Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/15a6457b-b0b1-3fb8-990c-4c28d997cf85.roa
File:                     15a6457b-b0b1-3fb8-990c-4c28d997cf85.roa (raw, json)
Hash identifier:          djayUvGupEBX/KKW+gbfMMVvvT3jR9XLzT+JfrHh10g=
Subject key identifier:   8C:EA:7A:BC:7A:DA:3D:03:9F:BD:AF:F8:9A:1C:5F:3D:83:8F:85:60
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0DC6475F380675B1609C40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/15a6457b-b0b1-3fb8-990c-4c28d997cf85.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.182.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0d:c6:47:5f:38:06:75:b1:60:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=3a1598b8-7532-479a-8ba3-9ec21810818a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f3:c4:af:dd:63:fd:f3:bf:88:8f:88:da:f6:
                    46:45:82:21:4b:d8:ca:06:dd:85:fd:43:47:af:4a:
                    7e:6a:7a:3f:45:6b:36:08:9d:0a:b2:72:88:c7:a5:
                    7f:63:ca:f2:0a:6a:50:cf:48:7f:38:82:8e:06:90:
                    f8:db:41:92:66:8f:58:e2:47:16:5a:ed:6d:61:59:
                    30:08:a5:67:af:34:f3:d6:3a:8f:c3:e7:7c:70:44:
                    68:f4:07:97:0c:6d:51:48:cf:54:e6:af:42:2f:6a:
                    19:c0:3d:c0:05:53:1a:62:59:29:25:19:30:b9:f2:
                    49:1b:db:4a:55:eb:c1:7f:dc:ca:1d:d8:de:62:03:
                    c2:ae:d8:53:56:68:7e:40:94:d0:4c:1d:c2:bb:0c:
                    76:15:0e:60:fa:91:79:78:83:6f:13:de:77:4f:8f:
                    39:f7:7e:4f:be:8a:2b:11:93:ea:95:06:eb:37:0c:
                    6e:0e:6e:c9:6c:37:da:d9:7e:4b:fa:33:d8:91:bd:
                    42:f9:83:23:0f:3a:be:ba:80:fb:43:03:e3:ce:84:
                    6d:b4:e0:03:b1:df:21:ce:45:cc:31:61:a1:56:bf:
                    e4:a0:54:93:cf:ce:cb:71:1c:af:91:78:c7:4a:ab:
                    09:01:df:3e:dc:7e:16:bc:49:f6:47:c7:8a:bc:28:
                    65:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:EA:7A:BC:7A:DA:3D:03:9F:BD:AF:F8:9A:1C:5F:3D:83:8F:85:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/15a6457b-b0b1-3fb8-990c-4c28d997cf85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:06:83:2e:38:89:52:a1:b7:06:7e:f7:80:a6:62:0e:dd:06:
         31:d6:95:79:db:0e:46:8e:9a:b6:75:2e:7e:c5:40:0c:1d:ff:
         63:03:11:9a:32:f2:ae:00:e1:f5:34:cf:e4:58:d3:3d:04:af:
         4b:6b:0f:cf:cf:f1:6c:a3:fa:f7:3b:81:36:74:15:9f:a1:34:
         2d:e4:b6:1a:a5:d0:76:b4:d8:63:a2:bf:ff:1a:dc:11:fb:fd:
         34:03:0c:c8:cc:c4:b0:41:ff:8f:ec:e3:8e:71:75:3b:07:5e:
         91:7a:82:04:e3:8f:ad:9c:7a:07:8f:f2:36:67:d8:3e:72:14:
         b2:1a:75:5d:d4:bb:eb:51:0a:df:b1:4d:1d:06:39:f7:5c:89:
         f6:76:e4:01:57:a4:2b:63:6c:f6:cc:b4:97:f8:32:ec:23:42:
         35:6e:a6:44:29:7f:76:d6:07:6e:8d:67:22:4a:6a:10:2b:53:
         5e:46:a8:ce:ed:41:62:bc:fb:5b:ab:2b:ca:9c:1d:6f:84:5b:
         74:19:b9:e9:2e:52:53:96:ee:8b:e0:e4:bb:53:80:5f:b5:54:
         43:aa:cd:c0:6b:70:68:58:79:ae:20:18:48:82:6e:a2:5c:c4:
         b0:a3:c6:19:97:3f:b8:5e:0f:dd:45:35:46:b6:76:92:27:b8:
         ec:88:45:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----