Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/646d6261-c0b8-38d5-ac7a-b9c1e09a16c4.roa
File:                     646d6261-c0b8-38d5-ac7a-b9c1e09a16c4.roa (raw, json)
Hash identifier:          DtaHPlu9mEO8wz1YkL9waSrSdtGBjG1ZvitgXZm6rWQ=
Subject key identifier:   13:FE:C8:FA:A7:3D:C6:5C:33:0C:6D:BC:8B:08:DE:CB:1A:00:FE:01
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309FFB3BAAA147D43FE9D9980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/646d6261-c0b8-38d5-ac7a-b9c1e09a16c4.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.58.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:50:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ff:b3:ba:aa:14:7d:43:fe:9d:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=3b9377e3-0821-45c3-ae9a-62b3278f707a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b4:ca:13:72:c3:f9:97:7e:17:4f:ba:4f:e8:
                    c5:e1:69:83:b4:e1:af:50:21:fd:61:c8:20:a1:bf:
                    5d:f7:5d:18:1a:f7:b1:47:b2:e0:fd:8f:22:e7:55:
                    be:f6:9e:ba:1f:f5:96:aa:15:75:e7:a8:f0:c8:da:
                    fd:4a:89:c0:04:0f:70:55:19:48:3f:8d:77:b1:72:
                    d5:fc:0c:01:a1:5e:e7:23:32:cc:77:5c:1f:8a:d3:
                    14:81:91:54:b9:55:2b:13:39:dc:18:ab:0a:8f:88:
                    35:f4:39:8b:90:47:c9:71:40:a0:2e:f4:67:05:ba:
                    20:e5:65:84:9a:e6:dc:d9:68:69:55:e9:4e:7a:f0:
                    1f:a6:14:70:1e:15:92:f1:68:2a:d0:42:55:5a:6c:
                    a0:87:2e:7a:ca:71:26:a1:2a:f7:2d:5f:35:41:05:
                    d0:93:84:1d:27:ee:6c:b3:00:3e:19:43:6e:51:e8:
                    e7:a0:d8:19:36:d5:1d:4a:53:e9:bf:af:57:78:3a:
                    db:08:01:4f:f1:80:6c:33:e9:b2:3e:75:8b:bd:2c:
                    5d:79:e1:40:8f:61:90:44:33:c1:39:48:65:0a:a1:
                    65:d1:6b:d4:1c:bf:aa:36:a2:a8:11:a6:d5:f8:e9:
                    aa:aa:4c:09:76:fc:43:50:4b:9b:f1:aa:f6:22:26:
                    6c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FE:C8:FA:A7:3D:C6:5C:33:0C:6D:BC:8B:08:DE:CB:1A:00:FE:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/646d6261-c0b8-38d5-ac7a-b9c1e09a16c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ed:21:c8:da:71:4e:36:0d:80:b6:2d:b3:bd:38:d2:bc:25:
         a3:cf:ef:ac:2a:12:55:14:55:55:8b:c0:6a:9f:41:fc:30:cf:
         b0:2b:39:a0:3b:9a:b1:33:79:86:d6:67:e7:cf:06:ca:89:88:
         25:7d:9b:62:56:a6:e8:fe:2b:5e:dd:14:df:59:d6:ad:4c:3a:
         96:34:1f:91:7b:09:94:71:e4:cb:77:21:7c:f2:0e:4e:43:5a:
         32:94:f5:eb:b6:d9:7b:64:18:54:e6:6f:a7:ee:d2:ca:83:14:
         8f:d1:51:40:d3:c9:45:4e:13:cb:00:f5:92:62:3a:6f:ef:dc:
         82:43:31:2c:2a:7d:9c:64:f7:4b:a0:0b:48:4d:9f:e8:7f:73:
         4d:d4:4b:a2:af:5d:0c:21:85:48:39:23:71:c9:a5:e6:8d:1a:
         1d:5d:70:1c:3b:dc:00:b4:4b:a1:df:40:80:a2:7d:1b:3d:3f:
         1e:a9:55:fd:98:8f:42:24:fa:37:80:b7:1b:b7:1c:76:b4:81:
         5a:d7:19:61:65:6f:61:8f:74:06:41:09:ef:c7:cc:8b:23:cb:
         76:ad:4f:a8:f7:ea:23:f0:dc:97:72:28:17:14:ad:6b:81:c7:
         8b:f5:63:0d:fa:0e:e6:23:18:49:af:0f:06:87:16:26:c4:93:
         a9:d9:90:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----