL14ln7DaQ1uXA4J4uXqN4V1DZxt67QkU8=
Subject key identifier:   A6:DE:95:B4:AB:2F:17:16:B4:0D:A0:EC:C0:E6:6C:69:B0:56:34:70
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A15EA8744772DC04CB356C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0a57a79f-7fb7-31dc-94f9-45b1da2a1f74.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.215.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:39:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:15:ea:87:44:77:2d:c0:4c:b3:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=9b3346bc-4cff-4d43-ba6f-b977e9e7cff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:68:77:d7:15:88:0b:6b:41:b8:52:9c:d8:1f:
                    87:4f:e4:39:12:43:49:88:a6:b4:9d:c6:7a:72:55:
                    8b:34:d0:b7:c7:08:9a:bc:87:3a:c7:a5:55:1b:30:
                    dd:12:0d:86:a1:a2:e6:90:33:89:78:aa:28:05:3b:
                    d3:0e:17:68:7d:0d:5f:2f:d7:97:35:bd:fb:29:bf:
                    84:e8:50:71:af:6b:6a:1b:35:07:77:e4:7a:ea:3a:
                    88:0b:1f:6d:d0:61:eb:97:5a:85:cc:32:21:d2:1e:
                    fe:5b:a9:55:e3:af:22:5b:a3:12:fd:d4:b2:6a:10:
                    17:39:21:c5:61:92:6e:f3:2b:42:8a:85:f3:24:10:
                    7b:64:19:f9:3c:29:5d:d9:8b:16:d3:e4:41:4b:af:
                    60:28:da:8b:97:28:4d:31:41:d9:2b:fd:6c:3e:fc:
                    2d:a6:e5:ea:4c:af:c8:ef:95:c6:25:1e:7c:31:70:
                    c1:6c:62:37:53:df:78:21:0f:f5:3f:6e:47:3d:79:
                    3c:cd:c0:ad:fe:97:23:11:9c:c6:18:e1:06:6e:c0:
                    a0:5a:6b:5e:d7:ba:70:5e:3d:68:ee:36:94:5b:e8:
                    d7:a7:2d:48:45:a7:e6:94:8e:6c:5f:fa:47:04:30:
                    56:fb:f3:99:9f:cc:56:ea:15:08:e4:ec:4e:af:09:
                    04:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DE:95:B4:AB:2F:17:16:B4:0D:A0:EC:C0:E6:6C:69:B0:56:34:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0a57a79f-7fb7-31dc-94f9-45b1da2a1f74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:2f:ff:17:2d:10:c7:2d:38:1e:a4:b1:1b:ec:7e:88:68:62:
         4a:8f:f3:b6:f8:a4:24:ca:59:fa:3c:d7:91:1a:f0:47:d0:e9:
         6e:09:55:95:31:87:b2:af:00:c9:d8:c9:17:a9:9f:25:24:4b:
         88:20:66:42:8f:e1:fa:5a:cd:d4:00:8e:4e:e1:cd:8f:fd:71:
         3a:97:9a:aa:2e:bb:43:71:cf:a2:3e:4b:2e:92:86:c6:d4:32:
         7f:78:bd:2e:69:f9:0f:47:89:bd:20:34:de:d9:54:49:12:a2:
         86:47:54:4c:0c:4d:b1:54:31:08:05:f7:1f:d0:34:6f:03:cf:
         19:50:50:ca:0a:87:10:a6:5a:3f:61:4f:f8:a4:93:e4:1c:96:
         58:f2:0d:32:47:ea:ef:75:47:e2:55:4d:65:45:35:88:12:c6:
         e6:a2:f7:9a:20:4c:bb:7a:92:6d:d5:98:ef:9d:5d:17:69:77:
         be:f7:a9:df:64:12:2d:36:cd:b4:dc:bc:4a:55:e9:b6:ca:1a:
         68:7a:3f:8c:1c:4c:13:65:f9:06:94:8d:70:4c:a5:93:b8:df:
         94:4b:09:1c:91:19:f4:1d:7d:bc:38:bc:9e:20:4b:56:13:71:
         12:10:7c:4c:db:70:b8:1a:6d:cd:02:ef:e5:aa:d3:24:30:f1:
         fe:48:9f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----