Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3a6fef7e-eff0-3747-9f8a-1794b53e4b82.roa
File:                     3a6fef7e-eff0-3747-9f8a-1794b53e4b82.roa (raw, json)
Hash identifier:          TZ7iWecOpuVuh10iInqPTrBhFQQAIto/ajvdgsi7d+c=
Subject key identifier:   A8:00:0A:6F:FA:D4:F3:8E:E7:4E:1C:6D:64:DE:83:4D:37:3D:E3:4B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A225449F932E00221F71D00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3a6fef7e-eff0-3747-9f8a-1794b53e4b82.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     395973
IP address blocks:        104.134.162.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:22:54:49:f9:32:e0:02:21:f7:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=41117099-0cca-407d-b358-428cceec9538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:07:a5:c0:01:0c:b3:e3:aa:ba:7f:fd:65:1b:
                    15:b6:0a:69:18:c5:f8:82:24:e9:d4:33:53:91:d0:
                    a9:b1:f0:55:c7:1e:22:6f:7a:58:89:f8:b1:9c:e1:
                    5a:f5:d1:4b:5f:d4:6e:8e:8a:32:b5:c4:5c:29:f2:
                    33:fc:56:b9:bb:30:f6:d7:93:b1:64:b5:bc:c1:e0:
                    3e:4e:2d:89:71:e7:51:20:3b:ca:dd:28:01:e7:9f:
                    02:df:b6:2e:98:e8:cf:af:96:81:48:4a:df:ea:b7:
                    ce:62:0a:c3:0a:8b:f6:d0:a6:4a:fb:2a:30:c8:07:
                    f1:b0:db:e7:29:c4:d7:47:c6:17:05:82:0e:c9:18:
                    4e:6b:6f:77:f0:5b:cd:46:10:97:e8:05:5a:9f:82:
                    ae:08:8c:80:05:a5:df:77:56:9c:64:27:bc:fa:b8:
                    31:e1:6d:b5:dc:ef:69:31:02:81:da:af:75:d3:79:
                    50:03:55:ba:85:cf:1e:52:5f:af:d8:70:63:3a:0a:
                    6d:a3:8e:a4:17:5d:7a:39:3c:f6:85:50:c5:9b:6b:
                    b5:5f:91:28:0c:b2:d3:42:fb:5f:28:65:ea:3f:d0:
                    eb:92:38:95:1c:14:eb:a5:88:19:30:5f:ab:88:49:
                    2c:b5:23:20:6e:a4:fa:07:b0:26:c4:95:90:e9:e8:
                    9b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:00:0A:6F:FA:D4:F3:8E:E7:4E:1C:6D:64:DE:83:4D:37:3D:E3:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3a6fef7e-eff0-3747-9f8a-1794b53e4b82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:b0:b6:24:db:28:aa:f3:0e:df:34:52:db:35:46:e8:b3:b2:
         bf:4d:9d:3a:bb:54:95:a8:87:84:6c:64:33:90:91:e1:cd:03:
         33:f1:ce:67:40:af:29:31:42:57:8b:dc:43:94:40:82:85:14:
         02:9a:0a:74:85:40:7a:6f:d6:f8:3c:78:3f:4d:0a:f2:e8:56:
         a0:04:f3:7d:a0:a0:51:bc:6d:fb:4a:79:c5:e4:04:f6:b4:d9:
         69:df:c0:a9:4f:20:df:ec:94:47:1e:46:2e:e0:a4:74:a8:43:
         87:47:b1:cf:15:9b:b0:ce:04:60:1a:62:63:6c:8e:0e:ef:be:
         a5:df:56:ee:50:b6:bc:5d:2c:c1:f7:ee:e2:ec:35:26:0a:f5:
         bc:59:0d:ac:66:ae:b1:87:3c:46:59:cb:18:22:8c:0d:88:d3:
         af:69:98:69:16:f6:15:4b:f0:4f:f6:c8:84:de:bc:ba:2e:41:
         3b:59:41:23:3c:62:35:3c:60:31:5d:f1:b5:fd:ef:40:a7:3d:
         24:fa:67:c8:c6:d2:45:ac:12:f8:4e:14:44:0f:4f:e9:3d:4a:
         44:4a:40:f9:07:b5:08:9d:3d:b8:72:fd:36:17:b0:c5:9e:c5:
         f7:5d:42:04:d1:71:70:31:4f:70:45:16:00:4a:e6:fd:3c:0e:
         ae:76:9d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----