Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0c1812a6-1587-3dae-ad23-b954f90ae50f.roa
File:                     0c1812a6-1587-3dae-ad23-b954f90ae50f.roa (raw, json)
Hash identifier:          1Kd9fm71pYNfxLdU68Akqcp11SLcKEFV8GTa+v8OC+g=
Subject key identifier:   A0:18:FC:44:27:E6:68:BC:24:CF:70:70:67:CA:D0:63:6D:DD:B0:D7
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A102B0E6FD30DEFB67FA980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0c1812a6-1587-3dae-ad23-b954f90ae50f.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.136.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:10:2b:0e:6f:d3:0d:ef:b6:7f:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=3b6027dd-4bc4-4303-99d2-12b706060e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f7:ff:a5:a5:81:9e:96:4a:82:f2:9c:2e:47:
                    00:57:be:df:75:c6:a4:74:02:8a:26:46:e6:cd:0a:
                    fb:25:5a:cb:be:14:35:98:dc:4e:6f:cb:45:f6:e3:
                    a5:5c:60:10:9d:bb:14:f8:ec:64:54:24:00:0d:23:
                    e3:a2:19:07:4c:27:11:69:97:71:f0:1f:a4:9f:73:
                    d7:00:46:51:69:41:d7:06:d7:45:12:6e:ca:c8:6e:
                    b0:39:a3:94:6d:01:70:bc:a3:92:bb:51:8d:24:54:
                    36:f6:b2:4d:f8:c7:90:53:f9:b2:6b:de:ed:c8:90:
                    cc:34:ee:53:38:c7:41:72:7d:f1:76:68:21:76:72:
                    28:4a:71:60:67:bf:fe:7f:d2:0a:b8:6e:28:2e:ff:
                    76:8a:ee:41:df:bf:03:34:d3:2b:35:17:27:35:16:
                    46:0a:aa:2a:db:69:68:a6:f6:d0:60:61:cd:1a:b3:
                    68:d5:8f:72:0f:7e:a7:b6:87:62:09:ce:ca:39:c9:
                    b8:a7:ae:e1:54:eb:db:72:ab:f6:4f:b3:76:32:d2:
                    97:90:03:a7:ce:a3:f4:0b:03:7e:cd:20:65:e8:c4:
                    e2:0e:c5:50:b2:f8:3b:4d:74:64:ef:ba:fb:80:b5:
                    e3:42:eb:50:5c:d6:0e:9b:c2:55:3a:72:5b:f5:d0:
                    ee:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:18:FC:44:27:E6:68:BC:24:CF:70:70:67:CA:D0:63:6D:DD:B0:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0c1812a6-1587-3dae-ad23-b954f90ae50f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:7d:b5:10:26:9e:3f:ec:63:92:0d:f7:9a:ab:f6:4e:e1:d4:
         df:1e:70:9f:5a:99:2f:a0:e6:0f:e3:3c:2d:27:51:22:27:2f:
         f5:c7:c1:d7:7a:4d:c3:dc:28:c6:0b:34:00:98:aa:5d:25:51:
         78:83:76:47:e2:6d:6c:8a:01:86:15:82:8b:c2:52:6b:1b:c0:
         73:d0:30:c0:4d:c5:6d:06:71:49:fe:a3:da:39:41:54:7f:69:
         4f:47:5c:6d:fa:16:84:20:ea:6f:98:6b:74:fc:b9:ea:c6:83:
         05:65:45:97:07:d4:eb:14:de:00:47:88:05:b3:39:7f:b6:fc:
         80:63:44:a6:78:84:fa:2a:10:b4:6f:10:fc:ff:7a:3e:2c:84:
         28:a9:00:d7:5f:72:50:e6:88:e1:4e:f6:34:c9:6d:32:a5:75:
         b5:7d:6f:50:77:01:5c:ee:e5:36:c2:1d:15:79:57:7d:fc:f2:
         b5:f9:42:3f:04:b6:80:06:ed:48:44:a5:ee:a8:18:00:e8:c1:
         7f:49:e9:11:67:19:7f:05:fb:5a:c2:4e:56:0a:a2:85:1b:0d:
         4c:c7:2f:6c:0a:ad:d3:fe:55:ba:af:80:6c:9d:e5:2e:de:cf:
         25:df:f1:32:2b:40:4b:6c:2b:1b:75:32:6a:25:6f:d5:4d:f2:
         87:b8:9b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----