Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5fa20b3d-cb9b-3756-ac59-69d97fb3db2a.roa
File:                     5fa20b3d-cb9b-3756-ac59-69d97fb3db2a.roa (raw, json)
Hash identifier:          XyM/XKjyWS3rqF/3qLdDjhnRZEtwckwhLPeZ7WLNK8I=
Subject key identifier:   A8:E0:83:BE:57:10:3B:60:BF:C2:FB:00:BC:EF:FE:E2:67:76:AC:8B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A1E020B7F65080F33A36B80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5fa20b3d-cb9b-3756-ac59-69d97fb3db2a.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.240.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:41:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1e:02:0b:7f:65:08:0f:33:a3:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=5f09aeb3-a017-4aba-89f5-8c6f91f987b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fb:61:a2:e5:c7:77:95:f6:78:0d:5d:e2:00:
                    92:e0:1a:56:13:f6:1b:db:65:74:e0:79:13:6d:39:
                    c8:ce:38:cf:59:e4:f8:fe:b0:fa:2e:20:71:c4:a4:
                    0f:51:d3:c5:46:18:c5:c7:fb:2e:4f:9a:04:89:da:
                    f1:6f:e2:91:60:96:54:da:82:27:3b:07:2d:d4:d9:
                    0a:ce:ad:10:31:34:6d:09:88:72:12:85:18:f0:fd:
                    ac:0f:e2:02:ac:37:c6:17:9d:00:12:11:f2:8e:83:
                    79:68:b8:be:df:eb:1c:9a:60:e7:03:3e:a8:98:8c:
                    5c:a8:57:71:b3:69:89:37:84:c6:63:86:9e:63:48:
                    23:40:d7:da:a0:0f:e8:2e:43:43:bd:e2:c9:f0:79:
                    f5:6e:53:07:91:b6:01:9c:b4:24:e9:69:35:c6:a8:
                    0e:f6:6c:81:f4:c1:27:03:4e:66:e4:74:d8:27:69:
                    39:71:95:ec:c7:1a:e1:b6:fa:c4:8c:64:50:46:52:
                    30:99:e9:4a:b9:6c:44:af:a3:46:c5:06:b6:c8:75:
                    ed:90:54:6a:be:8f:4f:fd:52:5e:25:8c:99:22:ca:
                    b2:4c:e4:5d:62:0a:c5:f9:7d:96:61:06:db:d1:48:
                    34:c5:e1:52:84:35:af:61:00:8c:71:28:56:f6:2a:
                    7c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E0:83:BE:57:10:3B:60:BF:C2:FB:00:BC:EF:FE:E2:67:76:AC:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5fa20b3d-cb9b-3756-ac59-69d97fb3db2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:6c:76:20:5d:90:db:a5:ee:6a:11:cc:9d:f1:f8:fc:ff:d6:
         59:c6:7d:32:b8:d3:25:a5:e6:56:b1:21:cd:95:bf:87:21:e2:
         1f:8a:12:3d:94:23:29:64:4f:08:0d:24:d6:f2:fe:bc:7c:e9:
         07:48:ba:91:18:fb:20:56:9e:16:f4:1c:6e:47:c2:eb:c4:ae:
         c9:a9:b6:86:e2:5b:f9:b7:46:54:69:3c:e6:4c:93:a4:d5:d7:
         73:dc:4f:fb:47:ee:67:e0:05:c2:d0:0c:24:47:af:c9:98:23:
         e6:9f:7f:72:64:60:87:7c:9c:22:fb:80:49:bf:3a:f9:45:4e:
         00:97:4f:86:1f:91:96:cf:98:0a:0d:ce:b2:4e:6a:93:12:7b:
         d1:a3:c7:1a:4f:eb:63:b2:7a:b5:84:9f:ad:6e:19:c9:4d:3e:
         48:22:bf:2c:8f:ab:ca:76:98:dd:ee:5e:20:8e:03:59:11:16:
         95:bb:58:fa:f6:37:8d:54:1b:d2:6d:3f:3d:f0:f3:6c:69:d2:
         57:1f:83:c9:cc:fe:ab:ff:88:b1:b4:dc:a1:4b:8a:37:51:3c:
         80:d6:5a:91:cf:20:dc:30:ac:d3:b2:b6:e9:8e:e4:76:db:93:
         57:d3:25:55:e1:f9:cd:98:b1:df:19:1e:aa:78:d7:00:09:74:
         7e:0a:1f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----