Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/69507200-1c63-334a-83e5-1c626881e896.roa
File:                     69507200-1c63-334a-83e5-1c626881e896.roa (raw, json)
Hash identifier:          XGpkqQQGzRqgquuskgoY2C9c5+43j6MDuJ9j4pibdWo=
Subject key identifier:   90:3D:EF:1E:28:F3:6B:DA:B5:E3:F5:56:48:49:C9:D5:C0:43:C0:4B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A16EBBA506843D1FA586EC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/69507200-1c63-334a-83e5-1c626881e896.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.100.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:16:eb:ba:50:68:43:d1:fa:58:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=172953a3-1d47-4680-aba3-89bfb240ea3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c8:c8:fc:70:d2:41:5b:7e:bc:04:ba:26:f7:
                    ef:78:de:32:84:8f:91:a1:5d:10:23:7d:d9:d8:6d:
                    5c:2d:42:7c:04:f7:ee:47:f5:da:2f:f3:90:93:3f:
                    8d:e1:81:5b:6d:90:aa:54:84:0c:0a:d7:21:af:ef:
                    ba:b0:a5:99:c6:12:a9:86:61:84:70:ef:58:f1:d3:
                    61:56:3f:68:26:cb:78:f7:de:55:a2:e8:3f:0a:90:
                    d7:d1:25:27:c6:dd:db:8d:e5:c6:e8:d3:94:a8:67:
                    6c:85:a6:6a:5d:19:14:22:4f:b5:b1:c9:be:9c:33:
                    6b:93:5f:a7:b6:3a:51:24:47:b8:df:99:a8:16:f3:
                    f8:bf:ba:f1:59:7c:6d:6c:13:0f:28:2d:3c:11:2d:
                    77:cd:ff:62:96:d0:fc:8a:87:ad:0c:16:3f:1b:6b:
                    dd:2d:98:4a:c5:e6:78:bd:1f:6e:5e:7a:23:b0:f6:
                    03:92:a9:27:7b:be:fe:98:77:c0:ae:4d:e9:7b:67:
                    c1:2f:01:43:65:90:35:ed:4b:b9:9b:90:d6:79:2e:
                    2c:7a:4a:51:27:42:90:ef:b9:d6:2c:2a:f5:23:21:
                    c7:ca:e9:08:26:cb:29:e9:df:9f:da:a6:52:40:b6:
                    e1:c2:7e:bf:8f:0c:fc:29:48:06:9c:14:04:3e:0d:
                    2e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3D:EF:1E:28:F3:6B:DA:B5:E3:F5:56:48:49:C9:D5:C0:43:C0:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/69507200-1c63-334a-83e5-1c626881e896.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:cd:62:1d:74:a7:9a:07:e9:58:b1:5a:ab:51:2b:aa:93:fb:
         63:e0:e1:ff:59:8b:32:ae:b8:fc:76:c4:65:65:69:23:30:c0:
         0b:1f:a9:66:ee:6f:f4:70:53:e2:cf:88:04:9b:46:2e:6f:4d:
         76:27:32:6d:f2:73:ad:b9:50:b6:eb:fc:43:e9:6e:3a:d8:ac:
         b3:52:d4:40:e6:b3:73:5c:33:9d:57:89:83:36:ab:de:7c:17:
         51:7d:de:39:4c:c7:93:2e:12:41:07:26:81:88:d7:e1:d9:3c:
         a6:99:16:15:43:ee:1b:10:11:c0:cd:e3:39:cf:b0:a1:80:9f:
         bc:50:17:13:59:fc:36:3a:86:64:8a:79:a8:0b:5d:76:42:09:
         77:4f:bd:a7:c9:35:5b:09:72:60:37:f8:c3:f1:6e:1d:35:3c:
         f2:34:d1:51:f0:69:e6:2f:18:36:35:7d:35:8b:db:ef:6f:da:
         72:14:80:ce:6f:21:c6:65:0e:78:43:d9:96:4c:6c:30:fc:8c:
         a5:95:68:a3:f9:a6:f2:11:a6:e7:b7:a6:21:cd:31:37:67:2b:
         26:75:3b:0b:3f:c5:2c:7d:fc:f7:aa:9b:7d:28:d2:70:2d:15:
         a0:f2:ae:f3:96:e3:f5:51:3f:f8:a6:19:7a:28:23:1c:20:c1:
         86:db:10:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----