Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ef7a4f5-c056-349f-b69c-84a5a531a2f5.roa
File:                     0ef7a4f5-c056-349f-b69c-84a5a531a2f5.roa (raw, json)
Hash identifier:          DE0cMVLRd79WrhgQjGnQkBDeaQd6QZjoBRt0XRbKmgw=
Subject key identifier:   A5:F4:AE:54:50:9A:B5:E6:6F:27:3C:D9:0C:F0:48:1A:A2:AA:ED:F7
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A1C5BCC8BA6614B3D7DE900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ef7a4f5-c056-349f-b69c-84a5a531a2f5.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.32.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1c:5b:cc:8b:a6:61:4b:3d:7d:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=a3381d10-7847-4656-803a-1f43abf06705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2c:42:13:89:28:23:64:0a:90:e9:61:0e:a7:
                    16:07:ea:00:84:8d:20:5e:97:8b:45:ff:f0:2e:12:
                    ec:68:11:ea:0d:c0:1d:68:1b:48:95:6c:59:7b:ea:
                    c9:2e:08:f8:be:78:29:4e:88:53:4e:81:a9:f0:b8:
                    90:48:34:1a:72:f6:48:15:83:bc:f6:18:c8:57:7a:
                    39:46:3d:7e:df:12:68:87:c7:86:ae:40:47:87:68:
                    61:d3:f6:1b:16:ce:bf:ad:ea:81:67:29:8b:be:85:
                    15:ea:ee:18:98:c3:89:08:c6:db:56:4f:90:a3:da:
                    9b:bf:16:69:6a:ac:b9:42:d4:96:b8:a1:3a:f9:e3:
                    26:94:4e:69:6e:29:09:12:74:b2:78:bd:e5:71:f6:
                    d5:08:47:78:41:f4:b4:6c:99:87:ce:89:8a:19:be:
                    48:68:46:fa:c7:c5:19:d4:bf:bc:2e:cb:00:e9:94:
                    84:c7:31:3e:91:4b:f1:23:c5:1d:6c:1d:b4:87:95:
                    0b:50:f2:4b:e0:32:94:ff:57:4e:f5:d4:b3:67:2b:
                    7b:bf:ed:ea:39:8d:8b:57:c7:4c:8d:70:e3:8f:98:
                    08:fc:95:f7:f2:48:49:8b:bf:49:be:f4:66:55:8b:
                    3f:f7:fe:3e:04:f8:10:25:9e:86:15:60:7e:22:e8:
                    89:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F4:AE:54:50:9A:B5:E6:6F:27:3C:D9:0C:F0:48:1A:A2:AA:ED:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ef7a4f5-c056-349f-b69c-84a5a531a2f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:d1:81:54:db:82:0b:ef:0a:53:74:a7:87:75:bc:f7:56:53:
         7b:f9:da:23:ce:d9:d6:91:85:b3:84:8a:2d:40:dd:7e:ca:76:
         99:d7:93:cc:c5:aa:f6:ec:c1:03:7d:b1:f0:ff:ba:a7:5d:89:
         78:d9:1f:c9:3b:f4:fe:ec:d3:20:8e:ae:c2:ee:fa:b4:47:d3:
         07:45:63:28:45:07:43:72:d5:52:08:91:19:aa:99:5b:eb:eb:
         56:4e:25:ef:25:c9:cd:d8:d5:a5:96:3c:2d:26:19:f9:fb:5c:
         93:18:c3:ef:22:18:6a:e4:b3:db:2c:29:cf:32:a2:2f:b6:9f:
         74:51:fc:d3:da:62:27:98:48:90:ea:35:fe:c7:6d:19:c8:4c:
         a0:bb:e0:81:b6:f5:40:3b:19:c6:b4:fd:73:23:39:22:7b:70:
         91:3d:0f:d3:99:3e:e1:30:72:df:b2:67:d3:db:a9:78:7a:96:
         66:bd:64:32:79:09:37:61:78:1b:c5:43:80:59:da:ee:a3:6f:
         b3:30:78:c2:af:df:da:ae:1f:77:f1:e8:2d:30:4a:4a:ce:30:
         32:36:1d:90:e4:91:8b:87:8e:65:bb:f3:f9:f8:41:df:3d:f9:
         54:3b:c1:90:4e:3e:c1:73:aa:01:4f:9d:3d:22:2b:29:29:b9:
         cb:a3:f7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----