Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/34625096-7901-3cf5-9d4c-f7b753d29a48.roa
File:                     34625096-7901-3cf5-9d4c-f7b753d29a48.roa (raw, json)
Hash identifier:          wjFDE1pVCtH3qbF9ecoVV4OVQawHnDjPQBfZ66FYOqg=
Subject key identifier:   63:4B:04:C7:ED:56:8E:3C:8E:C1:22:A1:8C:F4:71:EB:2D:6D:A9:ED
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A20C0C32BADEACAAF907EC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/34625096-7901-3cf5-9d4c-f7b753d29a48.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:20:c0:c3:2b:ad:ea:ca:af:90:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=288cdb54-2548-47f2-ae69-9a5b7221ee1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:43:16:57:ec:86:5f:20:fc:50:04:f6:36:75:
                    94:29:cb:11:16:27:bc:26:86:59:1e:5a:f2:20:60:
                    cd:af:76:cf:c1:e2:22:26:58:c2:0b:43:a8:03:1b:
                    18:fd:c5:b9:53:96:ad:76:29:a5:58:30:c5:f0:d7:
                    08:59:8f:21:57:5e:ae:81:da:51:2f:a4:02:3a:d2:
                    12:c0:ef:81:62:41:8d:3f:1f:0d:00:99:d0:c2:5f:
                    e3:8f:b6:0e:b6:00:02:95:6f:ac:17:af:2b:27:4e:
                    46:e3:b1:c9:ea:53:60:d1:80:84:76:c0:21:92:fb:
                    72:9c:f8:42:af:76:a1:1d:0a:24:77:cd:66:83:9f:
                    07:86:26:eb:36:ea:c9:62:98:98:db:b7:ec:fa:e9:
                    8e:19:f3:85:09:d4:0c:4e:17:ac:1c:a8:4a:d0:0c:
                    7b:b4:ca:17:2e:58:1d:87:39:33:02:12:f9:ec:28:
                    e5:95:f6:c8:6b:e4:36:b9:94:a0:5e:f6:12:0d:7b:
                    83:f1:2e:0f:6f:dd:12:81:34:e1:b5:36:2c:81:6e:
                    51:b4:d0:d6:7a:ad:4f:99:89:e8:5b:bf:1e:59:d9:
                    8e:44:7e:96:1c:a0:0f:e6:59:3b:da:f9:85:07:be:
                    3d:9c:34:22:db:9b:b5:65:fb:d2:65:09:02:19:29:
                    31:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4B:04:C7:ED:56:8E:3C:8E:C1:22:A1:8C:F4:71:EB:2D:6D:A9:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/34625096-7901-3cf5-9d4c-f7b753d29a48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:6c:1d:37:eb:67:9b:4b:ca:5f:68:2f:6a:90:b2:5b:fe:28:
         40:93:44:64:60:31:77:09:6c:31:53:a7:fe:61:f9:71:cd:55:
         14:82:4f:e8:0e:e2:a4:a0:95:df:6f:ef:c0:3b:48:52:26:19:
         41:f9:bf:6b:a6:9c:5e:0a:e5:e6:57:cd:6e:01:1e:6d:83:f4:
         da:4b:35:a2:f2:c2:0e:8c:03:1a:70:56:41:e1:3d:36:13:a6:
         d6:36:b9:55:25:bf:17:bd:fe:64:f5:6f:f3:5b:7c:ea:e8:f1:
         ff:bc:5a:8b:a2:9e:e9:7c:be:0f:12:44:eb:db:a9:67:a2:bb:
         c5:73:fe:aa:c3:98:6d:13:37:48:57:20:1e:d4:af:c5:3c:b0:
         62:91:6b:3e:79:d1:f9:b6:1a:d7:5d:85:51:8e:1a:5d:f7:77:
         c1:ed:11:82:9a:02:5a:da:84:9f:6f:4e:13:e5:b5:7e:c8:08:
         d5:64:ba:97:a5:e2:8c:b9:c5:4d:c0:9b:e9:d0:17:58:ea:24:
         31:59:19:7f:07:4f:cb:f0:4e:6e:45:b6:c1:86:50:72:01:82:
         0c:50:a4:66:a4:e6:85:96:f6:69:2a:8f:23:91:e2:98:6e:0f:
         67:1b:e9:e6:fa:17:a1:34:bb:c0:48:9e:00:50:f1:58:b8:a0:
         5b:c7:11:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----