Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4c39e07a-3632-3bb6-894b-a9080799ad47.roa
File:                     4c39e07a-3632-3bb6-894b-a9080799ad47.roa (raw, json)
Hash identifier:          fKcFVxE7x1ZS3baUb1UAXCaYhp63hg8hlpjJcPxF/ZU=
Subject key identifier:   C9:E7:B1:7A:22:3E:5C:0E:C2:30:67:BC:42:B6:B4:0E:D9:DF:8A:61
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A18FC11160C13269E52FD00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4c39e07a-3632-3bb6-894b-a9080799ad47.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.231.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:18:fc:11:16:0c:13:26:9e:52:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ea7745c7-d1b5-47ca-8f66-0176d2d47cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:70:70:91:4b:60:1a:b8:d5:50:ed:d7:8b:0e:
                    3d:7e:b1:fc:e2:73:bf:05:aa:75:2c:ac:16:55:e6:
                    41:36:4f:9a:d0:65:71:45:be:4d:0e:8f:e4:c0:5d:
                    f0:9f:18:96:cd:ee:65:9e:c1:4a:49:8d:be:75:1e:
                    e5:a7:d8:5b:0b:50:8a:21:e1:38:bb:33:d1:bc:43:
                    0f:6e:9f:6f:13:72:5d:c9:44:7a:03:93:50:40:94:
                    81:99:4b:14:88:ef:e3:2e:96:91:d3:a4:de:71:4c:
                    3c:8d:e1:dc:6d:a2:1a:99:8c:8c:14:34:7d:c6:e9:
                    63:01:f0:3d:e3:8e:9e:9a:ff:60:18:f7:19:1b:01:
                    76:97:26:5c:42:34:50:98:a2:aa:3d:bf:ec:15:ea:
                    4a:27:2f:dc:a6:93:e7:50:12:45:59:6a:75:fa:d6:
                    19:7a:a9:71:ac:8d:53:3f:5b:3b:60:c4:b9:36:0c:
                    34:f8:a8:a2:ca:ed:a7:76:f7:91:8e:2b:09:21:3d:
                    68:45:0c:a6:44:a8:14:8b:35:7d:ee:f8:0a:90:89:
                    a3:dc:29:bd:05:f2:73:2e:42:fa:ee:49:92:e1:d5:
                    af:2d:90:bf:8d:93:0f:f0:41:69:60:f9:e9:4c:0c:
                    41:7d:0d:bb:60:15:4f:08:41:31:45:6d:10:f8:3f:
                    a0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E7:B1:7A:22:3E:5C:0E:C2:30:67:BC:42:B6:B4:0E:D9:DF:8A:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4c39e07a-3632-3bb6-894b-a9080799ad47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:97:86:97:2a:be:de:8f:64:40:74:c3:fa:ed:30:b0:e4:e4:
         0c:13:ef:d1:62:2b:af:7b:06:0e:5e:7a:5f:6b:69:3f:ef:2f:
         1f:33:0c:6b:aa:0f:73:42:bf:bf:0e:53:fa:21:f8:84:3b:ec:
         58:2e:f8:ad:de:2c:0b:11:f8:0e:4e:e8:e9:39:55:d0:70:11:
         23:d8:bf:1f:5a:3d:3c:98:fc:7a:eb:5f:9b:5e:69:01:06:e3:
         b1:e9:01:6f:12:d0:08:c8:60:ce:6f:bb:9c:d5:91:f9:07:6e:
         6b:35:90:17:bd:4a:42:72:03:2f:47:ea:7f:b7:12:25:03:86:
         06:ae:db:e7:30:ca:ae:1f:a8:3a:0f:df:c6:4c:03:49:2c:47:
         43:bb:9b:9d:77:df:60:77:5c:93:3c:1d:c4:b6:a4:7d:57:fa:
         c9:95:37:8f:82:f3:69:59:db:ad:9b:7d:21:f1:7d:1b:47:08:
         69:ab:e7:27:e5:8e:40:ce:b4:55:90:60:d6:5c:07:19:29:dd:
         d7:ec:63:10:64:49:22:9a:61:02:16:f6:0f:ef:ea:31:8f:d6:
         37:f7:d6:ca:f6:2e:0d:10:c7:2e:34:aa:fd:eb:46:8b:2f:f3:
         b5:d7:0e:8c:b2:e4:c1:88:3b:16:9e:1a:c2:a6:dd:dc:2e:1e:
         a1:c3:ad:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----