Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fb2db1d-fb05-3dad-ab41-de2cfcc2fdfe.roa
File:                     2fb2db1d-fb05-3dad-ab41-de2cfcc2fdfe.roa (raw, json)
Hash identifier:          7+dGQheohl46aWlBnM3gP9Ggiwzdir869kL/Oud+KlY=
Subject key identifier:   F7:CA:CD:05:97:84:51:99:5D:60:FC:AF:7A:9F:07:8F:98:E5:B5:AC
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A21CCB5F6ADB86F744F7400
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fb2db1d-fb05-3dad-ab41-de2cfcc2fdfe.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.70.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:21:cc:b5:f6:ad:b8:6f:74:4f:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=3517f48d-3b93-445c-9556-22a639ca4c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b8:93:09:2e:d2:bc:e3:dc:83:24:b0:0f:bc:
                    67:07:6c:5d:53:cc:e6:a3:fa:72:3c:9f:fa:3c:e6:
                    8b:7e:a1:8b:2c:d2:0d:73:f7:a4:ab:6a:ca:bc:89:
                    0a:ab:73:46:3d:1b:da:ef:4c:2f:b0:31:cc:c1:88:
                    09:ef:e6:f1:60:4f:06:8d:5e:33:f4:71:c8:fc:68:
                    f6:ae:53:20:14:b4:c1:bb:99:ed:b0:7e:60:ba:e4:
                    25:72:fd:97:9a:d0:0c:ce:c0:2f:10:5b:1f:70:93:
                    a8:c2:2e:8a:31:4f:a6:8b:57:02:5b:23:7a:1a:0d:
                    52:98:34:61:5c:37:b2:04:22:44:8f:94:6f:ee:02:
                    41:d9:a9:cf:5e:b7:ac:bb:8a:4f:57:ba:b2:e4:fc:
                    7c:23:5e:d7:8f:6a:03:54:cc:56:b6:52:ea:dd:d1:
                    7d:8e:b8:99:78:66:ac:89:03:42:08:57:bd:1b:6f:
                    63:ac:61:49:cb:39:76:be:1b:6d:32:1e:68:ae:39:
                    a0:8a:17:6f:69:95:14:35:e7:55:4f:c0:39:07:6d:
                    f3:df:c2:5e:01:45:10:ae:a6:b5:21:99:39:f7:10:
                    28:f4:f3:84:ec:04:ab:6b:1a:6a:81:ae:d7:2f:68:
                    d7:a2:9d:29:d4:3e:af:71:aa:51:0e:76:b1:ef:5c:
                    9b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CA:CD:05:97:84:51:99:5D:60:FC:AF:7A:9F:07:8F:98:E5:B5:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fb2db1d-fb05-3dad-ab41-de2cfcc2fdfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:11:44:60:6e:bd:db:9a:28:ab:48:31:34:39:ee:fc:15:08:
         03:8e:16:e5:e4:10:11:51:fe:a3:02:5f:14:3c:c8:5e:cb:6e:
         8f:f3:79:c3:a8:e4:d7:ae:cf:df:4b:e6:11:82:2e:56:a6:cf:
         d7:bd:99:c3:ef:44:3c:dc:ea:97:68:7b:d6:51:49:56:3e:5c:
         c4:c4:75:12:ba:6f:62:f9:ec:9e:f0:1e:32:b6:c9:87:03:05:
         d3:d6:6c:6a:23:60:69:92:36:b7:72:98:19:00:d2:83:17:a2:
         d8:8f:4d:e4:64:89:db:1f:71:73:aa:f5:12:c4:a5:66:e8:9e:
         24:05:8d:72:85:bc:01:60:9c:ee:58:c4:f4:ba:a9:db:fb:95:
         a4:6a:5d:b6:7a:53:b6:5b:a3:63:39:99:37:fe:6a:d7:eb:2b:
         af:d4:c2:d6:ca:6a:6e:af:51:3e:f9:7b:8b:9d:e6:71:ce:ee:
         78:94:68:10:6a:35:6b:06:83:56:35:ea:08:4f:07:c8:f3:26:
         5e:67:2b:a1:56:42:d1:82:32:50:9c:12:0b:26:69:98:a5:57:
         cc:6a:70:24:68:01:3c:07:d6:2b:bb:9d:a0:a6:0f:63:88:4b:
         b3:1b:82:d0:bc:c7:66:f2:73:a1:11:82:3c:de:53:14:1d:a4:
         ab:6d:57:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----