Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/10cfb629-252f-3023-ae62-ac3104d25671.roa
File:                     10cfb629-252f-3023-ae62-ac3104d25671.roa (raw, json)
Hash identifier:          06VzpA8aNPG7BqmeI9OiW8LobPE8XGOdRXvBkTssHYQ=
Subject key identifier:   56:D6:FB:D9:C7:C1:4A:E4:C3:51:EE:90:2E:01:74:BD:D8:CF:88:95
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285844720B2CCBB572994B59540B80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/10cfb629-252f-3023-ae62-ac3104d25671.roa
Signing time:             Wed 03 Jan 2024 12:00:00 +0000
ROA not before:           Wed 03 Jan 2024 12:00:00 +0000
ROA not after:            Wed 29 Jan 2025 05:00:00 +0000
asID:                     395973
IP address blocks:        104.134.190.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:58:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:72:0b:2c:cb:b5:72:99:4b:59:54:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan  3 12:00:00 2024 GMT
            Not After : Jan 29 05:00:00 2025 GMT
        Subject: CN=010cd262-73dc-49c9-b29f-428489526094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:63:19:55:59:ca:97:18:e9:ec:b1:38:b0:ba:
                    39:80:98:03:ad:6c:3b:36:49:72:8e:d1:0d:f2:84:
                    5c:1f:d7:54:fd:00:cc:b6:6a:3f:2d:ee:d7:99:d7:
                    a8:18:22:48:cc:84:35:2b:ed:23:68:4c:20:8b:fe:
                    21:4b:df:57:cd:9f:9e:10:e2:a2:90:38:19:ae:16:
                    27:86:da:25:fd:cf:05:96:07:5b:cc:27:a1:81:75:
                    c7:0e:59:33:b3:fa:c8:b3:43:bf:e7:78:95:35:3b:
                    a8:4b:a3:c1:ca:30:ff:9d:44:54:98:e0:a8:15:c6:
                    f1:61:c6:69:6a:11:76:84:37:12:b3:d9:38:72:72:
                    95:1e:c9:97:ef:19:e6:6f:5a:2d:40:ee:a4:60:7c:
                    7c:5a:6b:ed:d0:22:0a:08:99:ed:b3:d1:b3:15:e6:
                    51:db:fc:7b:e6:03:29:fb:80:23:16:f3:f5:7f:dd:
                    04:98:8a:dd:e8:08:1c:9d:4a:5b:10:c8:d2:ef:c9:
                    d4:28:ac:95:70:02:0c:7b:bc:be:a5:81:c3:7a:8e:
                    62:42:6a:62:fd:82:3d:d4:3d:f5:57:05:35:c9:35:
                    e7:40:5f:62:09:63:ec:66:1c:58:4d:88:6d:4d:f4:
                    5f:d4:96:3c:6d:72:cb:51:f4:35:dc:2a:e4:37:09:
                    f2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D6:FB:D9:C7:C1:4A:E4:C3:51:EE:90:2E:01:74:BD:D8:CF:88:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/10cfb629-252f-3023-ae62-ac3104d25671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:6c:ca:f3:a7:be:12:93:26:e6:20:2b:63:21:35:5c:4a:0d:
         d2:29:b4:7d:46:98:df:2e:6d:e9:46:fb:3f:c5:e2:6a:6d:79:
         b9:41:eb:48:66:05:ad:bd:c3:be:79:18:64:a6:2d:2d:d3:05:
         a5:6c:be:33:b9:34:a0:32:60:2f:00:15:e6:3e:62:ce:e3:c9:
         c0:9d:9c:44:75:cf:cb:7c:ef:45:08:7b:bb:47:24:f9:a6:95:
         67:f7:b9:35:e2:67:1b:92:34:36:ea:fd:9f:03:9d:cf:2d:79:
         6e:60:3e:e5:c0:81:d7:39:44:f8:46:38:17:b7:2e:4e:a7:03:
         44:e1:1f:6a:13:80:f8:c9:ab:bb:52:04:69:a9:02:6b:21:b2:
         3a:d0:a8:65:62:04:34:80:df:a7:2c:27:2e:aa:32:ff:aa:a5:
         e1:ca:e9:18:9d:3a:2f:5c:de:10:f9:5d:1c:65:b8:b1:3f:63:
         71:af:5a:1c:bb:d3:c4:54:62:cc:18:d4:c9:08:e9:85:2a:d6:
         22:d0:fb:e9:01:93:03:b3:42:fc:0f:14:26:69:94:76:30:93:
         36:a9:0f:a4:29:e4:be:e7:c7:46:fe:6e:92:83:83:0b:8a:ec:
         f9:49:8c:82:59:15:76:21:1b:7e:f0:2b:63:7f:dd:17:c4:84:
         6c:b6:2a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----