Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e488967-8833-3021-a333-0468b69c7434.roa
File:                     3e488967-8833-3021-a333-0468b69c7434.roa (raw, json)
Hash identifier:          Kz0rJOSGBk4M6kzGpCCA7bbbXkMfBv7/b+onNPD9CQs=
Subject key identifier:   97:6D:EA:69:CC:4B:42:D6:7A:1A:41:C4:78:84:F9:BF:67:95:2C:06
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584275C971CF7F447CC82A4A1D80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e488967-8833-3021-a333-0468b69c7434.roa
Signing time:             Wed 05 Jul 2023 12:00:00 +0000
ROA not before:           Wed 05 Jul 2023 12:00:00 +0000
ROA not after:            Sat 16 Nov 2024 05:00:00 +0000
asID:                     36411
IP address blocks:        104.135.208.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:42:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:75:c9:71:cf:7f:44:7c:c8:2a:4a:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  5 12:00:00 2023 GMT
            Not After : Nov 16 05:00:00 2024 GMT
        Subject: CN=9780bbc5-6746-41e9-ab44-37a52a21ce25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:60:49:08:94:5a:27:db:04:8b:ac:5f:48:2b:
                    5c:aa:3e:db:ad:5d:9e:b8:ba:54:17:4c:81:8b:60:
                    14:f8:c0:09:e6:50:3f:50:de:90:e4:5e:90:eb:50:
                    7f:df:ae:73:59:eb:a2:69:e0:1e:98:dc:14:42:76:
                    a1:ee:9c:ae:b2:3b:d0:c9:cc:b7:0b:c3:dc:4c:2e:
                    36:5d:77:0f:93:0c:10:fb:fa:1a:98:da:dd:06:85:
                    91:a6:c8:d7:3b:d8:7c:ab:0d:67:27:3e:0c:b2:ad:
                    e2:68:cd:69:2a:99:d5:31:c8:de:29:67:07:a1:08:
                    ea:48:e6:29:a0:69:3f:48:57:a4:35:58:06:e8:43:
                    80:54:e7:9e:a3:f1:85:cf:aa:71:ab:28:7e:6a:2d:
                    01:59:47:25:a9:13:00:27:6f:b1:d6:8b:55:98:d7:
                    f1:f3:df:25:02:84:4d:2a:bb:80:df:34:21:42:11:
                    08:ff:19:91:e9:02:2b:69:36:40:03:d5:d8:7e:52:
                    73:8c:ce:06:f7:39:11:8e:86:40:2d:3e:7e:f0:ba:
                    e9:37:c3:49:8c:40:58:71:55:88:39:cb:b6:09:37:
                    58:43:81:f0:d1:1c:7d:39:6e:de:6b:c2:e6:e4:a6:
                    7a:c9:36:90:cf:a9:72:7b:e6:a1:e5:58:24:1c:91:
                    b6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6D:EA:69:CC:4B:42:D6:7A:1A:41:C4:78:84:F9:BF:67:95:2C:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e488967-8833-3021-a333-0468b69c7434.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:b5:24:d9:4d:c7:dd:23:0b:2e:9e:8c:8b:07:2e:a5:f2:5a:
         97:ff:48:f8:12:44:89:38:7c:23:4f:28:ed:f5:1e:79:6b:e6:
         34:97:73:69:65:41:31:04:1e:5a:07:35:9a:6d:ab:54:ba:a7:
         54:6c:87:81:c2:72:35:3e:cf:b2:93:6b:69:91:1e:fd:27:c4:
         e3:93:1b:27:6c:70:a3:bb:61:4d:bd:73:b4:55:c0:2c:86:24:
         bd:2d:9e:e3:ae:f6:36:86:ef:1b:8c:f0:2c:bb:37:75:87:20:
         4a:0e:0d:e9:52:3d:1e:9e:f2:e5:1a:99:81:dd:89:01:dc:9c:
         1e:3c:d6:57:ad:4a:09:00:ec:c3:ac:29:04:aa:e1:0e:e9:fd:
         6d:d3:a1:a7:02:37:76:c8:41:bc:75:1e:de:c1:3b:78:14:d3:
         04:4c:87:a7:b9:1e:f2:16:53:4f:21:83:e8:ab:0f:92:07:7c:
         ab:56:54:db:e9:53:55:3b:5e:a1:60:cd:3e:1a:48:bd:e0:b9:
         2b:a2:3b:4d:8b:cc:9d:b5:9a:ce:e0:ed:b3:eb:c1:f8:b0:66:
         79:01:9e:01:f7:90:a4:0b:09:d6:c9:40:3c:e3:da:4c:c7:92:
         49:54:b3:c1:97:50:56:87:57:bb:5a:30:dc:6c:f8:4c:a0:e2:
         f8:e3:a0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----