Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2940a284-1100-319f-b002-e4b2fb4db42c.roa
File:                     2940a284-1100-319f-b002-e4b2fb4db42c.roa (raw, json)
Hash identifier:          Kshf0KZN1JMj7tRAc2Vr4Cg+RCc9hrwjxUmNt0zBssg=
Subject key identifier:   FC:55:1F:5E:2A:A5:B8:BF:04:4B:F2:26:71:42:82:C4:02:9A:62:4E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A15CBE904D9A428B67C1440
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2940a284-1100-319f-b002-e4b2fb4db42c.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.245.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:55:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:15:cb:e9:04:d9:a4:28:b6:7c:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=973d57f4-d9b3-4927-a372-ed761273a995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:62:24:06:a7:a1:ce:88:ad:44:c1:07:14:62:
                    ca:33:25:82:32:f1:09:73:ba:f9:75:25:3c:fa:1b:
                    4c:9d:71:34:18:0f:6f:b9:e0:78:94:fb:51:73:76:
                    f8:46:45:67:48:56:cd:35:54:84:1f:64:e6:ce:74:
                    29:c3:ff:54:54:db:db:b8:08:b6:22:8b:c4:96:91:
                    c7:32:2c:0e:79:a8:c4:79:4e:17:e2:8d:79:86:51:
                    03:94:54:28:e0:c3:0f:f9:df:b9:a7:43:3b:d6:86:
                    e6:52:39:bd:29:0f:a6:df:d4:e4:9f:bf:38:27:c1:
                    35:4a:df:7e:80:75:6b:93:fc:d0:12:49:57:5e:07:
                    df:a2:2b:76:34:e2:4c:e6:3b:9c:a1:d4:9e:e0:b8:
                    28:12:60:d2:86:1a:16:d5:da:c9:24:df:1b:ee:93:
                    1e:83:4e:3f:88:1c:13:19:b2:c9:f7:89:1f:2a:d9:
                    d9:51:79:e6:8c:12:11:d4:c0:ca:06:39:e0:32:8d:
                    19:7a:06:a1:ee:d5:cf:1a:37:bc:be:df:7e:b8:5c:
                    e6:a1:bf:54:b7:e1:17:1e:4e:96:41:17:73:03:64:
                    a7:82:c3:9e:2a:21:f3:d9:93:d9:d5:85:d7:3c:7b:
                    a2:39:0d:c2:e0:b6:48:43:d5:ac:28:15:4d:fd:a1:
                    74:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:55:1F:5E:2A:A5:B8:BF:04:4B:F2:26:71:42:82:C4:02:9A:62:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2940a284-1100-319f-b002-e4b2fb4db42c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:c7:26:b6:d0:75:4b:75:29:f5:c7:22:37:89:40:04:de:6d:
         5b:47:99:7a:26:ef:b1:7d:af:b4:35:fb:1b:e4:b2:38:88:0d:
         26:68:d3:7c:d4:fb:1a:12:41:84:ba:34:20:ac:35:88:9a:83:
         43:0e:98:88:59:e6:74:40:4b:ae:7c:dc:f3:05:8a:bd:be:7e:
         62:6d:72:16:c9:6d:37:91:9b:8c:d6:39:75:3e:82:3d:28:80:
         11:87:c3:10:75:9d:3b:31:85:63:71:40:84:dd:5c:97:46:48:
         9a:d4:27:f4:21:48:1f:fe:2c:00:86:a9:c1:0d:bb:58:a2:da:
         d1:43:7a:1d:1c:e7:2b:7c:83:36:63:64:34:57:61:d8:b4:b8:
         9b:91:5d:12:1f:da:fc:f7:06:fb:7a:30:2d:2b:b1:c0:f3:e3:
         74:25:82:79:f0:e6:a2:95:78:07:10:b8:80:60:af:d9:a1:c8:
         62:67:0f:14:db:02:d4:fb:81:5b:47:30:41:5a:03:7d:3c:0e:
         4f:20:a2:5d:c4:2b:3c:ec:a6:4b:10:a5:79:3a:68:39:4e:33:
         1d:40:24:8b:f5:e1:8f:58:23:37:bd:3d:8e:e4:1f:4f:38:2c:
         0d:da:78:cb:ab:53:81:d3:b1:c2:9b:53:dd:79:29:21:e9:9c:
         41:be:aa:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----