Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6236c5d0-28e6-30b2-b10f-28671d70a1a8.roa
File:                     6236c5d0-28e6-30b2-b10f-28671d70a1a8.roa (raw, json)
Hash identifier:          46/5j9/PFQ+FuO5bL/y/ZEyPzvCHJB4Bm6JX05eIXcw=
Subject key identifier:   4B:6E:E7:D5:FF:ED:C4:B2:AC:3C:F2:FA:2F:33:B8:D0:6C:AB:06:E9
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0DD48C0B915037A02E1A18
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6236c5d0-28e6-30b2-b10f-28671d70a1a8.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.128.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0d:d4:8c:0b:91:50:37:a0:2e:1a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ae4275d8-113d-45be-97b5-bea6b6acabac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:11:38:2c:30:d2:da:13:57:82:0d:bd:31:5b:
                    2f:6a:fc:32:f5:50:7e:c6:17:6a:c9:78:ce:ec:18:
                    d6:0c:16:bf:11:b1:45:9f:3d:8c:71:19:6d:41:23:
                    54:9c:27:e8:0a:58:8b:54:21:ed:f6:bc:a4:bb:e7:
                    5e:8b:7d:59:53:99:c8:c7:dd:c8:05:de:79:eb:20:
                    cf:30:2d:1b:3d:33:0c:27:33:2c:7c:e7:5f:fb:b1:
                    e4:cd:e6:61:f0:1a:c9:d1:1c:d4:f6:ad:cf:74:f8:
                    e1:2e:21:12:6d:05:fd:08:c5:54:3a:9f:17:a9:d8:
                    79:46:02:5d:91:b9:3f:bd:a3:35:bf:e7:eb:f9:56:
                    84:02:9c:c1:de:f6:9c:d3:b4:ea:c3:f1:22:07:fb:
                    64:a4:45:9d:f5:66:55:f2:c5:2e:8c:90:6e:61:02:
                    0f:74:27:dc:5f:b7:c2:9f:68:70:22:76:e7:5e:fe:
                    42:be:29:e4:5b:26:01:3b:1b:94:31:af:f5:17:7b:
                    59:d9:76:ec:e2:08:a3:8f:95:b8:2f:23:ce:8f:ea:
                    30:9f:c8:35:7a:03:f6:23:d6:24:98:d1:04:ab:65:
                    76:83:de:ee:e9:af:a3:7a:dd:3d:27:68:b3:c2:60:
                    2e:de:56:af:d5:c3:c2:9a:76:83:63:e0:44:3c:84:
                    77:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6E:E7:D5:FF:ED:C4:B2:AC:3C:F2:FA:2F:33:B8:D0:6C:AB:06:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6236c5d0-28e6-30b2-b10f-28671d70a1a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:85:91:f4:ee:cf:cf:39:f9:c2:b5:25:88:62:70:e3:9e:2f:
         50:05:d5:b1:8c:39:63:e1:e1:7d:23:f0:cc:c0:96:d7:58:30:
         eb:59:13:37:3c:e3:f4:66:01:0f:63:fd:af:cb:db:97:1c:a8:
         24:51:37:67:c7:c5:44:e0:a5:eb:b6:a4:6a:de:f1:6d:84:11:
         6f:fe:7b:1c:f1:90:19:ab:49:07:0e:d0:7f:c8:bd:5d:33:c4:
         b5:7c:14:ad:cb:2f:ba:72:e7:28:59:fc:e4:9a:a7:a3:4c:d3:
         65:7b:c6:1f:26:28:d1:04:96:2e:d8:af:81:66:48:67:b0:35:
         10:e5:3c:91:96:35:17:82:c4:61:35:05:04:22:dc:a5:39:d6:
         c1:64:ec:94:23:2c:03:15:50:d3:61:ff:52:33:6a:c2:6c:61:
         9e:56:c0:d0:5a:ea:b1:25:71:a3:84:3b:77:47:84:7a:41:3e:
         1f:88:1c:db:0e:65:6b:1a:ff:ab:ff:90:a1:58:26:25:72:68:
         76:52:6c:97:53:42:82:d8:7b:9f:c7:e6:9b:6b:4a:6e:0e:bd:
         d7:0e:84:d0:b5:f6:a2:a3:1d:af:08:c0:92:24:47:4b:bc:34:
         94:51:2e:5f:86:ec:d8:1d:eb:99:14:76:97:13:61:4b:f3:01:
         95:e7:24:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----