Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/60db9165-8bf3-3742-8e59-b7c6f70457e0.roa
File:                     60db9165-8bf3-3742-8e59-b7c6f70457e0.roa (raw, json)
Hash identifier:          WDCSU55c2Y9DJd7KHAqj4+KOv1k+TEgBbj0uxPWJZl0=
Subject key identifier:   0C:CA:DD:1D:7E:4F:9F:AA:30:0E:C3:3A:F9:79:06:52:98:BF:09:20
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309F8A45CAD8E408D252E0980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/60db9165-8bf3-3742-8e59-b7c6f70457e0.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.171.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f8:a4:5c:ad:8e:40:8d:25:2e:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=e4644154-5846-4d99-b990-d68cd1d6aeaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:d4:3c:c7:28:a7:56:11:68:25:60:cb:dc:76:
                    3d:cd:3b:8c:9c:60:df:d6:5c:33:7c:12:33:0f:97:
                    d3:30:e3:35:5a:db:09:78:78:ab:8f:68:2c:a7:eb:
                    7f:a0:85:c8:aa:1c:b3:29:fd:9f:41:a0:e6:5c:3b:
                    49:37:67:c8:24:bc:3b:9c:ed:ab:d4:02:7e:51:16:
                    9d:5e:36:83:33:1c:b4:1f:36:10:68:ca:97:30:a4:
                    12:95:66:e7:25:a7:06:94:6f:74:36:a3:04:dd:d0:
                    c5:6c:37:d3:d6:9f:8f:99:e3:c3:31:32:11:c9:ea:
                    d5:39:b6:c4:09:c5:ec:55:97:8a:ea:91:a0:ff:fc:
                    21:54:6e:4f:0f:78:90:95:ad:73:0f:9c:1d:4c:5d:
                    0e:c6:2b:3a:a9:a5:a4:6d:8d:ae:b4:84:26:69:fe:
                    76:93:2b:f3:9c:d3:2e:73:7c:dd:26:bf:8c:e5:0b:
                    1b:0e:42:35:29:22:71:b7:c7:b0:5a:bb:62:3a:37:
                    71:ba:db:6c:cc:66:f2:b4:a9:68:1e:de:33:c6:c2:
                    a8:86:c9:65:a7:3c:5b:70:96:79:43:8a:d5:3f:0f:
                    76:ba:5b:bc:78:7b:12:a0:cb:a5:c5:92:7a:26:4e:
                    62:32:26:e3:f6:4e:ee:6f:df:60:b3:51:d2:22:94:
                    9d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CA:DD:1D:7E:4F:9F:AA:30:0E:C3:3A:F9:79:06:52:98:BF:09:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/60db9165-8bf3-3742-8e59-b7c6f70457e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:f0:38:8b:95:3c:41:17:04:74:40:3a:74:28:de:e5:66:53:
         d5:5d:bd:e4:a0:d3:f5:78:23:31:35:7e:dc:af:57:73:a2:37:
         a3:d1:6e:e8:0f:b3:14:3b:49:1f:52:27:6c:91:7f:4a:5e:59:
         1d:1e:0c:4b:b9:a8:7b:49:d3:8d:5a:fe:78:98:1a:4a:76:71:
         c6:8c:32:f5:eb:75:39:ef:c1:34:30:74:de:c2:85:4e:06:43:
         7c:82:05:ff:79:67:70:9f:cb:5f:d7:59:2f:7a:72:83:21:3e:
         a1:49:fd:d2:73:3c:81:e0:3d:f3:16:13:19:7b:2b:ec:64:84:
         51:d8:5c:31:5b:cc:e3:37:13:f8:a1:98:80:37:d3:48:d6:50:
         9c:7c:66:c2:85:4f:0d:9a:3d:53:02:0e:1c:24:37:2a:d5:ca:
         85:c3:06:42:11:1c:b7:6c:60:6d:36:bb:a4:07:46:7e:bc:4c:
         72:93:76:14:47:47:34:51:8f:43:2b:f5:14:33:a6:93:5e:dc:
         f4:49:24:c3:15:89:e3:19:2a:15:91:37:b6:fc:02:9d:b5:fd:
         3e:2c:fd:95:ac:9d:8a:54:d5:2b:8a:75:b8:88:65:8c:21:81:
         13:31:29:a3:e9:c1:bf:d7:10:ae:a3:08:4e:62:4b:c6:17:98:
         42:9b:a0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----