Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6ee92862-dc63-3eb0-bde3-f5dcc48ce6fa.roa
File:                     6ee92862-dc63-3eb0-bde3-f5dcc48ce6fa.roa (raw, json)
Hash identifier:          E0vVPiQGavj0UeX9QYa8Ggb0+GySsjpl9SCfOmfQ6j4=
Subject key identifier:   8C:C0:03:6A:9B:44:22:9E:12:55:A7:7B:1F:66:FD:AF:27:1F:45:AB
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309F1140B6C269CECE8900030
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6ee92862-dc63-3eb0-bde3-f5dcc48ce6fa.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.211.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f1:14:0b:6c:26:9c:ec:e8:90:00:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=d68e4cef-eef5-4021-8380-310b90d611f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:31:f4:04:b9:e1:93:f0:92:ce:a8:90:c3:43:
                    b0:7b:16:99:78:7c:37:c8:b6:da:51:cd:94:1e:93:
                    ee:9a:a8:a4:f8:5a:f4:8b:05:30:8a:34:d6:03:91:
                    59:f4:30:4e:28:9e:9b:63:ca:ff:cd:f8:ad:1b:4e:
                    b7:b6:f2:dd:a9:eb:5d:47:5a:cc:2f:db:69:ee:5c:
                    eb:fc:aa:57:55:23:32:af:9f:c2:80:63:c9:39:cd:
                    35:f8:74:65:26:73:13:6a:fc:74:8f:bb:c8:e1:e7:
                    69:50:2f:69:2a:c6:1b:74:db:1e:03:46:e7:ce:38:
                    c0:67:dd:c2:64:50:ef:00:df:82:fa:b7:ae:02:34:
                    56:15:5e:c0:92:33:57:84:44:7e:05:59:80:87:cd:
                    69:40:9a:46:0f:3a:f6:92:78:f8:90:dd:70:a7:72:
                    28:6e:f6:6c:f9:36:c7:08:9e:e0:32:97:29:32:35:
                    2c:42:c2:f7:2e:41:45:7f:23:4b:cb:45:27:25:0a:
                    cb:19:0c:42:41:53:14:ef:2f:ef:71:3a:25:94:81:
                    ae:0b:6d:f4:2a:e8:07:44:d6:0f:52:62:a0:6b:7f:
                    79:57:5d:f4:e0:4d:2a:d3:8c:63:ae:4d:30:85:c0:
                    b3:98:7b:0d:96:59:fa:8b:74:d5:21:1b:5c:ad:2b:
                    bd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C0:03:6A:9B:44:22:9E:12:55:A7:7B:1F:66:FD:AF:27:1F:45:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6ee92862-dc63-3eb0-bde3-f5dcc48ce6fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:a7:5a:0a:8c:89:14:78:e3:65:56:67:b3:9f:aa:6c:f9:f9:
         b5:97:b3:0d:72:d6:58:a8:43:7e:4c:25:79:f1:09:04:45:4c:
         71:e7:f7:69:ec:d2:fb:fc:ad:56:ba:9c:ea:f3:d9:ca:ae:a2:
         8a:2c:31:c3:67:69:96:a0:10:a6:80:eb:48:7e:fe:0c:a7:f1:
         a8:b5:87:70:a1:44:37:af:14:c1:ed:2c:1f:5b:9e:4e:7a:98:
         4b:b9:f1:64:2f:1c:5e:7e:f1:e8:4c:3e:d5:f2:73:4d:76:5a:
         70:61:f4:4b:d5:00:99:31:5c:d4:dc:37:a2:d3:2e:e7:02:dc:
         27:c3:1e:4e:2b:61:82:4a:41:bf:8c:50:9f:00:26:b9:f5:ca:
         44:6c:d1:ea:cf:68:ad:f6:ef:d1:82:7f:0f:4c:f7:4e:d8:09:
         41:74:12:00:17:45:71:0f:49:e8:a2:e6:56:70:67:df:7b:58:
         e9:51:cd:bf:a3:68:9d:77:c4:9e:8b:18:1f:18:fc:04:e3:af:
         01:ce:8f:d1:1a:be:22:fd:8c:c4:f2:0c:b5:fa:11:ff:28:66:
         0c:ba:74:e0:d7:44:14:40:09:bc:47:43:48:b1:60:a3:ad:da:
         34:74:79:4e:20:ce:f0:00:d2:21:8a:e6:c5:55:1e:8a:e0:de:
         f8:ac:a9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----