Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1270d4e1-82eb-337f-a3d1-c07b68c3bc38.roa
File:                     1270d4e1-82eb-337f-a3d1-c07b68c3bc38.roa (raw, json)
Hash identifier:          fQFnTbuWO+KaMzzt2kwnSs7c9zIhAFubdM45L0ashTs=
Subject key identifier:   94:6F:99:7C:1B:2C:73:02:62:5B:E1:E8:B6:04:0F:E8:C4:4B:2F:4A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A240AE27A92FFA08A640140
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1270d4e1-82eb-337f-a3d1-c07b68c3bc38.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.253.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:24:0a:e2:7a:92:ff:a0:8a:64:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=4ce09873-b6aa-4bd1-8701-f6eed3b48ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ce:8b:92:b4:dc:ab:ac:21:f6:1e:b6:4e:93:
                    b5:44:ef:c5:3e:24:dd:97:93:92:ae:b3:6d:34:f2:
                    17:80:6f:7a:48:ea:cc:9f:22:18:d2:48:4a:03:4d:
                    e2:a2:4d:e1:f1:1a:90:4a:74:1b:8c:9f:43:06:69:
                    d8:03:28:1c:e8:fd:73:e7:74:82:fb:2a:5f:46:ca:
                    86:cf:43:3b:15:08:d9:b9:ef:2f:03:81:4a:73:62:
                    18:87:df:b6:a7:f1:f9:d4:07:b9:b2:c4:24:10:1b:
                    79:d0:3f:38:08:f6:a0:c9:ee:6a:fb:42:4b:78:1e:
                    9b:6f:eb:7a:c2:73:65:13:1a:8c:4e:8c:d4:2b:3d:
                    b4:70:93:44:aa:c1:d5:74:b2:a1:97:37:4c:fd:87:
                    80:5e:c8:cb:1e:12:fc:2c:3d:7e:1a:3a:73:af:84:
                    9b:75:ee:b4:ff:03:5b:70:5a:b2:c8:0e:15:5f:b8:
                    19:ec:7a:c9:ea:b2:ec:a6:fa:48:00:3c:8a:26:b6:
                    2b:84:74:ed:22:81:50:51:65:18:d7:65:03:2f:bb:
                    fa:a5:b7:88:d3:21:36:12:7c:b7:99:88:4d:19:b7:
                    f2:e5:ec:55:26:67:18:6d:f6:61:5f:ef:c4:d8:d9:
                    48:ab:32:83:9e:0f:3c:40:f9:e6:69:bb:f7:f0:b4:
                    28:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6F:99:7C:1B:2C:73:02:62:5B:E1:E8:B6:04:0F:E8:C4:4B:2F:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1270d4e1-82eb-337f-a3d1-c07b68c3bc38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:45:17:e7:8e:57:13:bc:87:85:45:c4:a4:4b:f3:e9:e8:95:
         64:09:d2:51:ad:de:82:87:fc:f5:0e:dc:85:a8:d2:b7:8b:f4:
         ce:d9:28:fd:46:72:b7:cc:1f:a3:9e:e1:40:5e:9c:ca:2c:9f:
         c0:d8:b4:e6:0c:39:32:cc:e5:3c:26:ed:ea:e2:54:7b:68:84:
         de:f0:78:ac:3c:9a:eb:02:dd:73:a8:ad:ca:94:cf:5d:1d:3c:
         aa:ac:02:38:05:c9:d7:a5:44:0c:c0:b6:89:02:8d:db:95:30:
         50:0d:b8:eb:43:aa:35:09:25:3e:59:c1:80:c1:6e:40:d3:f8:
         69:9d:44:c2:24:ed:e9:b3:bc:8d:45:12:6e:c6:e1:d2:7e:41:
         17:d6:e8:70:44:a3:d2:ba:39:09:2d:1b:9d:a8:f7:d7:86:ed:
         78:3b:27:fd:9f:3d:85:44:5b:f6:2c:49:e2:b0:79:23:97:9f:
         6a:1a:33:57:4c:fa:cf:cd:f8:e5:d7:e8:09:94:13:61:bd:8b:
         7f:c7:42:87:df:ab:fc:90:36:5c:49:1d:b3:2c:b9:c3:2f:0f:
         43:07:c7:6f:ba:ac:bc:82:c1:93:0d:84:ac:0f:6f:df:89:81:
         08:b4:ad:24:b4:22:1a:fb:41:da:66:ea:6b:62:47:a3:6f:d8:
         86:4d:3f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----