Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6bb9c96f-3014-36b6-8df2-f9326099e3e9.roa
File:                     6bb9c96f-3014-36b6-8df2-f9326099e3e9.roa (raw, json)
Hash identifier:          wN1rPUSULz+N72MFBHoOT/yLnBJSYbAGIe42lojtd3g=
Subject key identifier:   06:9A:D0:07:5D:F9:31:EF:79:AA:5F:5A:F0:39:5E:1C:4D:F3:2C:B8
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309F76C2B433010DB35DD6B00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6bb9c96f-3014-36b6-8df2-f9326099e3e9.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.52.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:43:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f7:6c:2b:43:30:10:db:35:dd:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=0de5debd-8ceb-4e89-b29d-96ebf345d41c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7d:7d:fb:a4:cc:9d:b2:ae:30:17:40:0d:61:
                    e6:a2:79:00:17:96:fe:c9:ea:f5:ec:8e:af:8f:3e:
                    c0:d7:0a:23:27:e9:ef:af:8e:81:0c:26:3c:72:c5:
                    9b:68:be:f3:c4:0c:90:a3:ae:89:86:32:ba:9b:e6:
                    c4:89:0a:37:fc:95:3c:c7:1d:78:34:6e:63:c5:d5:
                    f7:e7:e3:10:73:4f:0a:3a:66:37:40:0e:9e:9d:4a:
                    a9:17:a7:47:a8:b4:73:2e:2d:f3:98:f8:5e:c4:88:
                    b5:2f:33:3b:c0:b5:d3:dd:20:94:f9:6b:10:35:67:
                    bf:5b:64:7a:0f:d5:ba:b7:1f:f9:b0:b8:cd:06:d9:
                    d7:57:06:28:e4:58:53:31:8e:d2:39:33:f6:57:0f:
                    8b:70:71:53:87:ed:4e:38:b6:ad:d4:08:fb:70:73:
                    3d:47:2b:bf:49:06:73:52:18:04:99:37:b6:68:ea:
                    9d:43:a4:c3:ca:af:85:b3:69:4e:28:c6:6c:73:bd:
                    83:a6:b0:65:44:e9:f4:9b:2d:90:64:01:46:2c:02:
                    21:45:87:98:5f:22:9d:a8:12:7e:30:69:3d:68:9a:
                    bc:1d:3e:29:1a:c5:7e:97:1e:52:4e:90:a3:01:dc:
                    04:11:db:17:54:d3:f5:71:eb:0d:db:cf:28:f1:b8:
                    b7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:9A:D0:07:5D:F9:31:EF:79:AA:5F:5A:F0:39:5E:1C:4D:F3:2C:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6bb9c96f-3014-36b6-8df2-f9326099e3e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:4c:63:9e:55:97:53:d4:78:f1:ed:9c:a7:80:77:e1:d9:71:
         b5:05:2e:4f:09:b4:52:24:bb:f0:ad:ba:c7:ad:17:64:f0:0a:
         20:3a:72:90:9a:3f:58:22:11:5a:c0:60:3e:97:13:29:48:67:
         6f:a3:53:02:73:bb:dc:8d:9e:85:76:88:0c:ea:0f:e7:ac:bb:
         1e:f0:94:f6:ea:17:82:88:98:bb:88:5e:f5:29:b4:32:89:04:
         64:77:33:3c:de:cd:08:34:5a:aa:47:83:54:00:3b:9e:65:46:
         2e:03:c3:d9:7d:6c:55:38:47:aa:ae:48:20:71:78:48:81:c0:
         2e:6a:ae:d6:34:2b:c9:fd:34:73:27:8a:65:35:df:1f:ea:45:
         f0:a1:df:47:e7:a2:51:7b:52:0f:db:a0:07:c5:3f:2e:e1:2a:
         8a:2a:56:49:f2:01:82:09:90:c2:63:ab:d5:04:e4:4c:c6:f8:
         f2:78:88:b9:9b:8b:cb:26:47:0a:0d:cf:ce:72:b2:68:58:f8:
         2d:6e:71:32:14:f8:a6:66:fb:77:9a:d8:16:e3:da:df:9a:48:
         e8:79:99:05:98:d4:55:54:3c:64:8a:0d:16:d4:8b:73:21:d3:
         c4:8f:b6:b8:1e:09:87:3d:b1:ac:6b:63:ca:3e:f8:9c:78:63:
         ca:23:e1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----