Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5e4b919d-02fa-3bb8-810c-acfaadaa3a73.roa
File:                     5e4b919d-02fa-3bb8-810c-acfaadaa3a73.roa (raw, json)
Hash identifier:          RR7nrIRe0+xJ2Qs79+yfMw6TErOSvlnPZfu9MzivCiA=
Subject key identifier:   94:43:A7:DD:8B:95:62:F4:83:47:92:38:EB:6C:5D:91:D5:86:7D:72
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A2896FA1B7DE228DD6EFF00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5e4b919d-02fa-3bb8-810c-acfaadaa3a73.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:28:96:fa:1b:7d:e2:28:dd:6e:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=64fe124c-6b9a-4e49-8a12-ba77dd194293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:01:70:6c:c9:e8:ab:5c:b0:ba:e8:eb:7e:17:
                    bd:c1:9c:58:45:2b:e3:11:c5:a4:50:33:cc:61:0f:
                    48:20:62:6c:23:23:de:a6:c7:15:0c:4f:23:b3:75:
                    95:5a:c5:74:a5:6f:35:b2:df:d4:8c:6f:8b:69:38:
                    7e:dd:3d:81:a7:12:16:f7:ec:a8:a8:21:00:46:4d:
                    35:e7:c4:07:12:2f:b5:c5:5f:b7:8e:37:01:ca:76:
                    d5:25:cc:ca:57:f8:ea:26:29:09:4c:e3:11:c1:a4:
                    fe:0f:1b:bc:19:65:09:2e:9a:c6:c0:01:d9:fa:04:
                    bb:fe:65:29:e4:31:da:75:ee:b4:82:cd:bb:50:8f:
                    2c:ba:88:83:89:a6:c6:f2:b0:ff:db:70:fa:66:ce:
                    fc:23:62:7f:24:e6:90:0b:f2:ce:66:d9:3c:74:62:
                    6c:df:49:00:5a:49:35:b5:dc:68:ae:81:f8:87:f9:
                    e5:85:78:9f:2d:93:bc:18:26:41:54:1c:95:66:29:
                    bd:b4:80:b5:81:13:4e:91:b7:bb:21:9b:8d:39:53:
                    fa:74:91:09:ff:34:83:7d:84:a2:ec:3f:8b:5a:9e:
                    83:60:2a:c9:2d:ce:b1:c9:5f:75:3a:20:13:77:a0:
                    24:56:4f:38:da:98:f1:2f:ca:7e:53:b9:a6:65:79:
                    fa:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:43:A7:DD:8B:95:62:F4:83:47:92:38:EB:6C:5D:91:D5:86:7D:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5e4b919d-02fa-3bb8-810c-acfaadaa3a73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:1f:8e:33:0b:c4:e2:1c:cf:4e:e8:08:8b:94:b3:14:ba:ba:
         fa:ae:53:ca:e7:59:26:47:f7:de:1a:f0:ab:cf:95:48:5d:22:
         bc:07:db:2a:f7:01:1b:85:66:68:dd:00:55:65:0a:86:87:81:
         c6:66:15:cc:61:a6:11:1c:31:7b:03:ba:df:5f:f4:10:d9:0f:
         62:8a:64:a2:d7:4c:e4:b7:85:af:59:b9:dc:16:79:a6:45:68:
         14:7d:ff:58:26:b1:df:d3:80:e4:fc:1e:b0:85:cb:6f:21:bb:
         f9:60:07:21:1d:88:99:0a:af:e7:2f:a4:37:de:84:34:07:72:
         07:d6:0d:aa:aa:4c:4e:67:b6:57:90:f8:60:2f:14:07:07:69:
         bd:bd:c2:88:14:4d:12:1a:4e:90:e9:95:12:de:ae:d2:5a:84:
         9a:72:46:54:cc:33:79:24:fa:2a:fa:b3:ce:5d:9c:cd:e1:74:
         93:c0:b3:43:33:ab:78:a1:75:76:a4:0a:32:ec:bb:f2:9d:6c:
         2d:3e:51:52:03:f7:ef:9a:f1:2f:9e:e7:86:b5:a0:ac:37:2f:
         23:4e:bb:b3:c7:67:5d:aa:b3:73:3d:f1:a8:b4:72:08:fe:33:
         57:ea:79:e2:16:ee:24:75:d1:bb:a9:81:36:86:ee:fc:5a:23:
         39:5f:2a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----