Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8c6c6fff-01d7-36df-a9ee-4a73141d53e6.roa
File:                     8c6c6fff-01d7-36df-a9ee-4a73141d53e6.roa (raw, json)
Hash identifier:          dlCpDqA5Vd787x91d2falvtrf3b0lkpARx6nREShxS4=
Subject key identifier:   BF:BD:1E:93:38:25:78:34:4C:32:4B:6A:7F:A4:2D:CF:14:1A:F3:43
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0CD35BB8719A4EAE197200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8c6c6fff-01d7-36df-a9ee-4a73141d53e6.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.134.244.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:55:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0c:d3:5b:b8:71:9a:4e:ae:19:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=1fdfafb6-eec0-43f7-96e1-11409195dd59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d7:6c:a0:56:e7:80:d6:87:9f:0c:0d:26:45:
                    56:76:d7:a5:aa:e6:f7:d3:e5:30:5c:59:99:64:e6:
                    31:34:3d:19:13:91:7b:88:d8:73:16:99:19:1e:8b:
                    ad:b1:f7:37:f0:3a:f2:5f:0e:61:35:0d:8e:7f:b0:
                    76:02:a2:4e:ce:0a:b8:4d:03:0d:39:56:bc:e5:69:
                    76:cf:d1:f2:b2:f7:65:9a:82:3a:d7:2c:2f:f0:4f:
                    73:79:7e:a3:94:47:c0:73:72:9e:72:3d:33:d8:c1:
                    98:bd:4b:47:54:ef:8c:f6:9d:45:28:7b:c7:0d:10:
                    67:bf:f7:ad:0c:1e:98:c1:81:f8:1e:1d:6d:56:ee:
                    e8:25:b4:98:b0:89:7b:bb:6e:b5:02:c8:11:ee:74:
                    6b:3e:bf:ac:bd:7f:06:ce:95:9c:e6:2c:df:72:71:
                    86:73:55:bf:76:bd:6f:f5:3e:6e:55:cc:70:5a:ee:
                    5f:78:6c:14:cf:dc:cd:7f:85:6d:3e:1c:5f:7c:90:
                    36:10:ee:7b:fb:07:19:58:7f:89:36:3b:0a:c8:41:
                    a5:70:76:3e:0e:1b:9c:72:52:9b:b0:f8:ec:91:98:
                    ba:c3:c1:da:b8:0b:a8:77:6e:79:2c:a6:e1:39:3f:
                    c3:52:a4:97:df:7a:3a:5e:2e:37:73:45:3d:79:70:
                    ef:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BD:1E:93:38:25:78:34:4C:32:4B:6A:7F:A4:2D:CF:14:1A:F3:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8c6c6fff-01d7-36df-a9ee-4a73141d53e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:3a:1b:98:f2:df:c9:55:1f:de:f2:7c:3c:aa:ff:52:fe:53:
         91:bd:5e:cc:72:44:4f:47:31:72:c8:b8:05:ad:87:bb:ca:cb:
         bc:26:0b:05:e0:56:06:47:0f:65:4b:e3:1a:49:e9:60:98:10:
         75:24:bc:66:35:2b:68:b3:c2:0a:a8:b4:54:66:5d:2b:55:01:
         54:3c:40:04:3e:52:d3:43:a6:e7:fb:76:fc:a5:a6:b7:c8:bf:
         6d:f5:e9:9f:96:8f:36:6a:1b:cc:f9:86:cd:e7:a1:59:a7:d1:
         83:1e:23:a3:87:ee:74:a6:cc:cd:24:47:24:be:63:2d:46:40:
         4d:3e:35:f4:ae:7e:93:52:c3:77:67:d9:35:b8:e4:6e:b2:50:
         1d:35:55:53:ce:81:df:08:5e:6e:10:78:1f:dc:5a:89:71:df:
         ec:e3:75:72:50:45:cc:6f:03:27:62:f3:da:23:22:91:35:4b:
         c3:b2:d1:3b:00:89:62:d3:eb:88:ec:25:be:76:7e:3b:89:cf:
         3c:7e:5d:e9:c5:57:09:7e:bc:b5:5b:3a:be:75:4e:6f:0c:79:
         2f:1c:35:e3:ce:db:52:c9:00:69:cb:5d:73:77:94:59:1d:3e:
         0a:0d:b8:46:e3:5d:6c:9b:69:72:59:9e:ce:81:7b:0e:b8:b6:
         8c:e5:5e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----