Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/33810df2-78ca-3b08-95bd-1f1a32b81c05.roa
File:                     33810df2-78ca-3b08-95bd-1f1a32b81c05.roa (raw, json)
Hash identifier:          PkGUeGtTVxvrcK4Zs4YiOqBedzxMQM7n4ZE3LrR1MsA=
Subject key identifier:   2E:BE:62:2A:73:42:C5:14:90:EF:D9:1F:4E:DE:13:14:54:34:6A:3A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A179DC2E8954E809303CAF0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/33810df2-78ca-3b08-95bd-1f1a32b81c05.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.214.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:39:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:17:9d:c2:e8:95:4e:80:93:03:ca:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=9949570c-ab5b-48b9-9af2-ec36aa9c9b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b3:68:9c:92:84:b6:28:17:71:c0:2a:74:15:
                    c3:fb:53:3b:18:58:48:8a:fa:a4:ee:e4:4d:9f:b5:
                    a4:b2:26:83:4f:7a:b4:26:3e:f9:39:2a:be:60:7a:
                    94:43:11:b0:2f:39:21:3a:ac:dd:f6:ec:b3:75:63:
                    ed:b7:e9:74:6a:65:73:7f:84:80:98:b1:a2:c7:41:
                    5e:a4:2d:05:c6:11:5d:91:97:7e:71:9b:e5:c1:8e:
                    04:86:a5:e8:88:3e:6f:ad:21:15:4b:ae:24:89:ba:
                    0b:f6:5d:58:b8:46:b6:3b:48:59:2d:ac:8c:4e:29:
                    50:97:5e:ae:5d:59:7f:e7:be:d8:89:6d:86:b1:b7:
                    70:c6:95:eb:03:1e:bf:10:6a:70:34:78:41:a0:26:
                    2e:1e:81:65:cc:e0:8c:75:5b:eb:3e:ed:38:04:cb:
                    81:29:ef:78:19:c1:8a:b7:64:a3:33:ac:5b:83:a0:
                    b1:30:24:7f:e2:37:0b:8c:b8:94:fb:70:98:61:0b:
                    71:de:85:d6:83:7d:9b:93:14:98:7e:0e:13:ce:0a:
                    f8:14:6f:5c:d2:a6:79:b3:cc:eb:1c:fd:3d:2f:05:
                    7a:b6:96:0a:7e:c9:aa:a6:74:cf:64:82:2d:3d:45:
                    99:f9:61:95:1d:c5:c0:f9:57:c1:9a:21:1a:e9:36:
                    f0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BE:62:2A:73:42:C5:14:90:EF:D9:1F:4E:DE:13:14:54:34:6A:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/33810df2-78ca-3b08-95bd-1f1a32b81c05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:95:5f:59:2a:a4:0e:3a:a3:67:bc:97:b5:77:c0:f9:81:94:
         dc:4f:4d:59:35:47:42:77:a0:b4:e5:9a:0d:2f:b3:c3:5c:1a:
         37:90:da:12:80:44:99:21:e2:6a:91:cf:a3:29:3b:b5:62:a2:
         67:1c:3f:5e:e6:8c:42:05:9c:d1:ef:c5:41:51:f6:ca:1b:5b:
         83:ab:b8:48:a4:e8:77:ab:7f:2d:98:4a:1c:d6:35:c7:0e:be:
         06:a1:e5:89:0f:1d:2d:4e:2a:20:4b:4e:d8:a6:ef:b9:0b:75:
         6f:79:46:bf:5e:23:bc:d4:50:b7:ae:58:04:a5:f2:f4:55:22:
         18:e2:06:32:11:f8:71:5f:4b:ff:bb:5a:2c:7a:94:5e:71:32:
         49:d0:14:5b:06:ba:89:3f:f6:d3:17:89:06:0a:97:42:37:1c:
         6c:ef:57:c9:84:f2:b9:75:f2:27:2d:a1:c7:7a:eb:27:68:ab:
         84:66:35:35:87:29:39:2c:11:fe:a1:b3:d0:41:88:7e:dd:b0:
         4d:4e:fa:07:07:13:7a:8a:cc:70:e2:c9:00:d3:b8:df:13:7e:
         93:47:53:41:95:e4:cb:61:fd:26:0a:7f:36:87:88:c2:e2:60:
         50:fb:05:73:57:55:6c:75:ec:fd:d1:87:9c:f7:66:9b:81:4f:
         04:19:c0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----