Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/297e355b-9add-34d5-81b7-7e5bb563d5e0.roa
File:                     297e355b-9add-34d5-81b7-7e5bb563d5e0.roa (raw, json)
Hash identifier:          K5iiA7I6wpagxzbarQPFX5BGPb0P9hoCSX9DqkZ1UEs=
Subject key identifier:   34:A8:2B:AF:A2:CA:00:54:60:D7:6F:63:F4:B4:99:93:21:A3:9C:76
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0A14A14AFE368D663452A0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/297e355b-9add-34d5-81b7-7e5bb563d5e0.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.253.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:41:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0a:14:a1:4a:fe:36:8d:66:34:52:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=62db9bf9-fa93-4951-9a18-040ab4f24f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f7:f3:fb:10:52:4b:a6:6b:87:5d:1d:8e:03:
                    fa:56:a9:e0:32:bd:88:2f:7b:dc:cd:69:12:b7:22:
                    26:bb:bb:90:8a:5d:a2:db:50:97:2a:e3:49:20:51:
                    99:dd:15:11:2c:58:59:d6:85:e4:c7:e8:84:c3:26:
                    31:4d:ac:8a:e1:bd:b2:e6:dd:35:cf:19:d1:95:c8:
                    6e:e6:b7:89:01:07:65:70:8a:3d:3a:cd:fa:e6:da:
                    1b:bf:f3:3d:ee:fe:b5:d8:bf:dc:e0:e0:a3:1e:d8:
                    16:5c:04:b0:76:ad:ce:b3:7d:66:c6:7e:71:14:c0:
                    b2:37:31:a6:78:f1:d9:98:c3:98:32:1b:70:0c:a6:
                    73:86:3d:1d:a9:3b:62:07:67:7c:6a:1f:91:78:2f:
                    b6:70:bb:b4:18:6c:f5:88:95:06:92:34:41:83:0c:
                    6c:6f:ef:66:c3:ad:85:c4:31:bc:a6:23:01:35:11:
                    61:40:62:0f:0c:6d:73:23:f6:10:ad:e8:d1:02:6c:
                    2d:08:ad:fd:c7:85:62:b9:ef:1a:54:0d:1d:f4:7c:
                    1e:f5:5b:99:03:ed:87:e2:da:27:2c:af:eb:27:d5:
                    96:d4:88:95:06:79:cf:4f:38:23:90:07:a5:95:70:
                    f6:42:e4:80:12:7b:d5:62:01:5b:9b:3e:91:4a:83:
                    c7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A8:2B:AF:A2:CA:00:54:60:D7:6F:63:F4:B4:99:93:21:A3:9C:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/297e355b-9add-34d5-81b7-7e5bb563d5e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:7c:a3:0f:7e:ee:04:4f:2c:aa:04:43:ea:b7:ad:dc:d1:f0:
         98:25:e5:f0:b8:4b:99:71:4a:f2:ec:aa:5b:93:89:39:4b:53:
         41:9f:91:8f:32:4d:f4:a9:57:3f:29:7e:14:1d:ef:95:63:3e:
         16:c1:65:c7:5b:ea:5d:21:cb:99:76:b0:64:4f:24:0a:69:b4:
         d6:86:25:ab:e4:3f:db:36:76:ce:9f:be:78:6a:4a:cc:75:eb:
         43:b3:cd:78:12:c1:fc:8b:41:85:16:ba:86:73:14:70:17:11:
         67:b7:29:8c:7d:42:ee:96:ac:41:4f:5b:42:ac:84:8f:cc:00:
         2e:64:ef:dd:6f:bd:94:5c:16:08:29:a4:35:3b:ce:8c:65:2b:
         d2:ca:df:43:78:bd:fe:20:be:b5:0e:6f:cc:4c:2c:35:c6:40:
         76:93:99:d7:f6:2a:11:a2:8e:2d:1e:4b:3f:b5:52:77:85:f0:
         08:2c:47:81:14:9e:46:da:1c:11:03:6e:85:61:b7:97:b8:c3:
         4c:48:a1:a0:ba:7d:e1:b5:a1:4d:94:50:41:7b:d9:11:37:c7:
         8e:56:bb:34:b0:d5:38:a2:77:53:09:ce:3c:19:37:bf:09:1a:
         d5:50:84:eb:af:cf:01:5a:ef:2d:f3:6a:67:3b:7b:97:1d:f4:
         29:7c:cd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----