Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0dd70d7e-e312-36f6-a107-b7d157d95be7.roa
File:                     0dd70d7e-e312-36f6-a107-b7d157d95be7.roa (raw, json)
Hash identifier:          6EfvR5iJgpnyxUNIj4EidMBLIpK3Yed1thUyZeMw5mU=
Subject key identifier:   AA:8E:3D:20:33:7F:32:E4:34:F3:19:2A:6E:9B:C8:33:E8:8B:1C:8C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309FF96153D32207FF8B7F3C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0dd70d7e-e312-36f6-a107-b7d157d95be7.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.169.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:53:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ff:96:15:3d:32:20:7f:f8:b7:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=310a209b-621a-4884-9f5f-73b324af6491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fa:89:af:14:d5:3c:99:01:0e:66:8e:fb:98:
                    6b:aa:74:3b:f2:f0:f9:10:80:de:4a:55:cb:9f:82:
                    4d:20:ce:ee:e8:82:cc:cc:ac:a8:7a:cb:5f:7e:c0:
                    a3:f0:c3:65:fd:cb:dd:d2:41:7c:ca:80:37:e9:a0:
                    9d:a5:25:43:02:83:c9:8c:db:01:9e:72:c0:78:1b:
                    e2:30:79:9e:be:93:a0:14:9e:3c:2c:78:5f:d3:f8:
                    8f:8c:0e:03:2c:fa:c9:62:54:2c:4b:e7:63:92:6d:
                    2b:b6:7c:43:f9:9f:2e:a9:03:65:37:e0:5c:ee:04:
                    43:8c:37:56:d0:8b:60:45:33:a5:4c:04:e9:a7:8b:
                    47:90:98:f1:13:87:b0:5e:3f:18:1b:50:c3:29:4c:
                    0c:f3:2b:1b:9e:aa:34:c1:ae:8e:d9:c1:41:fe:90:
                    91:df:65:a4:a8:6e:5f:7b:3c:d6:c9:14:96:d3:54:
                    2e:d4:ac:18:ea:e0:be:c2:99:49:78:9a:96:db:cf:
                    97:bd:4a:87:00:a9:0d:38:77:43:d9:0e:e7:6f:48:
                    cc:7f:1d:a3:d2:de:0c:ba:87:92:98:8a:be:f9:c8:
                    ed:3e:d5:ed:9b:3b:a6:5b:eb:b6:8a:e6:18:11:b5:
                    76:a9:69:70:d7:43:51:d6:a2:50:90:bf:bd:04:b4:
                    71:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8E:3D:20:33:7F:32:E4:34:F3:19:2A:6E:9B:C8:33:E8:8B:1C:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0dd70d7e-e312-36f6-a107-b7d157d95be7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:9e:35:65:6e:43:77:fe:a6:ed:93:d3:91:71:a7:74:4c:60:
         28:0c:5d:16:fe:ae:e6:96:64:bc:71:74:d0:99:94:32:49:8e:
         a1:35:55:c2:74:87:1a:4f:e3:6c:14:1a:d2:2b:f8:71:1f:92:
         a6:0d:e9:56:09:f8:f3:67:19:0a:d2:ed:a8:20:33:4e:6c:7f:
         87:34:2b:aa:9b:be:96:ba:14:68:f2:04:17:03:99:39:11:ab:
         f1:e8:1e:f2:90:59:22:fc:18:2f:b5:de:5f:57:6a:dc:1f:55:
         a8:99:f6:83:23:48:22:10:cd:18:18:6b:83:6f:29:ae:b2:f2:
         6e:95:92:bd:4c:a3:0f:fe:e1:f2:14:b1:b8:c9:84:62:52:5d:
         78:58:c3:1f:58:99:37:3d:80:fb:4c:94:35:b3:f0:17:b4:a5:
         1c:ca:17:dc:b1:61:d4:c1:5e:f7:7d:25:67:60:aa:e7:ab:21:
         d2:11:08:a6:c8:f2:26:fc:03:89:9c:a9:f6:b0:a4:6a:2e:e7:
         d8:51:53:7e:73:8d:c8:95:df:db:49:81:ff:82:a9:a9:c5:04:
         c2:19:15:bf:13:c0:57:9a:c5:84:c4:1a:31:50:d0:64:54:28:
         7a:cd:d0:33:8f:6e:33:41:83:2b:2e:26:5b:4d:87:e5:fa:09:
         2e:d9:86:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----