Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a101f7e-ea2a-342a-9c0f-34f169b81472.roa
File:                     1a101f7e-ea2a-342a-9c0f-34f169b81472.roa (raw, json)
Hash identifier:          BaewgIQZPZDmq5vs4pf0XF49wncbaOVOUQwKEAMqLz4=
Subject key identifier:   9D:D9:5F:EA:9E:86:2D:07:8D:24:81:06:BD:ED:C0:45:C7:C7:9B:37
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A21E402AAA3F80FAE2DB900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a101f7e-ea2a-342a-9c0f-34f169b81472.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:52:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:21:e4:02:aa:a3:f8:0f:ae:2d:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=a4f91fce-4366-4ae1-8240-f1b0ed96fc20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c5:70:d0:c8:48:e8:04:16:dd:f5:02:c5:fe:
                    4f:d9:fb:29:52:a6:1a:58:f1:15:7d:3c:f0:64:8d:
                    cc:d2:2d:7e:ab:12:41:26:37:18:0c:8c:98:08:7e:
                    3a:05:bb:a4:c8:0d:dc:ee:0c:75:ca:4f:a4:bf:68:
                    30:85:f7:56:84:05:bc:8d:e7:a3:0d:00:0b:0d:b6:
                    8c:d4:0c:86:a5:de:d1:71:e4:ac:0e:c4:33:0b:98:
                    b4:79:47:bb:74:cb:3e:67:0b:a2:5b:11:45:0b:e7:
                    3e:db:08:e7:60:72:2e:7c:8f:70:87:95:41:ec:6f:
                    21:9e:d1:0a:a6:df:bb:b4:00:62:42:ed:c9:95:d9:
                    f8:82:75:c3:e6:2f:5d:07:f3:0e:02:b4:5b:51:5d:
                    a6:e5:81:3e:9b:1c:21:7c:93:35:a6:74:d8:d2:0c:
                    43:76:66:ca:96:69:9a:5f:f2:7d:11:4c:3b:d4:13:
                    51:9e:15:a1:51:1b:d1:71:ed:22:45:71:70:70:8c:
                    e2:6e:4d:17:6e:40:a3:b5:84:49:2a:dd:86:91:2a:
                    90:90:4f:73:55:13:c6:ce:10:2b:dd:7b:d4:51:1d:
                    a3:64:24:5d:e9:fb:1e:d8:a8:6b:4f:c5:10:30:76:
                    b7:6d:3f:46:05:b8:fc:d3:d1:09:3f:63:76:94:9b:
                    30:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D9:5F:EA:9E:86:2D:07:8D:24:81:06:BD:ED:C0:45:C7:C7:9B:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a101f7e-ea2a-342a-9c0f-34f169b81472.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:8d:c6:86:c9:34:59:ad:62:5b:43:ff:4a:aa:87:01:e1:48:
         1b:cf:31:b4:9b:bc:55:37:cb:51:38:04:26:4a:0b:a5:81:fa:
         af:a7:97:ab:35:b7:d9:39:09:94:5c:50:b8:a2:44:bb:8d:52:
         e4:2a:c3:32:74:4b:19:81:af:7f:e2:3c:d5:de:d3:dc:0f:04:
         93:db:ce:54:61:cf:d3:ee:ab:bd:f6:e8:9a:08:de:05:a3:9a:
         84:ac:ee:42:44:30:a0:40:2d:a7:73:3b:e3:87:1c:0e:7b:8a:
         cf:a8:70:81:f4:a1:9d:40:4c:97:90:34:2f:6d:53:7b:6d:b4:
         b6:e9:46:21:8d:6a:4e:c3:f8:fa:81:92:4d:4a:2c:78:50:84:
         bf:b4:83:e4:a4:e3:4e:ff:a4:9f:1c:30:dc:16:a6:8a:71:76:
         74:42:aa:a6:8f:36:62:36:4f:01:48:1c:52:35:45:65:41:c3:
         01:30:56:63:05:2f:92:21:ac:ec:54:3b:5a:cf:e9:e8:93:4a:
         73:11:e2:72:a3:5a:8f:ea:ca:08:8d:d1:59:01:54:06:ab:22:
         9a:29:f8:97:17:9b:ee:b7:f3:15:d8:2c:f6:a9:e9:c0:f0:f0:
         7c:8a:f3:f8:10:5c:cd:db:61:97:f2:6e:cf:84:21:9a:10:6b:
         bb:f3:2a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----