Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/346e383c-9918-3bfc-8758-b6cdb182f752.roa
File:                     346e383c-9918-3bfc-8758-b6cdb182f752.roa (raw, json)
Hash identifier:          VKpTFLESg+VY7NOhnaJ9uwxtGU85dEWj90S9dFoYdRE=
Subject key identifier:   E0:98:B5:3B:91:64:DB:A3:E5:BF:B3:66:7C:98:86:7A:36:39:47:4D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A09DD0A133EEE4A5E6791C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/346e383c-9918-3bfc-8758-b6cdb182f752.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:09:dd:0a:13:3e:ee:4a:5e:67:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=713ac426-91e5-43d7-9fc2-8c875c2143cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e9:2a:b3:99:48:1c:e3:62:0e:23:99:d7:08:
                    d3:09:b1:47:f4:23:9f:f7:0a:b8:1f:1d:e6:28:72:
                    ce:b4:93:6f:b1:62:54:6c:7f:71:63:03:ea:5f:a5:
                    31:1c:13:eb:c3:de:0b:99:cd:d7:fd:e0:a7:75:3c:
                    f6:85:96:93:f6:09:1a:89:94:76:5e:ff:4b:53:b9:
                    60:51:41:4b:69:61:dd:49:9c:7a:80:8f:35:2b:0c:
                    86:25:5f:d9:0e:da:1f:96:f9:b2:80:78:a0:68:35:
                    2e:3e:83:c8:b1:39:ad:9a:b4:ae:93:3f:ed:1e:6d:
                    40:b3:7f:e1:b5:d7:35:a8:60:a5:da:2b:ea:ff:a7:
                    3c:2b:d1:e9:bb:ab:c2:fc:b4:1e:5e:5b:b8:8b:dc:
                    9c:08:51:dd:a2:da:21:ee:95:c5:0c:c5:c3:9c:0e:
                    79:c7:09:86:fd:00:2a:d2:5b:26:73:7a:33:e6:00:
                    f8:f8:a3:76:d8:4c:4d:b2:08:fc:5f:dc:ac:7a:61:
                    0e:b5:3d:cc:a1:8a:8a:2a:b7:59:15:7e:53:b6:bb:
                    7a:ff:28:ea:bb:00:38:ae:ec:05:88:2a:ee:05:cd:
                    5b:a6:1f:ca:c4:b4:ff:2c:fa:8b:47:2b:f3:95:de:
                    78:7c:dd:1f:da:0d:d4:d4:88:dd:db:9e:98:f2:7b:
                    98:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:98:B5:3B:91:64:DB:A3:E5:BF:B3:66:7C:98:86:7A:36:39:47:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/346e383c-9918-3bfc-8758-b6cdb182f752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:b1:37:dc:7c:de:e3:2a:57:0c:94:87:cc:f0:37:ed:5e:cc:
         29:d7:c8:44:fd:06:cf:56:61:f6:06:0f:6b:e1:cd:9e:b2:96:
         bc:92:42:dc:c8:fe:7d:d4:d3:6a:c3:fd:89:09:f0:d6:72:15:
         04:88:f0:95:47:2b:be:21:ad:de:bc:15:37:cc:0f:29:c2:51:
         c3:50:95:80:82:72:14:d1:09:b0:83:d5:5e:d6:39:cc:a5:01:
         0b:c7:31:73:bf:56:4f:c9:75:12:8e:45:42:e7:ef:8a:a5:5c:
         32:1f:0e:bf:c1:82:6d:89:26:a6:99:ef:20:f6:71:b2:bc:f6:
         98:81:b7:18:ad:39:91:fe:29:37:e0:f1:2a:70:51:a8:f6:b5:
         04:cf:ce:5d:a9:51:f0:7e:03:1d:d5:97:49:ed:8e:66:c5:02:
         8d:6a:f5:88:96:28:a0:87:11:78:e7:bf:99:6a:8d:9c:ee:e3:
         fa:09:a3:86:c3:dd:dc:6e:fe:94:59:61:59:bb:7e:9b:91:7a:
         58:ac:ad:36:60:b1:6f:58:7d:6b:84:58:ff:38:c1:91:b3:30:
         de:b5:8a:6a:b7:ee:21:ca:53:f1:c5:c3:ef:f4:71:d2:20:15:
         de:fe:19:49:5c:c5:e0:f2:80:28:43:38:02:c8:1b:bd:d6:cd:
         0a:3c:38:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----