Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8bd1ba84-7d16-344f-aa4c-f589c6e9c9ce.roa
File:                     8bd1ba84-7d16-344f-aa4c-f589c6e9c9ce.roa (raw, json)
Hash identifier:          APs4XkFT1clIkesQoSOzVpH//vZbV9jKSBZpgWFfqS0=
Subject key identifier:   3D:0B:37:24:37:11:3C:CB:99:54:75:30:EC:FA:51:E7:4E:C4:62:08
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309F414E9D27F41E9F5295168
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8bd1ba84-7d16-344f-aa4c-f589c6e9c9ce.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.238.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:55:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f4:14:e9:d2:7f:41:e9:f5:29:51:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=db2f66dd-2596-423d-80b7-d8e5d988b070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8c:5e:16:72:a4:0f:13:e8:c4:3a:c7:57:ed:
                    cc:fd:b4:d8:db:1d:58:bc:c8:07:27:5a:4d:ea:5f:
                    d3:74:37:a6:c3:16:3f:66:36:4b:b1:23:1a:b0:48:
                    97:db:cb:ae:67:d9:29:09:1a:8e:f4:2d:5b:56:12:
                    a0:d9:48:8a:89:b4:db:65:08:e5:5d:58:62:14:7a:
                    f5:ce:0a:44:e9:ae:d3:f4:9e:03:58:87:98:ac:d9:
                    73:97:f0:25:d1:15:25:d8:11:6f:c2:ae:5c:f6:8d:
                    1a:04:4f:97:d3:e8:c2:c8:f4:e6:b6:91:82:b4:65:
                    b0:67:e8:66:f2:41:47:a2:9f:10:8e:c5:5a:db:03:
                    9a:c8:b8:af:ca:94:cc:ed:3c:1d:22:f4:64:61:6c:
                    19:1d:75:00:ee:64:46:3a:30:a9:2e:c3:e8:a6:ff:
                    35:b3:ad:06:2e:81:87:e2:51:0b:de:a2:95:c5:31:
                    fc:b4:fe:ff:1b:5c:f1:b6:1a:76:35:a3:7a:13:93:
                    8f:89:d3:21:58:c1:b7:ee:19:89:6f:3a:60:fb:8d:
                    c3:39:fb:a4:6c:99:5a:0c:f4:e0:55:01:68:ad:98:
                    f2:e4:12:ce:31:3e:4b:96:70:af:06:e0:6f:a1:ba:
                    18:26:95:f0:00:73:d7:93:d0:54:6b:f1:e6:41:88:
                    5a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0B:37:24:37:11:3C:CB:99:54:75:30:EC:FA:51:E7:4E:C4:62:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8bd1ba84-7d16-344f-aa4c-f589c6e9c9ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:c5:ce:29:ff:75:b1:df:f9:e5:3b:d7:f4:6d:b0:9d:d4:ce:
         d8:bd:d9:23:c4:e7:cb:1e:91:24:b2:32:fe:1c:41:c9:c7:ec:
         b5:77:be:80:81:41:e7:af:d3:c0:41:52:88:ff:97:05:99:a0:
         8d:b7:f6:a6:a1:d3:4f:49:9b:3d:bd:2d:9b:b1:29:63:c1:c4:
         a3:f0:41:85:a7:25:30:4c:f8:e6:dd:5e:33:8e:9f:30:7b:6b:
         b5:4f:de:65:15:84:59:99:64:4c:4c:5c:ee:c7:0c:a0:30:e3:
         c2:81:b6:61:5c:69:a6:67:ff:13:50:41:4c:9a:54:2d:28:f3:
         87:6e:84:06:d7:55:90:1d:11:83:bf:03:2b:a2:cd:54:1c:24:
         b4:0c:4c:2c:44:2d:04:42:64:c5:46:ce:65:c1:0f:6e:a1:4f:
         d5:f4:c6:7a:12:d7:e1:02:46:d4:51:2a:19:3a:49:55:ab:a4:
         35:04:f3:83:6e:71:38:ca:11:1f:bc:5f:da:88:1b:ff:fe:be:
         bb:dd:5e:ad:c1:74:39:5e:fc:1c:a2:6e:54:1d:88:ea:c7:59:
         c9:f8:48:49:51:6e:85:52:c1:23:44:d9:68:da:c4:c4:b9:c7:
         70:df:5a:48:f3:18:66:96:f2:34:95:35:4e:3b:fb:20:e7:27:
         85:e5:8b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----