Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7a2d88ca-04dc-3317-a58b-b3de3e5a843c.roa
File:                     7a2d88ca-04dc-3317-a58b-b3de3e5a843c.roa (raw, json)
Hash identifier:          X+C3sEDIqB5+At8+VX2Qwo4bnV5dq6n9SvBGpNnkrsk=
Subject key identifier:   9B:BF:93:35:B8:4C:36:FD:E2:CF:39:22:A8:92:D6:59:13:5A:6F:ED
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A28A80E26FA716C2DDFE200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7a2d88ca-04dc-3317-a58b-b3de3e5a843c.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     395973
IP address blocks:        104.134.184.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:58:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:28:a8:0e:26:fa:71:6c:2d:df:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=cedffac5-f780-4998-af73-4bcb4450d227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:34:2d:49:b1:b0:b3:3b:cb:6d:22:5a:92:ce:
                    c4:cb:9e:b3:92:84:2a:c6:b2:fa:8a:b6:6e:2c:db:
                    d2:2e:f0:8e:da:de:60:68:19:3d:a5:b1:b5:4c:18:
                    44:70:61:d0:6d:87:e2:ba:f2:3b:59:3d:1b:dd:d4:
                    93:a9:9f:69:39:41:51:48:25:4d:b6:0e:ae:1e:5c:
                    d4:07:cf:34:ac:34:8f:44:7c:05:08:0c:3c:83:47:
                    33:dd:ac:fc:ba:84:bd:9a:cd:51:16:8e:e0:45:94:
                    44:93:82:97:31:b2:ed:a2:c9:87:8a:ff:81:2f:04:
                    f6:93:01:3b:49:74:e4:1f:38:2c:4e:86:26:bd:f5:
                    cf:9f:25:6b:0f:da:1e:14:bc:e2:68:75:2b:9b:1e:
                    99:0b:76:96:63:e2:0b:93:83:43:f9:7d:99:54:77:
                    21:e4:2f:1b:d0:00:5b:ca:fb:95:c3:96:2c:f5:60:
                    b3:69:dd:7f:1b:1c:16:ee:82:cf:f2:33:b7:cb:3a:
                    a6:f8:79:f7:a7:2f:96:d1:a6:24:02:4c:bf:15:ba:
                    47:9e:f9:92:fa:6e:29:ed:7b:73:91:c0:86:ab:eb:
                    1a:99:99:7a:37:25:3f:10:cb:fd:20:5c:64:e5:f9:
                    44:b2:2f:2e:2b:88:b2:a8:98:23:ca:31:4d:d8:4c:
                    ec:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BF:93:35:B8:4C:36:FD:E2:CF:39:22:A8:92:D6:59:13:5A:6F:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7a2d88ca-04dc-3317-a58b-b3de3e5a843c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:5a:70:a4:80:f8:f7:c9:95:3b:0b:0e:64:44:0f:84:0e:da:
         4b:cf:75:8e:93:de:eb:f6:10:ab:d2:71:63:d0:6c:f2:6e:e2:
         89:66:45:ad:04:de:21:7f:06:40:03:de:3c:ec:5a:1a:13:af:
         07:42:ab:7a:d1:62:04:07:05:b3:d4:7d:b9:02:b2:23:27:b0:
         23:6e:20:aa:2a:c7:bc:0a:14:a2:17:97:d1:97:09:41:7c:bc:
         9e:11:6b:0b:01:2a:03:9b:cf:73:6e:59:87:a3:25:2e:3d:2d:
         5e:d0:52:ab:76:51:1e:d2:ca:a4:1c:b8:04:6e:d5:71:07:33:
         38:85:2d:67:78:91:59:83:4f:a2:0d:60:d7:e9:a9:a7:0b:7d:
         0d:7c:b7:06:73:56:fa:a5:2d:cb:c4:cf:21:98:4f:33:72:7c:
         1e:fa:19:da:7e:d2:55:02:35:8a:f8:0c:07:d4:85:43:1c:01:
         e1:9e:f8:1e:49:62:7c:03:ab:bd:c8:e4:d9:f1:bc:a9:ab:bc:
         9a:54:9b:d4:5a:ae:71:1f:ba:33:d1:b3:3e:6b:77:d4:76:30:
         ae:d8:ec:e4:81:a9:fd:7a:10:9f:ef:d6:ea:32:b2:e4:75:c9:
         64:16:82:8c:26:8a:fd:cc:15:61:db:4e:97:da:2a:84:69:08:
         f6:e4:0e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----