Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/64a46181-5976-32d8-8feb-e9fa687e5a11.roa
File:                     64a46181-5976-32d8-8feb-e9fa687e5a11.roa (raw, json)
Hash identifier:          oXrlUxFFzbkbKJJG2xNEtrFYvuoHKP5Pcm6iZ5Gbn+Q=
Subject key identifier:   40:A0:83:80:19:1F:F3:80:EF:C3:9B:C9:D0:DF:CA:EB:7C:19:C5:21
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309FFCB0311DD175F7099B800
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/64a46181-5976-32d8-8feb-e9fa687e5a11.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:37:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ff:cb:03:11:dd:17:5f:70:99:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=371c97d7-7d30-49d8-864a-31e4a9d4e3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d5:c0:f0:24:9b:7d:ef:12:d9:b2:4f:31:79:
                    fe:91:32:14:98:ab:ae:50:21:94:67:5b:00:92:27:
                    c3:24:98:c8:21:67:30:c3:87:50:37:b7:cc:cb:29:
                    e8:44:fc:ef:76:ef:80:97:5e:fe:8c:9b:0b:30:63:
                    a7:85:1e:42:03:6e:16:ad:f4:d3:12:65:4a:56:c3:
                    0d:26:a4:fc:2a:15:fc:9f:dd:b0:e4:44:54:79:7e:
                    28:07:ae:3e:4a:b8:63:4c:6a:83:8a:a3:67:bf:05:
                    af:80:b1:f9:0d:29:2f:a3:c9:ae:3a:31:b1:65:2c:
                    34:99:65:e9:80:33:92:57:84:73:bb:6a:01:1d:3e:
                    43:da:be:02:b0:3f:8c:3c:7b:0a:48:47:6e:0e:8f:
                    73:5e:d8:0e:2d:6f:41:40:e0:a2:0c:b4:57:34:82:
                    23:40:ee:97:cf:83:ab:db:9d:a6:f2:2c:c5:7f:c8:
                    ff:60:78:6c:e8:d4:18:7f:00:10:1d:9c:00:d2:a4:
                    d6:78:20:43:d0:27:80:6f:61:23:86:72:a9:7a:7d:
                    6e:d5:d9:ae:75:de:31:c7:10:a6:d3:98:d7:46:8f:
                    f4:a9:d5:fb:90:1e:11:e4:aa:c9:f2:e4:5b:2e:c6:
                    47:49:3a:e6:ff:ac:5d:6e:bc:f6:4f:ae:8f:c2:37:
                    80:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A0:83:80:19:1F:F3:80:EF:C3:9B:C9:D0:DF:CA:EB:7C:19:C5:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/64a46181-5976-32d8-8feb-e9fa687e5a11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:ae:02:fa:8d:88:07:75:b8:14:98:ff:b7:cc:6f:70:30:7a:
         03:76:a9:94:28:ef:96:53:c8:e9:f2:f9:c4:28:73:a9:9f:28:
         92:87:4e:3a:8e:ae:48:c0:f5:02:f7:89:17:31:32:51:42:55:
         a0:fd:8d:4c:dd:c0:3c:d4:90:10:6d:d8:56:f7:63:38:1c:89:
         09:2d:53:31:02:8e:a0:23:8b:a6:2b:ce:5a:39:01:3c:af:0e:
         49:b8:24:d8:73:48:6e:7b:9c:e1:72:a4:93:b3:47:e5:20:4a:
         f3:7c:7f:19:40:f6:1f:1d:5e:e3:a0:cf:17:7d:53:6d:0a:5a:
         56:34:d6:5e:9b:76:28:66:32:55:8a:07:e3:5e:67:88:09:5c:
         1d:fd:35:a8:4d:28:14:43:fa:db:a6:24:e8:88:a3:09:30:f5:
         29:0c:82:69:b7:b4:c5:07:9a:aa:a0:78:c1:e4:f6:24:11:9d:
         93:c1:b1:93:83:be:89:c0:d4:b7:fc:c8:28:a8:9b:3a:18:d2:
         6f:2b:19:fb:48:0c:05:6b:7a:25:e1:ab:8e:1f:bb:48:f6:3c:
         c8:20:a2:03:76:1e:d7:47:9a:1a:b3:1f:0e:3f:83:6d:57:ee:
         e9:63:88:c1:95:f1:eb:75:cd:29:ea:f1:0f:83:af:bf:5b:5d:
         62:45:06:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----