Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3325eb2d-1f8f-3ef6-8ffe-f4f51b1f38f3.roa
File:                     3325eb2d-1f8f-3ef6-8ffe-f4f51b1f38f3.roa (raw, json)
Hash identifier:          4x98C+hMisGo0aHtCxJa39KWz54dGkYRcT81BzIdPFc=
Subject key identifier:   62:CB:09:9A:C7:CF:E1:28:F7:14:F1:10:8E:66:79:C2:18:21:CA:09
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A03D7C2E737DC43D302E700
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3325eb2d-1f8f-3ef6-8ffe-f4f51b1f38f3.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.88.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:51:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:03:d7:c2:e7:37:dc:43:d3:02:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=b70da4a4-c24a-43ab-9c3a-46b690b7c9c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8d:3e:bd:0a:3f:7d:86:88:a6:46:21:84:3a:
                    44:0d:79:41:00:19:bb:81:58:e2:d4:25:9e:80:3b:
                    41:3f:fc:ca:8f:eb:5d:71:82:98:b9:49:ca:da:46:
                    b6:ea:9e:6c:15:ab:ff:10:f9:36:d8:90:e3:0f:99:
                    26:ba:39:71:a7:07:b7:f8:3d:39:88:fd:36:59:06:
                    42:92:af:49:fc:d0:fc:fc:15:6e:60:96:31:31:7a:
                    75:bb:6c:94:81:70:83:b1:66:95:74:92:03:8d:99:
                    7c:bc:ba:47:1d:f2:9a:7d:7f:e0:08:e4:f8:02:f5:
                    53:ff:76:7a:4f:78:28:1f:72:3a:bb:d4:f9:3f:12:
                    1a:7a:61:79:46:35:30:06:d6:e9:1f:40:15:e6:a2:
                    cb:d4:ce:59:3b:1e:f1:3d:ca:bb:80:f6:e1:85:4a:
                    02:97:b8:5c:a2:18:48:87:a2:91:24:ed:9d:87:6f:
                    cc:9b:1c:06:07:61:c9:18:84:3b:91:3b:b1:1b:39:
                    08:19:b9:f3:ba:d8:c7:5c:54:6a:6b:cb:88:aa:74:
                    e9:86:f8:35:5c:1a:10:f7:3c:e1:0d:f7:76:61:d5:
                    18:95:51:e5:9f:dd:ec:d9:43:bb:cd:09:42:02:d7:
                    91:04:20:fc:36:d6:12:1e:6f:5a:19:3c:81:86:1c:
                    b1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CB:09:9A:C7:CF:E1:28:F7:14:F1:10:8E:66:79:C2:18:21:CA:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3325eb2d-1f8f-3ef6-8ffe-f4f51b1f38f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:2d:be:6c:4d:f7:de:b2:de:0f:12:0c:ec:8a:38:2a:af:67:
         e1:ea:77:12:00:f6:43:bf:42:87:3e:de:7f:98:45:62:af:7c:
         46:f9:49:be:3f:23:fa:af:3f:e5:fd:5f:a0:bd:1f:e8:71:61:
         af:7d:87:5c:47:67:95:9d:9d:fb:13:e4:16:07:07:0a:e3:c1:
         ef:11:24:c5:8a:ae:33:c3:2e:dc:92:11:37:cb:c2:59:75:d8:
         a2:88:9c:24:70:97:f9:62:0a:7d:5d:66:18:36:3d:08:a7:d4:
         8c:5a:5b:26:e9:f4:df:62:bb:e9:40:fc:49:1a:e3:b4:2f:af:
         bd:ec:e2:ef:22:59:10:68:46:bb:4c:92:78:39:db:db:53:03:
         00:38:5e:11:b7:4a:c7:b4:20:2c:2b:c4:8a:c4:1c:65:b1:e4:
         48:2d:05:86:85:81:85:e8:93:eb:f1:53:f2:0f:88:62:92:e2:
         d6:2b:e6:3b:3c:72:c3:b8:87:77:83:ee:8c:f4:64:27:7b:2a:
         9b:60:b5:63:c1:d5:29:ab:19:7c:6f:0e:d9:dd:69:b1:ee:47:
         1b:48:b7:1e:bb:91:cc:fd:c8:fd:8b:1c:37:7b:30:14:23:80:
         91:db:48:9f:da:e8:2e:02:e9:d2:51:13:d3:2f:53:5b:47:43:
         dc:9b:b0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----