Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/52de8f37-d593-3b3a-81ce-aac3f03a333a.roa
File:                     52de8f37-d593-3b3a-81ce-aac3f03a333a.roa (raw, json)
Hash identifier:          XrTmXd9hmnX5YuNH1G9mdBYV7tNjBuCqKcvoOZ9y+8s=
Subject key identifier:   59:5C:6D:92:0B:B2:86:DF:62:79:00:3E:F2:20:83:FA:1F:C0:64:53
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A1EFE9331E8E0F6870CF260
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/52de8f37-d593-3b3a-81ce-aac3f03a333a.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.184.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1e:fe:93:31:e8:e0:f6:87:0c:f2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=9cd6bc98-60a0-4a68-add8-5bc6899632d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3c:69:15:a8:a0:21:ac:ae:6a:04:3c:be:c5:
                    9d:7c:22:dc:86:0f:11:ec:8c:8f:7a:81:10:e9:36:
                    31:75:e4:06:79:07:7a:38:f7:16:fb:6f:ef:df:ea:
                    0d:73:46:a4:18:b5:91:45:cb:e6:0d:ec:5e:cf:0d:
                    e1:a8:06:8f:aa:11:41:90:f1:c9:b7:8f:f1:c6:66:
                    f1:80:06:9c:e7:c1:8d:15:72:53:4e:c3:ea:20:48:
                    29:4f:0a:2f:8a:e1:4f:c9:66:92:a4:69:3b:26:dd:
                    46:1c:c6:e1:2c:04:e1:ca:be:f3:c0:b9:3d:82:09:
                    c9:3f:11:2e:14:99:8d:95:57:ba:09:04:c2:68:3e:
                    51:4a:85:11:13:88:78:b9:4d:97:64:d6:8b:5b:fc:
                    b3:7b:d4:db:9b:e4:7f:4c:9e:a2:a3:a3:36:2b:83:
                    68:2b:9c:27:27:4c:05:07:12:5c:c3:e6:88:4b:71:
                    da:db:85:8d:ca:bf:4f:38:08:b8:77:7c:8f:f2:db:
                    c7:2b:f8:ab:b9:5f:bc:80:d5:73:14:e4:21:ed:e0:
                    0b:b9:c7:c6:6e:9b:cb:2d:30:9e:19:d9:42:f4:2d:
                    9f:dc:9e:d8:33:4c:7b:ae:48:62:e9:1c:23:f9:16:
                    44:63:0a:ae:d1:86:80:a6:d7:a7:16:19:09:20:1b:
                    13:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5C:6D:92:0B:B2:86:DF:62:79:00:3E:F2:20:83:FA:1F:C0:64:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/52de8f37-d593-3b3a-81ce-aac3f03a333a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:64:8e:88:66:11:25:2d:ec:ab:23:bc:68:f6:00:ef:97:98:
         e2:91:f3:c0:00:a7:82:d0:02:c3:41:1d:08:84:5c:46:d2:e3:
         7e:35:26:23:8a:bf:78:30:f8:59:9a:3b:ea:d0:c2:ba:52:8b:
         64:d8:4d:4b:64:f8:d6:1e:ab:ca:f3:bf:42:16:56:3c:6a:5e:
         4f:2c:57:2c:d8:a8:ed:c7:cf:2c:74:6b:38:1c:24:75:25:2f:
         4d:9a:16:fa:89:ff:34:ef:d6:2e:2a:5a:e3:21:60:ce:2c:e5:
         94:f1:f6:96:c2:da:2c:51:d8:6e:b8:4e:00:02:e9:9d:0b:35:
         20:36:bc:ec:8e:2c:ea:55:22:8e:4c:31:ba:6c:c2:5f:6b:47:
         44:bb:70:e2:15:b0:7a:4a:3f:8d:89:bf:ed:39:c6:ef:55:47:
         4b:24:b3:30:39:b5:8d:77:15:2c:a1:e5:b3:4d:c6:7a:81:d5:
         13:41:ba:37:66:ba:9e:bc:8c:ff:a2:e9:83:af:12:66:c0:cd:
         0d:79:f0:87:4c:fe:75:a8:e8:d5:81:a6:23:38:99:bb:2c:65:
         61:f8:63:cb:92:55:e0:98:0b:38:be:e8:68:84:93:7b:86:6a:
         6b:7d:02:64:c7:a4:be:94:6a:99:69:9e:96:41:9b:03:45:86:
         07:87:f3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----