Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2602234a-9329-3324-ae59-a033471dfc93.roa
File:                     2602234a-9329-3324-ae59-a033471dfc93.roa (raw, json)
Hash identifier:          DajTeCEo0RC5iUZi8tC1gSqDjjEMJUVHK7BThOfqYcM=
Subject key identifier:   54:C9:DC:57:EE:8C:C7:FF:8C:2F:9D:46:80:1D:99:E4:E3:CA:F7:29
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A05903BB3F7425355DCC900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2602234a-9329-3324-ae59-a033471dfc93.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.247.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:05:90:3b:b3:f7:42:53:55:dc:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=d9733ae5-5ee2-4b0c-933b-b556b5cbfdde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a3:8a:2b:dd:64:43:92:f0:38:65:55:b7:dc:
                    e9:ab:ca:e6:09:8c:d3:50:c3:27:8a:22:b5:85:1e:
                    6d:e5:08:3d:83:66:d2:18:14:fb:3f:23:37:8d:f2:
                    d2:32:b8:d4:93:0a:7d:1f:73:93:44:a1:4b:4c:bd:
                    a0:c7:ff:61:d6:d7:8e:a3:81:4b:d6:67:98:d6:a1:
                    1e:a1:ee:e1:2d:e0:d0:d5:a1:cb:6a:c9:e8:36:6d:
                    58:d7:1f:c3:97:15:1b:4f:c1:2d:79:a1:09:40:90:
                    d7:8e:6a:48:7b:f9:2c:8a:28:35:77:be:94:3b:e9:
                    56:81:0b:a4:1d:ca:02:4e:08:04:a6:34:ff:38:8a:
                    cf:04:f0:ed:4c:2d:37:bb:36:b3:de:87:ea:c1:78:
                    19:ab:7d:20:32:d3:ae:87:ef:63:7d:eb:f4:ca:e4:
                    f0:06:3b:c1:60:d9:80:13:b4:d5:de:72:cc:f3:ed:
                    98:80:6c:ec:24:30:6d:72:18:ad:ec:73:85:49:c4:
                    98:3d:8d:3a:72:a9:58:d4:b8:2d:24:b5:98:51:6a:
                    65:66:31:db:61:82:87:20:d1:6e:c7:3e:f4:03:b9:
                    83:a0:80:3e:3c:c3:a4:6f:ea:60:5e:20:b6:42:1c:
                    38:be:51:06:cc:99:22:af:9f:51:f4:b1:d3:ef:5a:
                    64:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C9:DC:57:EE:8C:C7:FF:8C:2F:9D:46:80:1D:99:E4:E3:CA:F7:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2602234a-9329-3324-ae59-a033471dfc93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:b6:fc:8b:e5:15:6f:49:66:72:a9:ee:4d:4d:6a:59:ff:ac:
         23:64:4e:d9:1e:70:aa:f7:ac:d7:ab:97:2a:d7:c9:58:4c:2a:
         bf:9e:d2:6d:eb:e3:c5:df:de:4d:e1:9c:ab:eb:02:95:57:62:
         9e:2f:c5:0f:7c:40:ea:95:4f:6d:f3:d3:c1:ea:a4:d4:7e:2f:
         46:4e:87:f3:18:22:49:03:f0:27:07:4a:12:ea:0b:af:cb:f9:
         6a:8c:2d:e9:3c:59:45:01:d4:d3:bb:d2:36:64:2c:e8:d1:7c:
         a2:fe:3d:fd:d8:12:92:12:8b:f8:ff:95:0c:6a:b6:40:b3:0b:
         72:b6:81:15:6d:c0:fd:bb:8e:11:a8:57:f3:74:36:ae:d2:cc:
         f2:17:34:bc:f9:c8:20:fb:9f:60:51:43:2d:93:36:b6:93:8b:
         bb:e5:f2:07:c3:86:c2:d3:71:10:16:79:97:e3:f3:d3:36:1d:
         e0:e4:64:62:4e:02:96:45:e1:ea:39:c4:bd:df:ce:23:f0:a1:
         38:f5:14:fe:f9:6b:ac:cf:b1:c8:4e:19:6c:b8:53:2e:1c:93:
         97:ad:9f:2a:12:11:94:60:7c:92:45:98:6e:6b:18:0e:13:51:
         f3:1f:a0:e1:19:ab:d2:ec:ce:ab:41:18:08:f3:0c:c3:23:89:
         13:d5:9a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----