Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5159cd3b-419e-3688-9e73-f03be8c02ab2.roa
File:                     5159cd3b-419e-3688-9e73-f03be8c02ab2.roa (raw, json)
Hash identifier:          Kf7Ygr77+bzv+U2w4ok4QSf5jHJTe5EfjsG9oOIWdA4=
Subject key identifier:   B8:BA:FF:E2:DF:23:B5:F5:FE:C8:EC:A3:11:51:1F:BF:B4:D1:0F:F6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309F1185B30731544B8E3FE00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5159cd3b-419e-3688-9e73-f03be8c02ab2.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     395973
IP address blocks:        104.134.134.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f1:18:5b:30:73:15:44:b8:e3:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=d38bf62f-bbf5-4622-88f9-6ab1b3a10c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:80:af:2f:f5:06:68:4a:ae:c0:8e:fa:e0:75:
                    71:77:b3:f3:45:9c:0a:ac:81:bf:9d:31:1a:14:d9:
                    c4:d0:e8:0d:f3:ed:8f:ab:ed:22:c2:26:ef:4a:20:
                    b4:4c:a2:9d:6d:9e:a2:ce:b7:9e:8d:b6:79:03:9f:
                    1b:e6:48:e2:36:d7:a4:d6:cc:16:16:e6:44:6a:34:
                    53:0e:d5:48:9b:b5:e7:21:10:85:88:bf:b9:7e:a1:
                    24:9f:b0:d5:64:61:36:22:ed:ca:7e:d4:3b:67:12:
                    fd:9c:8e:ea:80:80:6e:c8:67:72:62:0a:8a:f2:30:
                    7c:a7:65:eb:5c:09:ec:c4:1f:7f:df:e3:80:23:eb:
                    96:dc:0e:58:89:24:05:4c:91:6a:5a:ad:c2:fd:e2:
                    99:ed:b9:c3:65:9e:bb:a6:28:77:2a:91:81:80:65:
                    98:6d:73:97:85:43:3c:06:09:63:78:f4:af:00:7b:
                    cd:0e:8a:3f:05:41:49:3d:63:fb:a8:fd:6a:00:be:
                    14:58:07:ef:91:4b:06:d8:14:be:5d:ef:c6:11:0e:
                    60:92:cb:9f:11:01:40:91:55:f4:66:4f:4d:b3:44:
                    02:f8:7e:a8:ea:22:03:ff:0b:c5:b5:2e:91:3a:34:
                    70:bd:09:5c:11:33:1d:15:72:03:4d:8b:13:29:21:
                    98:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BA:FF:E2:DF:23:B5:F5:FE:C8:EC:A3:11:51:1F:BF:B4:D1:0F:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5159cd3b-419e-3688-9e73-f03be8c02ab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:1a:3d:0b:8b:76:e9:cc:36:b3:be:b0:b2:9e:1f:53:f7:49:
         97:65:2e:61:25:07:da:7f:80:b7:5e:e3:50:04:42:0a:c0:dc:
         4d:23:2d:ed:9d:9c:37:09:a9:69:a1:9d:31:19:e4:ed:27:6b:
         f4:97:8b:55:78:31:54:d9:ea:0b:e7:4c:18:c6:8c:bc:ed:13:
         69:1f:4a:32:0f:e2:71:91:22:3b:f5:8f:95:62:c3:27:92:7c:
         bf:b7:d8:13:bb:64:56:de:75:c7:e3:b8:3b:c0:db:03:a1:01:
         d1:6a:aa:45:63:00:67:62:5e:73:35:8f:18:22:04:27:43:fd:
         da:74:12:1e:0e:b9:de:9d:89:aa:7f:9b:01:4f:d0:f4:05:d6:
         a7:d5:b8:8a:c6:9c:a0:c4:ef:e5:f4:41:d7:23:6f:84:8a:a5:
         f7:f5:32:f3:92:bf:84:ee:30:f0:dd:49:74:11:e4:34:17:63:
         36:ff:de:bd:13:04:86:59:9f:62:c7:38:cf:61:89:35:de:ee:
         bf:c1:71:a8:94:6e:a7:ba:2c:1a:49:17:b2:b4:85:20:25:80:
         fa:b5:90:e7:b6:26:9f:47:da:57:0d:ab:b5:82:70:94:77:cf:
         96:7f:89:7a:12:a3:a9:99:4d:5d:9f:6c:87:f0:d3:ef:94:25:
         1f:40:e6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----