Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6d5b4c2a-171d-3bb8-af0e-ac45730e146f.roa
File:                     6d5b4c2a-171d-3bb8-af0e-ac45730e146f.roa (raw, json)
Hash identifier:          wzDzT6eeb92hpZ+PJGr3mQWhqF0vOiwW86iYozQHjOo=
Subject key identifier:   2E:2A:9A:95:D5:22:1C:1B:2D:CB:8D:4A:6B:97:94:55:CE:23:04:F7
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0C75B66499081A8680B800
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6d5b4c2a-171d-3bb8-af0e-ac45730e146f.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.170.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0c:75:b6:64:99:08:1a:86:80:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ba252144-894f-4770-a5ed-3a1f6fca87df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dd:8c:17:92:60:22:af:36:7c:ba:41:9a:c2:
                    21:08:23:15:91:f9:26:9c:71:89:60:2a:e0:d7:fc:
                    a2:82:16:58:4d:2d:e3:6f:7e:c0:2e:5c:ae:8b:11:
                    cd:9d:9e:3c:86:64:89:0c:6b:7d:55:ac:a6:72:e0:
                    e0:ed:7b:72:9f:a9:37:92:8e:c2:1a:f4:92:40:d5:
                    c2:0b:c1:55:70:99:9e:0f:d6:79:2e:87:94:7d:40:
                    b3:a4:09:25:db:93:26:fc:b1:7c:60:2e:a0:1c:ae:
                    9d:23:e6:62:73:af:47:85:2c:b4:b0:b7:12:d3:00:
                    8c:2c:ea:87:c1:3d:8f:c8:9e:31:f4:9b:f8:a5:11:
                    9b:6e:b9:54:6d:42:cf:da:d4:49:b0:4f:fd:25:5f:
                    b1:47:4d:0e:78:f3:79:43:1a:f7:c9:68:96:81:45:
                    91:41:17:b3:8c:67:c0:df:63:8a:f0:e2:60:bf:1f:
                    0d:5d:f7:dd:b0:ad:66:3b:78:a4:f7:06:ac:c4:b2:
                    94:a2:d6:ca:f9:a2:2d:17:d6:62:f4:0d:90:96:6b:
                    da:1f:29:a4:49:a9:6c:60:c6:f8:e0:cc:6e:00:69:
                    90:bf:67:6d:82:e2:72:e2:f0:db:e6:58:19:b7:0d:
                    86:2b:ac:8d:a5:31:71:b1:6d:cf:d3:c3:4a:8c:e8:
                    f8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2A:9A:95:D5:22:1C:1B:2D:CB:8D:4A:6B:97:94:55:CE:23:04:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6d5b4c2a-171d-3bb8-af0e-ac45730e146f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:75:56:a5:2c:59:1e:ac:02:ab:0a:50:c6:05:5d:dc:be:38:
         f4:37:cb:41:b1:79:f8:83:06:e9:41:59:d9:a6:ef:d0:d0:a4:
         c5:5a:06:e2:2c:4b:c9:ba:a0:79:a0:a5:d5:96:31:b4:e4:b6:
         c6:fe:2f:da:6f:d4:7f:0c:de:22:ef:cf:82:04:d2:de:d5:27:
         ca:f3:f4:64:29:e0:bf:2c:bb:7f:e2:8a:94:e4:a9:5a:ae:c9:
         11:c5:da:31:ba:42:01:82:68:62:83:e5:e2:11:55:a2:ee:87:
         ae:6a:9b:b2:89:9d:e6:fa:4c:81:70:90:76:73:ac:71:f7:07:
         f4:11:63:3f:ab:b9:f5:0d:0f:a3:1f:1d:ec:25:64:aa:bb:8b:
         63:97:96:8b:b2:bb:44:09:14:34:08:96:f2:1d:f5:ba:48:fb:
         a3:0c:d5:84:58:67:35:ab:13:80:ae:27:7e:df:21:06:ef:80:
         a6:28:9f:49:b2:e1:91:81:fc:ab:86:62:23:d8:05:26:72:8d:
         16:6d:b9:b1:3d:41:32:e1:ca:78:e4:c5:31:5a:88:69:aa:d6:
         89:ab:10:39:00:9f:5a:dd:61:08:ff:67:a3:3c:ac:ae:ae:fb:
         6c:60:5c:91:b4:31:bc:7c:91:48:55:3f:1a:b4:62:8a:3c:f5:
         d1:d9:35:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----