Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/47c338d5-2189-37d6-9936-eadbde547e41.roa
File:                     47c338d5-2189-37d6-9936-eadbde547e41.roa (raw, json)
Hash identifier:          /+PFn17sLSItUi9e5pbkQ8kIQ+375ODvWv7dJQhFxo8=
Subject key identifier:   7A:39:DA:44:B6:A8:D1:84:94:B5:0F:99:C0:E9:DE:E1:04:C2:57:F2
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A1848FED7F53FD85B2B71C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/47c338d5-2189-37d6-9936-eadbde547e41.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.133.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:52:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:18:48:fe:d7:f5:3f:d8:5b:2b:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=e5420256-8919-4306-b9fe-368464b08678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b4:27:98:16:a5:d4:85:16:ea:43:9b:ec:81:
                    c1:be:2a:04:cf:64:a1:6e:fb:37:bc:39:31:a6:ec:
                    ea:13:62:75:5b:fb:9d:24:b7:55:40:90:cd:9d:8a:
                    90:a3:5c:6b:20:f1:6e:22:7b:0b:b2:0a:00:15:c3:
                    d9:10:be:a6:0d:9f:18:b5:66:41:16:cd:f0:49:9e:
                    60:68:a1:a1:9b:c5:85:04:e6:bc:a7:b9:92:1f:d4:
                    e4:07:ea:da:5a:a1:77:a8:0b:d6:35:ed:af:4f:66:
                    14:a3:ed:26:06:42:15:bc:aa:a4:50:67:b6:35:fe:
                    20:28:cd:36:14:73:7f:65:84:1f:07:1d:67:a7:41:
                    7c:12:3b:c5:c8:05:32:81:72:99:48:31:ca:45:17:
                    dc:43:03:30:d7:c5:f3:b1:ce:ad:88:3c:e7:d0:a9:
                    8e:08:3e:f7:c8:93:3e:df:45:d9:6d:96:cd:1b:59:
                    29:3b:88:75:f0:7f:87:72:46:73:57:5b:d9:b0:98:
                    cb:2f:26:f8:bd:99:9f:ba:e7:9e:01:8f:73:30:6e:
                    92:5a:73:12:f6:2d:85:05:bb:dd:09:75:ab:e0:12:
                    d8:79:46:56:15:63:e1:b4:2d:ce:b0:41:96:d4:e1:
                    92:69:cc:0d:c1:aa:48:8d:b8:ae:f7:62:ae:44:6a:
                    46:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:39:DA:44:B6:A8:D1:84:94:B5:0F:99:C0:E9:DE:E1:04:C2:57:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/47c338d5-2189-37d6-9936-eadbde547e41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:ba:6d:28:e5:42:9a:77:bf:97:4d:77:51:5d:c3:79:1b:91:
         ce:1e:77:2e:83:3f:6f:23:9b:b0:af:d9:96:ae:e8:c2:a6:a3:
         03:06:ec:27:9d:65:d7:8c:c6:54:f5:12:5f:a4:ef:3b:e9:bf:
         98:c4:65:8d:e1:43:38:24:3e:18:54:ed:95:b3:6a:3b:fc:d0:
         87:2b:30:89:04:f2:b0:2b:37:c5:80:25:37:bc:4a:79:39:82:
         cc:b2:c2:44:ef:30:21:f2:95:aa:64:b5:c6:10:65:93:4e:e6:
         6f:5f:bc:cf:6a:94:91:47:b6:06:81:98:51:98:e9:bf:5a:59:
         8c:44:f7:97:8a:52:2a:b0:91:45:af:5d:c0:df:7a:33:7f:fe:
         f5:2c:2b:60:fd:1c:5a:83:9c:c8:4c:21:87:d8:c6:e4:88:ce:
         a0:74:eb:b8:49:f0:6e:42:e1:f4:10:c1:d4:10:37:9c:d1:f0:
         3d:e0:42:fb:fd:ce:23:72:8a:78:b1:8c:f2:52:aa:f7:23:b7:
         ec:bf:b3:bb:b5:25:b0:c8:44:5a:34:9d:4e:bb:59:3b:e8:97:
         72:4f:8d:f0:83:0a:ef:fb:32:b9:86:f0:f9:9e:42:b2:b4:3d:
         75:f6:aa:93:f3:ea:2b:96:de:88:4e:d8:58:b3:83:39:98:f9:
         dd:3c:d6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----