Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/48775fae-ff38-341b-b9ca-a415e843af2e.roa
File:                     48775fae-ff38-341b-b9ca-a415e843af2e.roa (raw, json)
Hash identifier:          Etpz5nT3Hr/9f2sp783tUgABBDUBD3PkcXmhjNqV4f0=
Subject key identifier:   8D:C2:48:D0:2D:3A:D3:82:CA:33:45:F5:BB:9C:3C:07:02:79:44:10
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309FCD613ECB9EE721075A61A
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/48775fae-ff38-341b-b9ca-a415e843af2e.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.244.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:55:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fc:d6:13:ec:b9:ee:72:10:75:a6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=5adde6b6-1626-43ac-9616-77db66a547e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4d:e4:92:31:bd:1e:11:6a:3d:09:19:8d:95:
                    68:fc:d8:54:4a:fe:ae:e3:29:4f:44:b3:70:fc:cb:
                    48:4d:27:84:99:2a:96:78:ef:58:2b:93:8d:36:f2:
                    5a:72:f7:6d:14:ad:32:d5:e7:50:42:9b:c4:52:b9:
                    4d:91:dc:0c:b8:3a:9a:df:65:6a:c0:36:cf:a7:68:
                    63:22:50:b8:7b:e2:5f:b9:b0:be:18:34:fb:12:17:
                    da:dc:fb:31:de:86:57:f8:67:28:60:a5:1c:7a:57:
                    99:a6:8a:e8:47:aa:d7:b8:3c:5b:f0:d6:71:f4:9c:
                    a7:07:9a:2b:d6:05:d3:45:25:da:b8:a2:63:89:40:
                    4e:5a:30:ed:72:24:72:e1:8e:39:ed:92:36:21:a1:
                    14:a3:26:e1:45:6d:71:00:c0:11:79:a8:4f:3d:24:
                    b2:19:6f:b8:64:45:50:79:4b:66:07:41:e0:49:36:
                    54:4e:22:13:7c:d9:b7:e0:d0:8b:9a:66:71:ba:be:
                    da:3c:07:4e:4b:1d:6c:ef:45:af:a0:d3:57:ab:82:
                    c4:2f:b9:09:5f:fd:62:e2:44:79:da:81:3c:61:6a:
                    b7:47:75:2c:e4:ee:5e:96:31:2b:55:d9:e9:98:46:
                    ad:f0:f8:2a:84:89:0f:d8:48:09:7c:42:e1:ed:65:
                    77:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C2:48:D0:2D:3A:D3:82:CA:33:45:F5:BB:9C:3C:07:02:79:44:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/48775fae-ff38-341b-b9ca-a415e843af2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:27:ee:3b:0e:97:4b:ca:89:ec:ef:8c:25:9b:bb:f5:32:2f:
         74:97:69:ce:c2:8f:d3:45:0e:2e:82:9b:60:08:4c:53:a3:ee:
         53:83:ee:15:2b:96:4b:9f:28:0c:21:8e:41:c2:67:16:78:ba:
         fa:82:8c:d7:58:16:30:28:40:60:f4:10:ff:f1:49:fb:db:04:
         69:50:42:fd:46:57:92:e9:67:d4:83:16:b5:cc:26:5e:18:46:
         ad:17:ef:ef:16:1d:51:1e:f2:48:db:ea:d3:32:f3:7b:22:5a:
         52:bb:41:5f:12:e1:5f:9b:8e:b3:79:3c:c0:c5:01:d9:56:65:
         b5:c9:64:1e:9a:df:87:53:60:f2:45:52:c7:14:c6:a6:47:20:
         11:a9:dc:ba:5a:87:7d:0d:b7:6e:a1:0e:3e:91:6f:0c:90:8e:
         13:32:5a:69:2c:84:0f:63:13:31:a8:8f:76:e7:9d:71:34:22:
         66:6a:05:f4:30:26:96:98:6c:63:c1:38:a9:05:92:84:28:e2:
         ac:ea:07:b0:8c:8d:39:35:bf:d5:c1:67:98:b2:84:9f:14:cb:
         cd:67:a9:dc:1a:79:58:f4:3c:56:05:c2:b3:15:96:1b:80:3a:
         9a:21:02:a1:09:b7:09:2a:9a:bb:a0:1f:cc:38:f2:4c:d8:7e:
         a0:61:e8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----