Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3d81badd-9168-3f7e-95e8-339e135de9fc.roa
File:                     3d81badd-9168-3f7e-95e8-339e135de9fc.roa (raw, json)
Hash identifier:          WJQLzFHVphVqnhd8QcIfq4Dzoro3j1dbqq3l9jSG/68=
Subject key identifier:   B3:7B:9E:AF:39:B0:6B:35:DF:F1:02:B7:F1:CD:91:12:DB:FF:6D:60
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A105B28469DC7579D4DBE00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3d81badd-9168-3f7e-95e8-339e135de9fc.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.215.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:48:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:10:5b:28:46:9d:c7:57:9d:4d:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=a501465c-3a4c-4203-9ba6-0e3140996c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:30:91:23:1f:65:5f:17:37:72:04:71:7f:1f:
                    e4:ec:bb:97:b6:6d:ea:55:c2:03:02:e5:6b:14:72:
                    cc:3a:ac:dc:25:f8:5e:07:9d:2b:ad:5e:c9:cd:e2:
                    66:e3:f5:6b:9a:e6:22:9f:a3:2f:d9:f3:73:28:b1:
                    8c:01:8e:75:5f:1d:c9:3b:91:52:c3:5b:a6:f9:19:
                    52:cf:b8:e8:44:cd:a8:9e:4a:a2:30:7c:3d:de:a5:
                    43:46:b4:e6:c6:0a:34:ba:65:df:54:05:09:7c:97:
                    20:da:e0:37:56:10:ee:7a:57:71:62:1b:07:97:35:
                    b0:b1:f0:f5:81:c2:ec:ee:d9:0c:93:81:01:dd:97:
                    d0:ed:9b:b9:29:d4:47:74:3e:96:9f:66:1d:ff:27:
                    d4:8a:9e:b1:ca:6e:98:8c:4f:5c:bd:8b:a2:8e:f8:
                    42:56:4e:ef:1a:74:7b:bf:c4:d7:b2:72:8c:24:23:
                    32:99:9f:6d:db:f3:11:fb:25:6d:5c:44:05:1b:49:
                    07:09:23:24:0a:19:48:da:3d:e1:fa:0b:f1:b2:73:
                    e9:a4:b8:fa:f5:d0:75:d4:91:09:d3:ea:bb:97:e6:
                    4c:7a:c6:62:95:11:2e:0c:91:59:0d:c3:84:cd:f9:
                    76:04:5b:22:61:ba:1a:33:9e:11:c5:3c:7e:77:7c:
                    14:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7B:9E:AF:39:B0:6B:35:DF:F1:02:B7:F1:CD:91:12:DB:FF:6D:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3d81badd-9168-3f7e-95e8-339e135de9fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:ef:00:1b:a3:d0:40:c9:65:bb:91:eb:90:86:85:48:ca:e3:
         9a:fe:3c:af:a4:6d:38:19:b5:d1:37:73:f9:3c:16:e3:09:a0:
         13:8e:51:2f:04:ec:38:36:ec:7a:e5:53:77:41:51:7e:9d:81:
         0b:d8:6b:46:13:89:43:3d:89:1f:a4:72:01:1b:cd:7b:98:9b:
         4c:2d:ce:5e:e6:5b:31:55:4f:20:c3:cc:30:26:02:78:c0:8a:
         2f:c7:18:5c:d6:b6:d8:ab:57:37:fe:3d:7d:4f:7e:28:8b:04:
         d6:97:79:a6:4b:08:bf:db:dc:1a:86:d0:76:16:dd:62:d3:03:
         44:5b:a4:05:35:f7:ea:bd:fb:39:7c:40:33:bb:5a:65:4f:02:
         24:09:07:b1:37:a7:36:57:41:6b:d3:c6:3c:c2:b4:4b:46:8e:
         d9:34:2e:bb:11:1a:93:ce:5f:17:e9:71:29:5a:91:df:76:c0:
         42:d5:68:c8:d5:c3:dd:b6:8d:a7:02:03:08:93:ff:e5:e7:90:
         95:49:4c:b0:28:c7:9f:e6:cd:af:2f:60:29:db:cf:8a:f3:5f:
         42:91:47:a6:c1:05:76:26:a3:28:8e:1b:36:c7:f4:d1:e2:df:
         f1:0a:b4:58:c2:1c:0d:f3:eb:bf:f4:00:5b:1d:d7:8b:24:27:
         c7:b6:f8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----