Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/890b25b7-4407-3ce1-a865-cc50c4a8472e.roa
File:                     890b25b7-4407-3ce1-a865-cc50c4a8472e.roa (raw, json)
Hash identifier:          thCT6oIvYVHScz1kLhH8yMQn3Htw66C5ssNch1yR9Gc=
Subject key identifier:   82:14:9A:2B:61:17:22:96:14:69:24:6F:0D:DA:19:C5:2D:D3:06:FA
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309EF32FBA34752F84B27A480
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/890b25b7-4407-3ce1-a865-cc50c4a8472e.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.136.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ef:32:fb:a3:47:52:f8:4b:27:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ed6573b4-c80d-4482-8e5f-1f967bdd69d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:84:d4:c5:9f:72:84:c9:ae:ad:4c:e2:15:3c:
                    93:b4:18:10:1f:e1:06:be:e4:d0:b7:c7:ec:3f:80:
                    ad:c0:6a:de:7c:16:54:77:62:7d:6c:32:39:8e:1c:
                    3f:3d:2f:a5:34:96:2a:0b:d6:b3:9d:42:fe:19:86:
                    84:55:4f:76:d2:ee:ea:9d:be:80:09:23:c7:71:4b:
                    a0:71:91:f9:dc:c3:11:43:14:67:b3:90:61:fd:08:
                    ee:f8:de:71:65:9a:dc:15:ee:35:6e:aa:73:20:56:
                    41:8d:9b:01:d8:61:b7:29:84:fa:61:e7:0a:37:62:
                    36:47:c5:54:38:38:8b:3c:e6:e7:5a:94:cf:11:10:
                    dc:fe:26:e8:81:80:50:7c:03:b3:89:59:aa:61:c8:
                    a6:43:e8:39:34:7e:04:a3:f4:16:0d:52:6c:ff:5a:
                    95:c7:c3:ae:6b:09:98:ed:8e:21:d9:11:c3:82:a4:
                    0c:28:cb:72:21:22:48:13:49:38:fa:29:3b:40:ec:
                    8b:06:63:45:15:88:63:da:67:e6:2f:ec:17:66:a1:
                    66:cc:46:d4:72:01:00:ec:0d:e1:b3:6d:cf:16:a8:
                    bc:64:95:ff:98:c3:3e:1e:dc:ca:04:d9:38:e0:69:
                    93:b4:f4:20:51:69:fd:84:0c:a5:00:42:79:2b:be:
                    fd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:14:9A:2B:61:17:22:96:14:69:24:6F:0D:DA:19:C5:2D:D3:06:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/890b25b7-4407-3ce1-a865-cc50c4a8472e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ef:91:66:0c:a7:a2:6b:2b:f5:2d:6b:7b:a0:b7:5a:f4:f2:
         ed:8f:4a:6a:31:a5:a2:a3:b5:b8:d0:f2:a6:21:50:8e:c5:09:
         d5:56:18:80:48:36:62:61:3a:3a:00:26:f9:db:d6:f4:d3:4d:
         34:dd:82:5a:ac:64:47:f1:50:7e:ec:c2:49:50:96:2a:26:78:
         ae:98:12:14:fa:6c:64:e4:0d:87:86:20:71:af:cf:a3:81:4e:
         2c:59:d1:39:ca:dd:42:5b:90:c8:2f:7d:67:75:72:78:02:da:
         a3:66:df:3b:1b:f4:4e:28:3e:f9:06:45:11:54:01:e3:35:92:
         14:d8:a0:4d:9b:78:01:31:d6:cc:98:d6:9f:12:fb:e2:6a:4a:
         b1:41:18:63:cf:fe:5b:9e:a5:9e:a1:f0:0e:dc:d6:50:2d:37:
         25:24:b3:85:5e:5e:75:c9:5f:1c:e9:69:e8:cb:21:cd:6b:6e:
         49:1b:54:12:49:d5:83:f4:f4:04:65:4d:c9:d5:9e:b8:ee:18:
         eb:bc:3e:6b:c8:ee:f5:24:29:5e:51:10:bb:3c:9f:64:9c:73:
         30:a6:13:1e:07:c8:24:66:ed:78:3a:d0:7d:fc:42:3d:97:c6:
         30:ae:5b:cd:96:fd:87:46:c1:42:24:48:76:20:05:79:8f:e4:
         8f:cd:be:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----