Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35b25db0-ac92-3fa3-8436-bf4c034fbe41.roa
File:                     35b25db0-ac92-3fa3-8436-bf4c034fbe41.roa (raw, json)
Hash identifier:          Zor2V0HaevXcUvN39iMtKFJZcp3c80Mk0gZe+Hms1O4=
Subject key identifier:   D2:01:B5:8B:B0:AE:CD:0C:43:04:0E:16:3E:EA:DF:75:A8:1C:AA:D4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309F75B489128BC4EB76DC880
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35b25db0-ac92-3fa3-8436-bf4c034fbe41.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.160.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:37:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f7:5b:48:91:28:bc:4e:b7:6d:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ad14030d-a273-41ce-9f5d-c8765d925c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f9:be:3e:83:a7:f7:d0:9b:94:6e:d8:37:a4:
                    87:93:a3:30:92:6f:22:b9:0c:d7:81:33:f8:94:10:
                    b1:1b:bb:b8:0f:a3:33:45:15:67:83:98:cd:b0:06:
                    61:bf:80:c4:f3:9f:ac:cb:db:4d:c6:73:20:c2:f2:
                    d3:b9:90:92:ba:a0:c8:5b:3a:24:a6:07:31:48:31:
                    5d:3e:d5:09:52:d5:c1:6b:4e:bd:eb:01:fd:20:0e:
                    3f:a6:07:d9:76:3a:9b:2b:10:b7:14:49:fa:9e:3a:
                    c2:86:14:31:78:87:1d:a9:bf:ee:32:6d:2d:4b:c1:
                    af:47:70:a3:cb:42:aa:81:3b:2b:7a:af:62:8e:cd:
                    bf:87:fa:2c:b7:4a:9c:f7:37:9e:6d:55:6f:0c:c8:
                    ce:0a:8d:67:cf:d0:f9:ef:22:32:29:bd:78:4a:2a:
                    a9:e4:47:99:9e:dc:0f:c7:bd:6e:c7:ff:7d:44:63:
                    06:ef:43:76:2c:74:c8:b0:54:91:00:77:bc:e5:8d:
                    9e:c3:96:f1:b5:b4:fe:b3:3a:e0:4a:88:99:8c:9c:
                    e9:94:28:93:ae:66:90:f2:08:47:ad:64:72:a7:08:
                    45:29:92:55:44:2c:47:57:0b:27:32:e6:87:cb:d4:
                    4e:bd:ff:32:33:bd:32:cc:71:b8:28:df:6f:54:8e:
                    4d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:01:B5:8B:B0:AE:CD:0C:43:04:0E:16:3E:EA:DF:75:A8:1C:AA:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35b25db0-ac92-3fa3-8436-bf4c034fbe41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:99:bc:49:99:42:6c:75:b2:54:e1:c0:ba:1e:48:c6:8d:c3:
         28:5f:cd:16:24:5b:f7:b1:37:86:70:3a:0d:15:b0:68:4a:66:
         2d:4a:fa:bc:d4:29:10:59:a0:87:61:95:cf:74:cf:bf:d5:2c:
         03:8f:d2:c3:ea:15:f7:5b:94:69:e8:c8:e9:94:76:78:ce:3e:
         a6:f2:85:1a:62:94:2b:77:1c:d9:b8:4e:e8:64:95:50:62:11:
         ae:ff:b5:90:80:32:cd:e2:2d:bb:4e:93:eb:1f:c6:6c:c9:04:
         c4:21:96:6f:c4:8c:75:a8:68:fa:ed:d5:09:fb:dd:b6:62:1e:
         d0:fd:ed:16:9b:f4:b2:2f:99:c6:c0:62:c2:e3:0b:be:83:57:
         06:eb:de:eb:b4:7c:b9:c2:3b:a2:bb:fc:3b:c6:72:7e:49:ee:
         79:20:ef:99:b7:b1:2a:a6:d8:14:a1:89:0d:99:25:bb:44:23:
         b1:d5:d9:f2:b0:6e:38:ff:6d:cd:3e:9d:f6:39:a8:5c:90:59:
         f2:c8:cb:c3:7b:1b:55:d5:c8:38:02:05:14:5d:d1:49:74:57:
         0d:65:73:05:7e:bf:42:bb:86:0f:c4:47:6d:2d:36:fc:6c:03:
         f4:30:5e:09:14:a4:bc:fc:ea:62:89:2f:26:0e:0b:6e:8b:94:
         a2:54:21:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----