Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/21069cf0-bca1-377d-8798-41524aba60e5.roa
File:                     21069cf0-bca1-377d-8798-41524aba60e5.roa (raw, json)
Hash identifier:          G4w0XmTqpb1NlaRlsKqJhDZcMF2ET/HMuyzaiw1ppUE=
Subject key identifier:   44:11:BC:8D:C1:C2:06:54:6F:98:EB:37:D9:DB:7F:13:8B:C8:D3:87
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A07328FCA8450DCB4A03800
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/21069cf0-bca1-377d-8798-41524aba60e5.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.144.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:07:32:8f:ca:84:50:dc:b4:a0:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ca68a60a-3387-497e-b043-eceb85c64c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:00:a2:e8:80:85:ee:19:9a:55:c1:06:c6:00:
                    3a:70:96:af:91:c3:9b:e7:2b:38:42:ff:f8:2a:3a:
                    f9:4c:72:9f:54:c4:9a:0c:ac:6c:03:04:0a:67:12:
                    72:7b:d7:14:13:92:e1:c2:e9:03:46:29:8b:c1:3d:
                    99:24:b5:27:27:26:26:c2:b9:13:82:f9:0a:6b:d0:
                    63:2c:93:4e:96:d6:48:f6:67:8b:be:9f:4d:83:00:
                    87:80:3a:4f:1e:7f:d8:d4:d3:e6:35:b4:e8:75:95:
                    c8:c9:ae:79:12:de:c5:f1:a6:94:82:5a:17:6c:54:
                    b3:71:b6:70:ce:fe:97:0b:ef:15:cc:b2:d6:9a:8b:
                    3b:6f:18:a8:4e:1d:e6:72:fc:2c:85:ae:48:9e:58:
                    50:51:f1:96:2f:54:fb:75:2a:c4:c8:71:e7:77:61:
                    00:7a:77:83:a0:9b:71:97:c7:d2:e1:2e:96:c5:9c:
                    2a:ce:d2:93:da:89:65:e3:28:dc:a2:4a:b1:e9:18:
                    87:8e:41:f8:09:94:4a:77:a8:35:6c:0c:78:44:95:
                    29:ca:f8:a4:1a:ea:be:ed:63:6c:60:d8:81:ef:1b:
                    9b:47:6b:e8:ba:17:15:61:74:9e:67:b8:59:39:11:
                    0c:3b:91:6d:71:64:29:01:d7:45:60:f8:37:db:14:
                    d4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:11:BC:8D:C1:C2:06:54:6F:98:EB:37:D9:DB:7F:13:8B:C8:D3:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/21069cf0-bca1-377d-8798-41524aba60e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:45:82:23:d1:74:16:d9:2c:89:d2:0b:9f:f9:33:8b:b6:b3:
         a8:e2:a3:72:f4:9f:ff:7c:37:52:a2:c1:8b:60:de:31:dd:e9:
         20:3e:34:eb:5d:06:f4:96:54:47:5c:07:6c:5f:65:ae:65:45:
         82:29:ec:a0:8c:c9:8c:7e:e2:fa:b5:dd:25:79:a2:95:27:84:
         f1:e1:57:2f:9a:ee:52:b2:7b:6a:58:b1:d3:48:87:b6:65:21:
         ac:c1:1e:d6:85:a6:b2:f2:3e:b9:9f:6b:5c:1f:07:ce:f9:b2:
         ed:21:cd:9a:e8:f9:c1:7c:5f:ae:8a:5e:a2:18:dc:ea:63:f1:
         c0:ca:b0:78:7e:8d:e7:53:5b:e9:d5:48:9b:9a:d3:f0:54:07:
         ab:0d:a5:60:67:f4:c4:18:3d:26:25:69:85:f8:4f:fd:84:65:
         21:70:5a:aa:e6:42:53:a7:5f:3d:88:a1:e3:bf:6b:8a:f2:8d:
         26:d1:b9:6f:cf:8b:59:71:38:e7:cb:8d:84:8b:eb:c6:e4:82:
         71:06:76:d0:c4:64:7b:15:4b:cb:35:7e:86:8e:70:38:44:15:
         88:cb:59:5d:62:49:53:cb:e7:81:38:ba:7e:50:95:4a:9f:12:
         c4:47:6b:d7:76:f3:1d:42:6a:2b:89:7a:65:35:46:49:f8:4b:
         d3:32:69:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----