Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7aedb996-007e-36d1-81f0-a4d8a8190b9d.roa
File:                     7aedb996-007e-36d1-81f0-a4d8a8190b9d.roa (raw, json)
Hash identifier:          gkpyCfC3niMiKlmKv5eSnc5xFPkQxJKFCFaXZLFKC/E=
Subject key identifier:   93:B2:BE:F2:8D:8A:9F:B6:9F:96:78:D8:D4:AE:9A:33:30:68:C2:56
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A1168A9FFCA6A0DFABB7400
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7aedb996-007e-36d1-81f0-a4d8a8190b9d.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:11:68:a9:ff:ca:6a:0d:fa:bb:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=3a943512-d4a6-430d-8731-3607ecc320a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c5:60:cd:60:2a:8d:95:de:e8:fc:bd:dc:a6:
                    e2:ce:a3:95:64:7a:75:d1:45:1f:eb:7e:de:3b:db:
                    62:68:5b:cd:3f:41:da:0d:9b:40:d2:0a:b9:84:06:
                    f6:d1:17:a6:d6:d3:bd:10:69:76:c2:28:70:0d:52:
                    e8:a8:1a:6d:1f:2b:91:9e:45:aa:55:c7:82:60:28:
                    71:09:17:18:cd:ad:2e:ca:4a:85:5b:f0:1e:2f:b5:
                    db:98:fe:93:53:ee:e5:db:4c:fb:00:e2:d1:7b:6d:
                    00:70:e8:93:14:a9:de:0f:a9:e6:c6:85:94:bc:d8:
                    dd:7e:63:65:5a:c9:02:0f:9f:eb:15:42:8d:13:59:
                    ad:fc:6e:da:52:29:12:e3:30:c6:3d:e7:b4:93:99:
                    cc:62:66:e3:48:21:c6:2f:51:8b:e2:5d:35:98:ac:
                    d9:60:a3:1a:cf:d5:3e:27:c2:18:ac:e6:fe:68:b0:
                    01:18:98:b3:51:c7:46:38:0b:18:aa:48:96:c0:4f:
                    bb:e0:fa:97:36:ae:30:7b:49:b9:f4:24:72:16:30:
                    a3:24:36:77:da:dd:b7:aa:ad:15:cd:db:c0:ed:b1:
                    03:15:24:22:0b:25:a5:11:2d:df:b6:82:db:71:89:
                    24:e2:11:62:86:bd:ee:62:eb:69:3c:e5:12:b4:5b:
                    60:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B2:BE:F2:8D:8A:9F:B6:9F:96:78:D8:D4:AE:9A:33:30:68:C2:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7aedb996-007e-36d1-81f0-a4d8a8190b9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:d9:0c:0d:8e:93:37:30:99:e7:1f:3a:99:1a:9c:23:ea:be:
         1e:04:c6:75:23:5c:a0:9e:1a:4b:ed:c2:14:19:ed:66:8b:3d:
         06:74:52:c1:5c:be:87:d3:39:5d:14:c9:d5:49:67:fc:a5:90:
         26:ec:95:a0:ca:50:9c:9c:bd:a3:22:03:a0:98:b5:54:61:6f:
         a1:7b:87:96:82:66:2c:a9:b5:47:eb:38:a4:b9:7f:1b:62:a7:
         71:05:01:1c:3e:48:14:9b:d0:36:40:95:70:4a:a3:03:07:94:
         27:49:08:04:d2:dc:8e:1e:0b:ba:ea:f3:ac:e9:57:8c:a3:b6:
         43:f7:89:3f:32:d0:36:6b:23:da:ac:3b:84:f3:36:3b:43:13:
         43:af:d9:94:1d:b6:f1:81:7e:33:eb:12:92:81:c6:82:c1:79:
         81:a6:45:83:ce:7a:94:55:3a:6d:4d:d4:c3:65:ff:45:9b:ca:
         9e:cc:81:87:d0:30:83:60:22:b1:66:49:f6:e2:a2:be:d2:32:
         05:02:91:2e:02:58:ab:55:81:90:98:3a:ee:3c:88:70:56:c8:
         0c:d1:36:59:85:c6:e8:d7:86:1e:7a:92:9f:d5:b4:45:f8:c4:
         bc:5d:b5:eb:14:c2:fc:28:b2:da:0a:ea:f7:64:db:f8:93:09:
         bf:19:32:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----