Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/47137576-c0fa-3f14-b986-65ba3482a6a1.roa
File:                     47137576-c0fa-3f14-b986-65ba3482a6a1.roa (raw, json)
Hash identifier:          lCksVOeluXU9tyDcFdKiqIY2j4MOoMqMA+Qon8pUzA4=
Subject key identifier:   B0:B7:65:F3:2D:1D:65:32:66:0D:87:1A:9D:33:3B:0D:E2:23:4C:B4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0E207779FF1BB69FEC4940
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/47137576-c0fa-3f14-b986-65ba3482a6a1.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.248.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0e:20:77:79:ff:1b:b6:9f:ec:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=d79dd767-4dc8-4ac0-a154-b8f866fa76da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fa:33:6c:56:0e:b2:73:3c:ac:db:86:57:7b:
                    15:e4:6f:81:34:51:69:8b:23:ee:d1:23:ac:05:13:
                    fd:7f:0f:de:58:ea:c0:91:34:68:68:50:73:c1:e6:
                    d6:0b:cd:15:7d:3d:d9:56:45:58:89:29:4e:78:61:
                    4a:b0:7d:d2:54:b4:d9:14:35:e9:b3:40:63:dc:52:
                    0e:5b:a3:e1:5f:89:51:09:0e:bd:10:cc:6a:55:0d:
                    b9:e3:e2:fc:8c:a0:2f:53:94:d7:28:65:2a:af:f0:
                    13:34:8a:df:59:b5:d7:65:d8:d7:1c:55:3e:5c:8e:
                    41:2a:9c:07:d2:ad:47:69:92:74:70:55:61:83:a3:
                    7e:74:bc:2a:10:b0:f0:af:38:ad:6f:62:30:ac:55:
                    3f:a3:e1:e7:91:0f:18:4d:52:19:1e:7d:4b:38:fc:
                    4f:df:49:ac:32:e0:a8:d0:db:9e:68:87:ee:ef:11:
                    3b:1a:1a:50:af:14:ad:65:9a:ac:24:3f:60:9a:88:
                    23:d9:41:95:28:59:08:0b:4f:19:15:cd:26:50:52:
                    68:37:fb:e3:e7:53:73:dd:65:f6:e5:ef:48:ae:64:
                    87:31:92:7a:a0:c7:54:31:d8:83:db:e6:73:a7:c8:
                    1f:20:b4:4a:23:34:80:c4:6f:d5:a4:bd:e1:3f:c1:
                    c1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B7:65:F3:2D:1D:65:32:66:0D:87:1A:9D:33:3B:0D:E2:23:4C:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/47137576-c0fa-3f14-b986-65ba3482a6a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:dc:b0:52:ab:d9:53:d5:00:66:cc:d6:44:93:83:81:40:7d:
         a2:a9:cf:ca:6c:7c:30:9e:93:b0:d7:39:c0:a0:e7:06:5f:c6:
         71:b2:b3:18:ce:a3:d8:b0:23:b9:ab:24:f2:cb:e8:a1:e9:66:
         8b:ff:b7:80:d6:74:50:3e:5e:ad:ee:54:e2:08:67:68:69:72:
         66:45:7a:f9:47:65:0d:8c:6a:c7:48:b1:4c:83:b6:51:9f:f7:
         12:8b:25:53:92:9e:ae:6f:30:79:f6:98:26:a1:18:0c:69:2d:
         9f:4a:f5:a6:8c:20:29:92:a6:ce:ce:40:f3:07:36:3e:b7:6e:
         5a:af:d1:9f:2f:8d:10:5d:0b:d4:19:27:0a:b8:41:13:ca:c2:
         6e:32:76:7e:87:69:d5:08:90:f4:8a:4b:44:36:91:cc:d5:99:
         f2:f9:4d:29:a8:4f:e6:2c:7a:cb:de:6f:53:80:1b:fb:e5:00:
         e0:cf:7f:ff:b3:ba:fb:c1:01:7c:79:d9:68:c6:f6:aa:00:66:
         af:ac:16:db:8b:1b:4f:c3:ae:84:45:69:ac:0b:82:47:eb:12:
         0c:2f:b9:b7:55:f8:c5:62:52:d9:82:e3:c3:d6:82:90:39:38:
         3e:67:4f:bb:e8:c7:c1:b2:c2:59:92:6e:99:e2:a4:4f:0c:d6:
         3c:28:ff:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----