Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/12d14766-d1f2-3d43-8455-03d97d6f69e4.roa
File:                     12d14766-d1f2-3d43-8455-03d97d6f69e4.roa (raw, json)
Hash identifier:          V4muo8ts1rO3jyPcsP/nic85gC6joosprliOATYJ4Hw=
Subject key identifier:   C7:2C:CC:65:C5:E4:25:FA:7F:E1:87:AF:3C:C3:69:DD:37:3F:2F:66
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A167B2C8ACE1F15AF8C36E0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/12d14766-d1f2-3d43-8455-03d97d6f69e4.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.132.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:16:7b:2c:8a:ce:1f:15:af:8c:36:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=2b1ce249-f293-4d30-8326-c1eb09c05c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8c:df:84:07:5f:04:d9:86:72:39:91:99:29:
                    16:c9:49:d0:5f:3c:78:5f:6d:a9:53:40:7d:70:bf:
                    46:97:45:a9:89:d6:84:5c:3d:56:63:c9:86:11:ba:
                    11:a3:df:ca:06:ff:e2:05:a8:fc:4b:e5:ad:8f:e0:
                    e3:5c:1e:c6:d0:29:58:7f:e5:4f:90:46:8e:6f:48:
                    f2:90:b3:b4:81:d1:17:9b:28:79:58:7d:d4:b7:ff:
                    a4:b0:d5:15:e9:f7:32:9f:62:96:68:6d:78:9d:6a:
                    80:ee:b8:b7:94:b6:ea:ad:bb:24:a4:a3:27:0b:ee:
                    10:15:01:6e:46:c0:2c:4f:d8:ab:32:c6:f9:00:ec:
                    e2:df:9b:6f:fa:5c:a6:ad:57:b1:e1:9d:0a:c1:27:
                    25:af:c0:76:d3:a6:d0:c8:13:29:68:e1:f1:99:c5:
                    56:94:1b:89:f7:61:ae:dd:e4:51:94:34:b1:4a:57:
                    bf:5e:56:6b:2d:c9:4a:a7:77:2f:f3:07:03:df:c8:
                    c2:45:9b:22:a7:ee:96:b1:c4:1b:91:ee:30:2a:79:
                    bb:16:62:90:5a:14:04:78:70:a8:33:01:82:6f:c9:
                    0a:19:ed:6b:46:b2:49:93:51:d1:ef:31:55:f2:bc:
                    50:8b:c1:0c:68:82:4e:0c:06:ef:42:6a:ca:17:38:
                    83:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2C:CC:65:C5:E4:25:FA:7F:E1:87:AF:3C:C3:69:DD:37:3F:2F:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/12d14766-d1f2-3d43-8455-03d97d6f69e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:af:25:18:cf:8b:be:77:4d:41:34:8f:85:6e:d2:5f:f1:1a:
         c5:97:0d:85:fb:08:42:00:4b:1b:b6:89:e2:dc:8a:a1:68:78:
         67:80:d1:45:4a:d9:98:9e:9b:89:50:d0:77:36:4e:0a:ee:e5:
         2f:2d:27:9b:38:6b:72:bf:e2:ab:20:bc:b6:50:3f:4e:dd:26:
         28:29:3f:1b:72:5d:2c:0d:2a:ec:71:59:0c:57:d0:b9:21:08:
         38:ea:84:b8:98:2f:8a:0e:18:9b:9d:2f:2f:1d:cb:64:d6:99:
         c5:47:69:0f:7e:7c:b3:48:88:8b:12:c9:d4:af:97:97:06:4e:
         f7:be:60:a2:c0:a5:7b:fa:48:04:de:0e:29:89:95:9c:82:f4:
         f8:67:0d:b5:cf:4b:f2:f1:83:dc:cc:5a:11:0f:3b:1e:ca:ed:
         d5:f3:88:65:cc:dd:d7:1e:f3:a1:bf:ca:63:53:ea:2d:da:4d:
         9c:fb:95:f3:ca:cc:5d:88:55:98:17:73:7e:af:63:dc:0b:cc:
         9d:e0:ac:ca:a2:60:d0:eb:4a:d2:c4:65:25:45:15:95:7a:27:
         7a:35:8d:db:2a:3e:17:40:5a:71:66:d2:10:81:8f:71:40:5e:
         30:f5:ee:aa:91:4d:80:57:62:8d:5b:98:d9:0e:86:00:ac:ad:
         4b:5c:ae:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----