Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5fd7290e-c43e-3934-a64a-ed38e89b72c3.roa
File:                     5fd7290e-c43e-3934-a64a-ed38e89b72c3.roa (raw, json)
Hash identifier:          5VhleSyGRSZpiYw3AH68O6zb0Vu3El5jjS8I760ivxY=
Subject key identifier:   82:4D:AE:C6:A3:A9:DC:DC:B9:98:29:CF:D1:4A:32:17:54:F4:8D:A5
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309F124FA179D67F0D248FC00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5fd7290e-c43e-3934-a64a-ed38e89b72c3.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.203.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:47:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f1:24:fa:17:9d:67:f0:d2:48:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=7d2dd02c-4198-469c-9d87-5ecbd6d86d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:52:93:9b:7c:8b:73:70:f2:88:76:3f:3f:b8:
                    6d:51:ef:7c:e0:7f:75:d5:23:06:dd:0e:5d:92:71:
                    0d:93:de:f7:9e:54:99:16:af:2f:d1:c0:01:e3:62:
                    09:6c:63:bc:60:ee:6e:c9:1e:7f:db:c1:94:44:39:
                    d3:26:19:e2:fb:b5:6b:96:22:d3:44:18:3e:b8:97:
                    88:7b:3f:78:3e:98:fa:bf:de:9a:d3:d8:42:41:fb:
                    9e:b9:71:04:76:ba:d1:de:4e:59:85:e1:4d:64:65:
                    da:e6:fa:c9:ea:3f:28:0e:dd:b6:20:45:a9:5b:0f:
                    9b:cf:2c:48:7b:65:de:e3:b7:6f:88:8c:01:5a:45:
                    2d:c8:61:fc:4a:50:67:1d:e1:e5:5d:2f:97:40:8c:
                    55:fd:20:4a:6c:eb:82:68:dd:69:a2:9e:6e:02:30:
                    dc:cf:91:3d:b5:0d:39:fe:64:72:c7:a5:28:c5:d5:
                    ce:aa:0c:cd:37:24:58:d9:14:d6:4b:c1:35:a2:f2:
                    89:45:e1:05:41:d9:d8:48:f6:3a:4d:c5:41:e4:af:
                    02:5b:f9:aa:02:8f:c3:12:af:f6:25:9e:38:cd:30:
                    bd:53:ca:fc:26:97:76:db:77:6e:56:d5:a8:9d:91:
                    08:63:92:91:46:f5:0a:5b:19:f6:12:01:6c:8f:3e:
                    ef:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:4D:AE:C6:A3:A9:DC:DC:B9:98:29:CF:D1:4A:32:17:54:F4:8D:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5fd7290e-c43e-3934-a64a-ed38e89b72c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ff:3b:ae:fe:34:1b:b5:6c:b0:26:cf:b0:c9:0a:f4:a9:24:
         27:41:5f:57:e8:56:a0:ef:4c:3e:67:a2:a4:0b:71:c5:fc:83:
         9e:8e:df:cd:7a:fc:af:aa:8f:37:0c:93:46:47:4f:98:d3:65:
         b8:2a:73:3a:86:38:60:d3:ff:9a:3f:a8:56:70:50:8e:9a:3f:
         a1:05:49:02:19:f2:27:24:eb:97:ba:bb:2e:42:bb:ec:5f:33:
         d4:d8:1b:e3:56:fb:e2:e9:34:b3:63:52:50:d9:fb:0b:2e:ab:
         35:76:ea:80:95:f9:9e:67:a1:cc:82:d9:ab:38:cc:21:04:e6:
         8d:3e:75:59:f6:58:27:7d:c7:5c:27:36:e5:2c:a0:7f:b6:a0:
         9e:a6:ba:5c:66:8e:df:fd:73:6d:c9:6b:e2:5e:5d:73:46:f1:
         82:5d:6a:ea:cf:3a:24:b7:dd:34:1c:2e:34:8c:ee:49:af:fb:
         89:f4:fb:8e:72:56:35:f6:e9:aa:92:4c:64:56:9e:f7:72:f5:
         7d:1e:3a:d0:9c:fa:a0:bc:e0:f0:37:fc:48:d9:94:1a:86:7c:
         f5:b6:79:83:e1:9f:7e:53:98:c3:f5:c6:e8:fe:36:f8:71:b2:
         6c:de:c2:c4:72:c4:93:2d:52:49:bf:b8:ae:e3:61:ab:a2:72:
         f0:84:af:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----