Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2cc502ee-19aa-3213-b9a5-9d7ba954a862.roa
File:                     2cc502ee-19aa-3213-b9a5-9d7ba954a862.roa (raw, json)
Hash identifier:          qOBKMHIWPL1G6j3ks2e2U2que7n7BptHau2QI8hPTuk=
Subject key identifier:   D1:6D:8D:65:32:E8:A7:6B:46:4A:66:26:13:56:14:0A:C0:FD:7C:5B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A119E1ECDD97B2FAF666B00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2cc502ee-19aa-3213-b9a5-9d7ba954a862.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:43:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:11:9e:1e:cd:d9:7b:2f:af:66:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=70ee2380-0a9d-4514-a38e-aee656a56851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:75:9e:7b:e0:f2:8f:c3:1e:ea:44:7c:f0:4a:
                    a7:f7:6a:26:3c:ff:48:49:e7:30:4f:f2:2f:62:b1:
                    2c:87:99:6f:95:ed:7c:d9:8b:f3:f9:8c:c7:a1:ee:
                    75:70:c2:82:fb:6f:e1:75:94:cf:b8:56:60:02:13:
                    fd:dd:da:c8:92:85:f4:df:82:3b:39:2a:61:56:27:
                    87:15:8c:f0:af:a0:cb:3c:f5:b3:81:eb:47:5e:b4:
                    1e:eb:c1:ac:27:17:20:93:64:5e:cf:26:bb:81:f6:
                    28:20:3d:e3:c3:f4:12:30:ea:2e:0c:db:b0:f2:70:
                    9f:51:78:6b:c5:80:a9:6e:60:8b:d8:ba:a0:77:cf:
                    66:0d:45:ed:53:6c:e4:72:8f:88:5c:f7:39:fd:05:
                    d6:83:20:a5:9f:83:1c:24:b3:6c:9b:1f:2c:1a:57:
                    0e:d0:73:99:57:69:40:e3:4b:cc:bb:e0:4c:d0:0d:
                    9a:37:a5:a6:97:76:7b:88:1c:aa:98:f1:45:d9:49:
                    ca:ab:07:dc:6f:67:af:f6:aa:55:5b:ef:e7:e0:95:
                    c8:d9:47:6e:dc:49:96:55:11:fb:e8:da:bf:09:36:
                    ff:f1:4e:f1:f0:51:2a:36:02:04:cd:b6:49:e0:6d:
                    48:f0:0e:85:86:90:81:cf:09:0e:50:ad:41:67:b5:
                    dd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6D:8D:65:32:E8:A7:6B:46:4A:66:26:13:56:14:0A:C0:FD:7C:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2cc502ee-19aa-3213-b9a5-9d7ba954a862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:e3:e1:b5:09:5f:19:9c:5e:bc:d5:a1:ec:88:27:98:4c:52:
         f8:0a:47:58:a9:54:86:17:80:1c:bc:3c:08:b1:13:4b:cf:31:
         25:0f:6f:c5:69:44:38:18:d0:37:cc:fd:85:9f:3f:94:e5:76:
         c5:65:a4:43:b1:70:ca:3f:4c:5d:76:b7:4c:f2:e4:51:a4:31:
         0b:44:98:44:48:b7:40:58:37:15:2a:54:92:6a:79:18:97:60:
         a4:71:4b:1d:e4:de:77:7f:38:c6:75:c4:ae:64:cd:0f:68:ff:
         f5:db:38:54:67:d3:bc:08:8d:95:5e:4d:f9:a8:a7:b6:ec:d3:
         75:97:8c:7f:51:a1:83:6e:68:5f:cc:e7:3e:c8:29:b1:81:fa:
         e5:7a:56:4b:3d:78:3d:5c:b9:c2:25:71:de:19:f8:cb:00:4e:
         0b:4e:a1:b0:13:23:52:d3:1b:99:63:f1:8a:1c:e0:33:0a:12:
         ba:35:11:ea:a3:02:34:33:70:7f:8e:2c:7f:f4:91:17:5a:e0:
         15:5c:b1:ad:c5:16:5e:04:d0:63:6b:27:84:d2:82:28:0d:3d:
         e7:04:86:d8:28:ab:a8:8e:f2:ee:59:82:e0:d6:bd:03:b5:68:
         3e:f6:f8:a5:8d:f3:b6:15:ef:57:4a:5a:0f:91:a4:30:a8:b8:
         5c:8b:53:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----