Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/234ab260-2ae4-30af-aff5-18bcabc71678.roa
File:                     234ab260-2ae4-30af-aff5-18bcabc71678.roa (raw, json)
Hash identifier:          ji19iqbMx2E6+j+Y/UoZccr9J0ir5CnGCSbEqWH41tU=
Subject key identifier:   0C:1A:A1:A6:88:58:E5:ED:F3:1E:7C:89:37:72:14:88:12:87:D1:8C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0B0905C3B4697450780E00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/234ab260-2ae4-30af-aff5-18bcabc71678.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0b:09:05:c3:b4:69:74:50:78:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=b42f9b00-8b77-4835-8ba4-4b366bd6e979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:af:14:37:c6:3f:8f:12:9a:e7:4e:77:a8:36:
                    e3:d1:3b:ae:90:7c:45:f2:f9:58:64:0c:79:f7:d9:
                    c2:c0:41:5c:5d:34:cb:a7:70:82:8c:53:17:d5:bd:
                    a8:4d:58:56:72:fd:66:97:60:35:bd:15:6a:0e:52:
                    e8:26:3f:21:34:15:75:4e:75:ec:15:68:b2:88:2e:
                    a1:9b:f2:44:e4:e3:1f:de:9b:b3:ad:e7:9b:8b:d0:
                    38:30:e5:b6:4d:0d:d0:a5:00:f2:14:63:fa:cb:2b:
                    42:08:9c:1b:fd:f6:b3:74:8b:11:9b:b2:e1:ce:d8:
                    55:d7:16:9a:31:78:0f:64:b4:c6:b7:eb:6e:72:3e:
                    b7:9e:54:c0:9c:da:99:4f:43:cd:24:9a:a7:f2:fc:
                    ec:43:a8:eb:7e:27:84:5b:30:6c:88:83:03:d6:4e:
                    0f:04:60:96:18:8a:f0:36:46:74:22:9d:ea:db:05:
                    e7:26:4e:49:6b:a8:ec:81:6a:d1:4a:69:8c:a1:80:
                    83:ae:d4:78:ab:83:b8:c9:30:aa:cd:52:0d:9a:ad:
                    4d:5a:b9:71:ff:b7:eb:44:b1:06:c7:d5:85:90:e9:
                    ed:d2:5a:4d:c8:30:d8:a7:24:40:94:86:08:3d:72:
                    aa:77:61:ba:73:e3:60:e6:2e:6a:0c:9c:4d:b3:ca:
                    a9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1A:A1:A6:88:58:E5:ED:F3:1E:7C:89:37:72:14:88:12:87:D1:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/234ab260-2ae4-30af-aff5-18bcabc71678.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:2d:f5:36:fc:d6:11:47:19:c2:1e:c3:02:0c:32:6d:78:ae:
         bb:54:42:fe:3b:66:fe:b1:b2:34:06:3a:62:c3:69:d7:fb:c4:
         d5:a2:a8:3a:b6:bd:f8:b7:03:00:23:4f:0e:b9:89:f0:e1:b3:
         72:89:b8:6e:e0:dd:a6:c2:18:49:31:2a:39:ac:71:9b:a6:18:
         41:f8:f9:e2:61:05:ca:23:1b:5c:f7:cd:00:f3:c0:76:99:da:
         1e:d3:03:c2:3b:3b:81:75:0c:70:7e:3f:37:59:a8:a5:8b:26:
         e1:68:d9:94:b3:6e:b6:7a:cf:5a:20:ca:e3:76:b3:79:a9:00:
         d6:c4:52:61:e7:e3:6f:99:15:60:42:a3:bb:1e:b6:52:56:02:
         72:2a:8a:cb:e7:28:ce:e7:71:30:df:3a:66:d9:95:b8:51:ed:
         31:2c:09:f3:42:31:62:d4:27:58:e2:c8:33:a2:88:20:c8:85:
         73:f5:7e:15:21:0f:21:a5:50:7e:71:25:2a:ab:12:ec:f9:52:
         4c:12:c2:8e:ac:6e:e3:34:22:9d:22:98:12:14:d5:89:da:7d:
         5e:7a:6c:7f:05:dc:01:25:34:2c:57:28:dd:ec:3d:93:46:df:
         14:61:aa:98:50:1b:09:d1:aa:42:66:b5:1b:97:85:68:49:ec:
         a7:b5:d3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----