Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/75d402e6-339a-379c-aae2-36572ede3551.roa
File:                     75d402e6-339a-379c-aae2-36572ede3551.roa (raw, json)
Hash identifier:          9F83FlXZb4K4LtSEeR/snyuqqxXqMAV6l1PXhjsU574=
Subject key identifier:   15:E6:BF:16:2A:3F:13:6A:71:38:87:4E:78:4F:73:17:73:E6:39:86
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A1E0A7AAAC665A8BB210D00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/75d402e6-339a-379c-aae2-36572ede3551.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.211.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1e:0a:7a:aa:c6:65:a8:bb:21:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=62c4b000-94e9-430b-8c7c-51af147094ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:f0:a9:a5:f9:b5:3e:92:c7:87:44:4b:d3:
                    ee:5d:88:64:18:bf:12:bc:c5:94:b5:2b:3d:b1:89:
                    15:cc:6a:47:62:12:f5:96:64:1f:25:b2:65:5d:e7:
                    20:2e:69:d6:73:08:a3:fb:bc:45:c0:9d:4b:3d:ee:
                    b1:04:a1:ac:c2:03:b8:4f:46:03:9a:4d:b0:44:91:
                    7f:4c:05:de:2e:69:df:b1:37:cf:12:53:ad:ba:5d:
                    6d:bf:1d:2d:e1:dd:10:ad:34:e8:77:14:b4:ab:56:
                    38:ec:88:c0:75:17:6c:5c:ae:30:dd:7b:42:66:fd:
                    e8:3e:61:b0:10:f4:2c:0a:8b:5d:e4:ed:1d:07:85:
                    55:8d:6b:02:ce:c8:2f:cc:95:8e:64:4d:69:d6:01:
                    bf:e3:a2:98:f8:91:8f:e9:bf:b8:7b:b7:0b:69:47:
                    f0:16:97:84:92:94:f5:8b:59:88:f2:8c:38:a8:48:
                    a3:dd:e7:e7:09:93:64:c9:85:d7:e9:3b:54:a1:06:
                    3a:6a:ee:ef:76:a0:57:c5:1f:82:29:af:38:fd:ef:
                    1f:9c:c1:50:4d:8d:59:eb:b6:2e:f7:44:2f:ce:c5:
                    89:a5:a5:c0:b7:46:87:37:f1:38:65:e0:06:e5:99:
                    84:16:03:1e:8e:c8:a2:80:71:4f:cb:d8:7c:5d:df:
                    f9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E6:BF:16:2A:3F:13:6A:71:38:87:4E:78:4F:73:17:73:E6:39:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/75d402e6-339a-379c-aae2-36572ede3551.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:d8:00:4c:05:4f:e9:68:cc:90:66:42:17:ad:48:3f:22:ba:
         a3:69:12:2c:89:3e:1d:d1:f0:67:66:7f:d9:df:4f:d5:84:1c:
         b3:2f:ae:6a:b0:da:7b:9c:20:40:4e:77:25:91:7d:fa:e2:a4:
         8f:0a:56:c7:af:34:8e:5a:dd:51:5f:4d:df:cd:f7:d6:7c:9c:
         de:41:c7:be:46:97:42:0c:73:08:92:22:91:eb:71:a9:bb:2f:
         b8:26:a4:f8:18:5c:e3:67:d7:4f:5b:68:09:c0:13:a0:e0:54:
         2e:5f:da:2b:e5:49:83:a7:86:eb:8d:a8:a2:46:08:c7:d6:a1:
         30:23:36:14:e7:e4:c8:88:b5:ff:32:0a:dc:ce:79:79:0e:16:
         00:12:23:5a:94:f5:5a:24:17:0b:a4:4b:b8:e0:d2:56:c2:4e:
         4b:50:9e:1c:75:80:71:36:b6:be:61:dd:f9:c7:1d:35:ff:8e:
         f3:d1:0e:b4:e0:15:93:4c:17:2b:a5:a6:a9:b3:5d:5e:42:c7:
         77:94:7c:59:b1:8a:03:dc:91:b1:03:de:ff:70:1d:5c:c3:e2:
         70:ee:36:ed:12:6e:1a:1a:e1:6a:b0:b0:84:da:0c:07:fd:57:
         46:0e:85:a7:3c:5f:35:88:a8:ea:f4:fe:65:39:93:ad:a1:52:
         7a:1e:c2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----