Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/637d2bb8-338d-3d8e-92e2-cb7c4c8c35f2.roa
File:                     637d2bb8-338d-3d8e-92e2-cb7c4c8c35f2.roa (raw, json)
Hash identifier:          VyPP9OZ7AixSaN6bTFCi5gbKrxUP9sfi4OVrq1bjOfU=
Subject key identifier:   F5:E4:D7:57:BF:60:9E:3B:91:54:91:F3:7D:B5:22:E1:1E:14:39:85
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A1619225A8D9184651C1680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/637d2bb8-338d-3d8e-92e2-cb7c4c8c35f2.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.136.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:46:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:16:19:22:5a:8d:91:84:65:1c:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=99af093b-5c89-4638-ac52-eff41ecb75da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:bc:59:a6:04:aa:ad:4a:b0:14:26:d1:07:95:
                    93:e0:13:4f:58:c2:40:5c:7b:38:55:61:52:56:a0:
                    d9:83:53:aa:8c:ce:ac:33:29:82:0f:cb:be:c1:4b:
                    24:ee:ff:41:c3:c6:48:d8:d5:93:e0:c4:74:c1:f0:
                    6b:d9:f0:26:9b:ab:ea:e1:68:8b:64:be:95:54:a7:
                    98:0b:01:eb:c5:ba:d9:6b:86:6a:95:85:af:7f:38:
                    ab:d3:7a:f5:d7:42:f3:21:c1:3e:70:6c:b8:47:7f:
                    85:e8:f3:95:ac:de:dd:ba:5c:78:dc:f1:d9:f7:7d:
                    73:31:b4:89:f8:da:2f:22:dd:7f:f0:c0:4e:40:f2:
                    40:bb:1c:a4:23:90:7d:e3:28:54:f6:35:21:67:e2:
                    cd:76:dc:89:3e:5d:cc:9c:cc:09:01:62:79:03:45:
                    50:a2:a0:19:e9:7d:92:64:28:7c:b0:0e:9a:ae:da:
                    f0:7f:ae:72:5d:d7:73:98:81:59:d1:18:fa:01:50:
                    fc:52:d1:ac:23:d1:fc:aa:26:6c:28:09:02:f0:78:
                    0f:7d:92:18:33:ed:4a:08:7e:77:d5:e1:9c:bc:54:
                    91:7e:49:b4:28:96:1f:98:46:a9:be:28:a5:de:9b:
                    ce:fe:1c:78:7b:19:d9:67:3e:a8:8a:c0:14:00:e1:
                    91:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E4:D7:57:BF:60:9E:3B:91:54:91:F3:7D:B5:22:E1:1E:14:39:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/637d2bb8-338d-3d8e-92e2-cb7c4c8c35f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:0e:61:e0:1a:bb:47:1a:05:b4:3e:92:0f:18:a9:64:d2:17:
         bb:67:d2:6a:14:e6:ad:d5:ef:c6:4c:ef:f1:4d:a7:6c:f6:e5:
         50:6e:4b:63:c0:08:9f:9e:34:c0:5f:73:17:95:0c:e3:6b:fc:
         39:46:9a:f3:2e:00:b2:07:d9:ef:fb:ee:bc:a3:df:0c:af:f2:
         ea:23:7e:16:5d:70:d7:64:70:e7:63:54:20:69:1b:0d:2f:b6:
         54:f2:b9:9a:56:3e:df:b3:50:eb:80:aa:e6:f1:98:dd:53:c2:
         8f:f2:ba:5b:25:6e:99:20:b0:ee:31:40:e1:a1:6a:dc:38:60:
         eb:e2:98:ce:5d:46:b3:48:97:67:da:27:3d:56:8e:c9:cc:9d:
         95:10:16:c3:04:7d:e4:96:5d:fb:1a:7d:35:06:5f:90:bb:e4:
         40:ef:f4:f8:db:75:29:c8:86:44:3a:e9:26:52:80:b0:cd:83:
         dc:80:c6:8b:4e:b4:c9:64:dd:67:2f:f5:95:7d:cc:59:95:db:
         a9:43:00:12:a8:7c:c2:03:8c:bd:30:dd:a8:41:89:e5:de:f1:
         0f:74:3b:ad:c0:f2:69:74:78:76:34:65:ba:39:97:0f:56:a6:
         82:2e:0b:14:1e:04:83:ec:5e:96:99:6b:7e:76:4d:7d:83:38:
         da:3d:33:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----