Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/592b7330-9d42-38e9-9142-89ec96dfd297.roa
File:                     592b7330-9d42-38e9-9142-89ec96dfd297.roa (raw, json)
Hash identifier:          ZIhMR3X9FdHhmjkeLl4NcwaJE8gPcAETujdK0h3GAsw=
Subject key identifier:   A4:6D:41:59:50:66:32:9D:48:E0:C9:EA:E0:90:3D:79:3D:22:FA:C6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0C6F5CA5D8B2A11AED4980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/592b7330-9d42-38e9-9142-89ec96dfd297.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0c:6f:5c:a5:d8:b2:a1:1a:ed:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ee617850-5f9c-4313-a68b-ef7c2fe796c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1c:d6:58:09:47:72:e2:eb:73:f9:98:57:af:
                    1f:d9:7a:2c:ea:c6:ea:0d:08:bf:2d:48:14:31:5f:
                    b1:b7:fe:a5:4f:a2:6b:a6:37:99:cc:79:32:ff:ed:
                    b0:83:66:7a:37:9b:6c:27:20:bf:6b:e8:62:47:e0:
                    5f:39:40:3d:27:85:a2:bc:1b:96:b6:4c:35:81:8e:
                    de:db:bf:1a:b3:3f:3d:0c:07:03:cf:99:4a:02:21:
                    92:ac:8f:78:4b:19:c9:d1:f8:ea:7e:b9:a4:10:9b:
                    06:02:c6:7d:25:17:4e:31:ce:04:f7:70:56:81:05:
                    8b:a6:36:ee:b9:5b:99:09:a5:fc:45:db:12:7f:2f:
                    38:8c:9f:aa:c6:a2:d7:2c:4a:7d:58:12:d7:a5:4f:
                    62:06:8d:73:20:23:c0:9c:70:19:24:de:6d:cb:96:
                    31:96:51:1e:88:39:81:0a:88:2a:6d:23:f7:3a:19:
                    8c:1f:42:01:56:b0:1b:e2:fa:64:4e:6f:a2:ba:f2:
                    36:91:32:9e:04:69:a1:ea:bb:ed:79:07:93:1b:a3:
                    3c:10:ff:3e:0e:15:2f:30:5d:ea:0a:b2:51:b1:61:
                    1b:4f:ff:94:d6:7d:5a:95:cc:0e:1c:03:e8:88:33:
                    2f:34:bb:9d:73:48:48:62:3f:dd:88:3e:e5:5b:e5:
                    6a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6D:41:59:50:66:32:9D:48:E0:C9:EA:E0:90:3D:79:3D:22:FA:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/592b7330-9d42-38e9-9142-89ec96dfd297.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:3c:c7:c5:31:e3:b1:ee:b3:2b:09:eb:78:e7:f9:d2:c1:34:
         13:97:f2:bf:19:20:13:8d:11:46:2b:74:7e:01:d8:a9:3a:51:
         2f:d2:ce:c1:61:91:63:8d:5b:6f:36:7f:5b:b1:8f:ff:e5:57:
         a0:b3:fb:57:e6:fe:8f:bd:5d:a7:0e:37:fe:b3:8e:e9:b8:7b:
         9f:b6:9c:5c:70:da:f9:d2:bc:0c:88:cb:8e:17:37:fb:f8:f0:
         8e:34:49:45:0d:b8:6d:10:46:ed:55:41:47:49:b2:a4:b5:d8:
         f2:ac:25:11:b3:8b:ee:12:1e:29:0c:e7:9a:74:67:a4:cf:2a:
         57:ed:de:12:52:b5:9f:08:03:7d:67:0e:19:1c:31:37:98:4b:
         d5:c5:7b:6d:37:9e:02:7c:bd:55:a3:26:46:75:85:df:e2:cc:
         9f:e7:ee:5f:d4:6d:bf:a1:aa:46:64:1c:8f:e3:00:b3:e0:6e:
         3c:d4:73:43:71:3e:57:c7:f7:47:93:ea:47:b2:4e:8d:bc:b8:
         22:66:a9:92:19:3e:fd:86:34:48:13:fe:ff:64:af:74:62:50:
         7a:c7:7c:64:16:4a:90:12:ec:41:b4:07:96:42:54:2c:b0:97:
         80:83:6a:4e:95:a9:8c:2e:6a:20:5f:d0:41:2b:bc:90:f8:ca:
         48:8b:46:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----