Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/55d100cf-6542-3e08-a510-93a943ba84e1.roa
File:                     55d100cf-6542-3e08-a510-93a943ba84e1.roa (raw, json)
Hash identifier:          RUAhG9v7kOmhKhq6YwiEJe1drbjS4IJp7hXVgjYX6r0=
Subject key identifier:   2A:07:EA:37:27:D2:10:15:73:F7:4C:2C:AB:77:48:6A:E8:1A:72:41
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A059F0D577944C54F0E4580
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/55d100cf-6542-3e08-a510-93a943ba84e1.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:05:9f:0d:57:79:44:c5:4f:0e:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ebfe92e8-3ee5-4e41-9ab7-d947b3163c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9e:ba:41:5f:2a:fa:b9:4c:50:81:e3:1d:1f:
                    dd:a9:a4:8a:55:5d:cc:a8:24:3a:d3:d2:c8:9f:f1:
                    40:88:ff:37:0e:97:17:c9:83:b6:7e:3c:65:62:f2:
                    02:ee:0c:77:b9:0b:3e:1f:46:93:05:59:65:0c:03:
                    d0:78:40:ca:7c:4a:99:3c:aa:a3:bd:e1:20:bf:5b:
                    fd:38:87:07:a6:76:4e:d9:ed:50:da:57:85:1a:ba:
                    5b:14:44:03:f5:75:35:9f:55:35:e8:b3:62:25:74:
                    11:b4:75:ad:2c:48:6a:8f:89:a7:f7:bd:5f:40:5e:
                    5e:86:6d:2e:1f:4e:e1:f9:02:eb:6e:24:b5:ad:41:
                    af:4b:8e:ad:6a:f0:99:1f:ab:c4:e8:e6:c5:e4:eb:
                    e6:94:cb:b1:d2:57:b0:ae:05:a4:be:54:6c:92:36:
                    6c:ee:88:3f:94:ba:e2:9c:44:ce:b1:01:92:47:b1:
                    57:90:7e:43:21:33:e0:14:3c:68:66:a6:f3:ed:c9:
                    8c:ba:e8:f0:fe:50:e2:55:a5:cc:9c:fd:63:40:d5:
                    85:e1:7c:f9:d4:30:a0:81:46:3d:0e:18:05:8d:9d:
                    df:5c:b2:ab:7e:db:df:c6:1d:c1:33:20:a6:7f:d7:
                    a8:15:26:b1:b8:4e:58:b4:eb:76:4c:fa:3f:2f:1b:
                    51:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:07:EA:37:27:D2:10:15:73:F7:4C:2C:AB:77:48:6A:E8:1A:72:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/55d100cf-6542-3e08-a510-93a943ba84e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:98:c3:2a:56:00:ff:60:53:fc:07:5e:9c:45:f1:03:fd:5c:
         53:b3:8b:f2:c1:09:d2:a9:b4:5c:b7:7a:e9:cd:51:65:5f:e0:
         9d:65:78:a0:57:c2:c3:52:a2:ee:3f:22:b4:f7:7e:b4:8b:f9:
         56:6d:cf:1b:75:f8:83:d7:25:20:d4:9b:11:a9:a1:03:47:e2:
         c8:69:3f:2d:5f:53:4b:18:50:38:ca:df:18:36:ae:a3:e3:0f:
         f0:12:05:f9:c7:a5:2b:cd:02:d7:b3:39:9f:80:02:03:e2:66:
         f5:d9:3a:92:bd:04:a0:e5:2b:5a:da:48:95:e8:7e:77:5f:a7:
         06:fd:d5:89:9b:eb:9d:1a:65:36:58:fd:79:64:94:24:72:83:
         0b:98:98:35:a3:a5:58:bd:7c:1a:38:42:a9:35:79:32:8c:ac:
         75:73:96:dd:0d:2e:af:c9:cc:23:54:5f:ec:09:7c:fa:b3:df:
         31:b9:7d:1d:78:aa:89:f4:44:37:c0:a3:f5:e1:33:96:de:c4:
         32:6a:10:98:57:ab:78:db:b0:05:6a:9c:ad:19:a0:7e:44:3f:
         9a:b0:4f:29:9b:b4:26:fe:40:b8:7a:96:c5:f6:54:05:d1:1e:
         a7:7f:80:71:dd:ae:80:09:1f:1d:a8:d2:a6:64:c7:99:3e:27:
         5d:d8:1a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----