Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/85f34cc7-4fca-320a-aaa5-7b104e3bfcb0.roa
File:                     85f34cc7-4fca-320a-aaa5-7b104e3bfcb0.roa (raw, json)
Hash identifier:          tSw8cGCcOR4mYRvcKWouTY5UdjzzR9eGYxDFpAlzQd4=
Subject key identifier:   2B:C5:74:C2:51:80:7C:96:91:48:15:98:20:BE:BF:E3:8F:94:E3:97
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0554F4203635191D055F80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/85f34cc7-4fca-320a-aaa5-7b104e3bfcb0.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.168.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:05:54:f4:20:36:35:19:1d:05:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=50c7b836-8f12-4d06-8b13-2830575c4e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bf:13:85:2b:b0:e4:36:a6:c8:60:10:53:72:
                    c0:60:3a:7f:85:f2:0d:4a:08:74:11:7c:ff:7c:43:
                    9e:a3:93:84:6c:5c:98:3e:9f:d1:25:a9:06:e7:3c:
                    22:63:50:59:db:00:78:5d:c1:75:aa:0c:4e:e8:1e:
                    ce:7b:d1:57:4d:35:50:96:0c:00:87:22:d6:29:c2:
                    9f:c8:9c:92:b4:e8:f8:97:73:fa:d4:5c:77:1a:20:
                    9b:bb:82:e7:1a:ba:ee:d6:9f:60:12:f3:71:e3:0b:
                    dd:41:7b:31:da:37:99:54:da:4a:27:48:03:a5:26:
                    cc:3a:2b:f5:cd:b5:0f:b9:9f:e9:ef:f0:79:79:d2:
                    f6:7f:66:fc:88:6c:60:02:06:9e:69:30:c3:cc:0d:
                    b8:e0:30:fd:66:24:eb:e0:da:3e:a3:da:ef:93:0d:
                    f2:1f:f0:99:fb:30:3d:62:b8:5e:6c:3f:05:67:2b:
                    80:f8:a9:b1:1a:51:a4:36:6b:1f:8e:65:c1:72:a1:
                    f7:34:3d:56:38:ab:6b:0a:5a:c4:94:31:cf:56:a4:
                    62:ab:aa:f4:ae:b5:8d:b2:d9:05:3c:e6:61:7b:db:
                    e8:a5:34:97:ab:75:fc:ed:7a:00:33:2c:53:06:8c:
                    01:7d:e1:08:6d:3f:c2:4d:20:e0:e6:f3:d1:e7:09:
                    81:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C5:74:C2:51:80:7C:96:91:48:15:98:20:BE:BF:E3:8F:94:E3:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/85f34cc7-4fca-320a-aaa5-7b104e3bfcb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:cb:8b:22:7d:68:89:91:25:6b:3d:d3:a4:75:a6:8f:75:26:
         39:f1:29:4b:66:fb:7e:0c:67:e0:d3:da:61:ee:d1:b9:82:af:
         f1:dc:a6:f8:01:5d:c4:dd:d9:78:63:2c:35:2b:f2:7f:02:23:
         6b:37:b1:09:9c:a1:be:9e:65:3f:ef:33:e3:a5:cb:da:60:21:
         ce:7f:fc:80:eb:45:45:52:c0:c0:55:47:eb:59:b6:e1:8a:79:
         94:b0:9c:d8:03:dc:f7:7e:b8:2d:15:83:5d:5c:45:83:ca:dc:
         d9:08:e3:34:39:64:9e:49:5f:11:10:56:cf:a4:8e:54:8c:f7:
         f8:a6:5c:4d:22:1c:31:c9:e2:7b:89:a3:06:c1:ae:0f:65:cc:
         50:4c:c3:27:fe:21:db:84:f3:4f:a2:51:df:c8:93:00:b7:90:
         14:12:92:8c:4c:e3:7f:cd:8a:e5:a4:e3:c6:13:81:98:de:64:
         95:20:74:4a:0c:7a:73:bb:d3:47:bd:28:fa:d4:fe:6d:ae:34:
         66:c7:b9:9a:f5:31:46:9f:f8:59:a6:1e:d1:70:9c:50:ea:a7:
         c3:67:43:32:e7:33:ab:ba:39:ee:52:3d:d4:5c:f4:46:79:fd:
         f5:28:bd:f7:6a:64:cd:37:23:68:f3:d9:ee:01:e1:07:7f:d7:
         81:c1:4a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----