Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ef0d232-af0d-3334-b2da-69a45f52b06b.roa
File:                     0ef0d232-af0d-3334-b2da-69a45f52b06b.roa (raw, json)
Hash identifier:          YP6zUScMhV9OGFfQczsrWQvA8IxjdAYQHwA3L9ue5x4=
Subject key identifier:   9E:4F:F2:90:8E:DF:19:C0:6D:33:50:09:45:0F:28:32:E0:80:F5:BF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0CA66DF861A46F0753AE80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ef0d232-af0d-3334-b2da-69a45f52b06b.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.158.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0c:a6:6d:f8:61:a4:6f:07:53:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=af25684e-ba7f-48c8-8da6-1463da8231fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:56:a2:e8:63:ee:13:bf:ed:8e:f3:96:88:f8:
                    a5:c7:1b:f8:3c:9a:6a:b5:e2:a3:dd:8b:a8:a0:d1:
                    63:53:49:24:ee:45:42:42:68:0a:b3:99:12:cb:3b:
                    c6:d5:ff:e4:08:f8:d5:e3:3c:7f:9c:26:cc:ba:9b:
                    9f:3e:b7:d2:45:fd:17:25:05:90:4a:71:cb:23:a0:
                    42:a7:15:b0:7a:d4:d9:41:4c:67:42:f8:c7:2f:1f:
                    78:8a:42:be:7e:48:82:9f:d5:5a:23:14:72:a6:28:
                    fb:d5:c7:c4:08:6b:79:3b:f2:49:e8:18:bf:41:48:
                    d2:04:05:57:93:ac:49:23:7f:e8:9f:af:87:e3:11:
                    c2:ad:92:71:07:26:e9:83:41:84:cd:1b:52:95:0a:
                    29:6a:7b:58:47:11:d5:32:d8:fb:27:91:97:17:80:
                    28:66:c8:2d:6c:ae:df:f0:5e:1e:74:fc:c1:74:7d:
                    93:d8:a5:23:70:10:04:86:c3:c9:d2:78:eb:d6:ad:
                    e9:80:f1:5e:3e:fa:2c:7b:89:ef:94:47:4a:5e:d4:
                    72:3a:22:b1:ee:9e:9c:69:09:d6:f0:d8:da:d5:73:
                    36:92:3b:76:ee:76:74:98:98:86:6f:47:61:da:7d:
                    6d:24:b5:bb:e7:e5:c3:b0:7e:f0:c7:92:db:05:8a:
                    3a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4F:F2:90:8E:DF:19:C0:6D:33:50:09:45:0F:28:32:E0:80:F5:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ef0d232-af0d-3334-b2da-69a45f52b06b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:f0:86:91:0e:52:b5:28:7b:b0:96:b9:f3:00:3d:9d:92:8a:
         f4:38:a0:fa:d8:7f:75:50:b3:47:21:25:c9:2e:dd:d1:dd:d7:
         98:ea:ae:8a:35:b3:df:3f:2a:b3:0a:91:1d:c5:a7:b8:7e:07:
         d9:21:82:c7:2c:2e:70:c4:39:0a:67:2e:7b:ca:ee:58:5c:13:
         7e:5e:42:ae:a3:5e:e6:44:a1:2a:02:2a:77:2f:7b:86:75:60:
         25:1e:01:2b:40:51:53:89:06:9f:c9:90:9c:63:0f:e2:e1:df:
         71:75:ee:2f:30:d6:8b:f0:5f:a5:d7:1a:87:b7:67:7b:b3:a2:
         25:bb:f6:8f:50:db:86:69:aa:69:a7:66:6e:10:06:4a:dd:e7:
         54:a3:fc:59:cc:ac:a4:22:94:27:75:8b:fe:1a:d9:ec:cd:af:
         32:ed:f2:1d:ea:70:d3:76:72:47:83:b9:04:2f:e9:a6:48:48:
         25:b8:5f:5a:a1:0d:af:0a:48:37:22:f2:a3:c5:26:ce:43:a6:
         72:f5:ca:a4:e0:ac:bd:8d:d1:54:90:ab:88:42:65:20:6c:ae:
         95:72:29:f8:ec:88:f9:18:f3:38:e4:d3:3b:95:8f:0f:5b:27:
         62:5b:bd:68:b3:cc:e6:61:fa:60:60:87:6e:c7:78:cf:fa:88:
         e5:b0:92:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----