Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/745eba05-dd64-3f69-b907-95817dc43155.roa
File:                     745eba05-dd64-3f69-b907-95817dc43155.roa (raw, json)
Hash identifier:          xkyrBFdpqQ0VwNJQOyLkUUtvsIWKWDRCivIsml4jrI8=
Subject key identifier:   04:5D:F3:E3:1B:6B:C8:4A:D2:D1:19:D8:3F:D5:9C:52:AF:A9:B2:B6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A186695A444C23BE1E78000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/745eba05-dd64-3f69-b907-95817dc43155.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.7.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:42:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:18:66:95:a4:44:c2:3b:e1:e7:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=e1cb00df-9921-4818-8c67-f422b0faf118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:19:8e:9f:a0:f1:26:29:31:86:d7:46:90:bd:
                    2a:8e:24:82:57:af:50:a6:c8:cd:03:27:1c:fc:23:
                    80:ba:2c:53:5f:c3:c6:2f:70:ba:67:69:a3:b7:d7:
                    fa:db:51:b0:fb:16:90:5f:30:1b:1d:91:30:da:41:
                    8c:d0:a8:80:9e:13:9f:89:7c:e0:ea:ff:44:7d:e0:
                    e7:87:d4:ee:8b:52:90:53:6c:83:a6:9a:5d:76:bf:
                    74:12:48:80:c2:91:de:b0:8f:e2:c0:93:10:dd:b3:
                    82:4d:4a:52:b1:8c:fd:cb:60:04:e4:0d:87:c0:24:
                    4a:a4:bc:88:c1:a8:25:66:69:d7:ab:35:cd:0d:61:
                    de:09:77:f9:82:a8:cf:6d:5f:fb:f4:9a:fe:24:d8:
                    35:c0:a7:6b:05:e8:4b:df:1e:a8:ea:5e:77:56:06:
                    1d:25:91:6f:b0:cd:65:3f:46:84:b9:c4:c8:84:b2:
                    e8:70:96:53:1e:05:66:73:ea:6a:62:89:4c:e6:de:
                    39:50:bf:b3:e0:9a:94:26:fa:d1:96:d2:41:63:2a:
                    04:ef:69:55:3b:09:f7:90:73:d0:73:8f:10:2b:4f:
                    e0:e3:d3:2d:10:da:d9:b7:3c:3d:9b:b7:b9:c0:d5:
                    82:97:11:c6:64:68:fe:de:09:5a:6e:0e:50:58:27:
                    8d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5D:F3:E3:1B:6B:C8:4A:D2:D1:19:D8:3F:D5:9C:52:AF:A9:B2:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/745eba05-dd64-3f69-b907-95817dc43155.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:db:cc:49:0c:a6:88:9e:a7:f0:03:15:bb:84:32:eb:2d:2e:
         4c:40:40:32:81:a4:e6:93:0e:6d:b9:bd:52:94:99:dd:ed:84:
         d0:21:2e:89:f3:b1:e6:a6:03:67:99:92:b3:f3:94:b2:ab:51:
         3c:a7:5f:66:44:9a:3f:59:91:4f:76:c6:2d:3f:2f:b5:a9:44:
         a6:f6:91:3b:9a:78:10:88:20:f9:8d:9e:a2:17:85:af:fc:58:
         a2:49:df:51:ce:23:4a:95:a9:f4:ab:51:43:57:20:08:18:34:
         87:d5:fd:73:98:92:87:e1:54:fe:0e:ff:ae:a3:43:43:a8:7c:
         08:b4:38:3f:8c:d2:68:36:7b:3f:3b:8e:89:bc:c3:9f:05:78:
         f7:fd:49:64:6a:22:da:4f:68:13:8d:31:3c:be:7d:a3:7a:30:
         fc:c5:5b:f1:2b:47:35:53:7a:e4:4e:65:ed:5f:4a:1f:cb:28:
         ef:8c:3f:00:cd:67:ef:3a:20:0d:a6:0b:b8:7a:ac:d2:44:93:
         70:67:40:59:e9:41:c1:48:4a:ed:da:c4:6d:dd:37:d1:f6:f5:
         c7:6f:f2:df:00:1f:80:85:40:40:56:0c:da:18:56:9b:3e:36:
         ef:9d:c8:24:24:59:1f:d6:87:3a:eb:be:99:0d:e4:c5:c6:3c:
         60:71:df:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----