Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9179dde5-29ba-3f24-bff7-305d3de3a070.roa
File:                     9179dde5-29ba-3f24-bff7-305d3de3a070.roa (raw, json)
Hash identifier:          h6pYoj1LXabEYHq2mMHmupTdO7uBPufaARm2scNKcVs=
Subject key identifier:   67:FF:C5:A2:33:0F:5B:05:0F:EF:B9:AB:07:7D:6F:3C:72:8A:CC:1D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0FDA923D61CF6DC014FD80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9179dde5-29ba-3f24-bff7-305d3de3a070.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.134.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:55:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0f:da:92:3d:61:cf:6d:c0:14:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=9403cd26-1fc8-4e19-be31-9fa325881811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f7:9a:e2:b0:50:4e:c7:97:d1:d9:2a:6c:ea:
                    73:da:52:21:9c:29:bc:da:c7:ba:df:5e:3b:ee:18:
                    f5:e4:59:28:46:92:60:1d:1d:69:13:d0:5b:2c:93:
                    e1:8c:90:7a:1f:3e:26:e7:5b:59:dd:3a:9d:ef:6c:
                    7f:69:d9:67:9a:53:ee:fe:42:60:30:9d:8a:10:5b:
                    94:ec:ac:e0:f5:d7:19:f8:bb:9f:a1:d9:84:bf:2b:
                    94:d8:74:e4:34:ac:01:02:0a:a6:3b:43:1f:8e:c4:
                    93:fa:60:47:15:cd:3c:d6:ad:58:77:55:a4:72:ec:
                    47:40:89:99:a5:04:2e:97:ec:85:d6:92:94:62:3e:
                    d0:52:68:0e:13:7e:6d:43:61:54:43:3e:39:61:d6:
                    a5:7e:b0:74:7f:f1:08:d4:99:3c:93:dc:60:2f:04:
                    72:86:54:5b:5a:42:e2:3b:d2:eb:01:19:66:d9:8d:
                    fc:0f:40:44:c2:81:e6:1f:ad:5e:17:44:02:ab:54:
                    08:3b:05:3f:cb:db:dd:bd:a7:de:ec:0f:45:86:35:
                    5a:b2:e6:96:24:dc:df:44:3d:4e:26:ce:71:a3:f6:
                    59:7d:38:73:1f:ce:2d:a8:69:35:d5:f6:ff:24:6f:
                    65:e6:d2:01:57:aa:4c:9e:54:a6:69:04:d1:9e:e5:
                    47:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FF:C5:A2:33:0F:5B:05:0F:EF:B9:AB:07:7D:6F:3C:72:8A:CC:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9179dde5-29ba-3f24-bff7-305d3de3a070.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:3a:8e:cb:3f:a6:ae:47:5f:d3:5f:8b:26:9c:28:f5:e2:39:
         4f:4d:73:5c:58:3b:83:4e:c4:1e:ad:a0:22:75:06:b8:f7:79:
         f7:fb:b7:6b:e1:5a:b5:1b:aa:f1:46:fe:15:1d:bf:ff:53:54:
         03:5c:74:93:02:81:db:bb:58:ce:5b:0e:63:0b:0f:89:66:24:
         0d:52:72:33:34:dd:98:6f:b1:99:db:da:bd:1c:e8:c9:6a:61:
         31:15:58:bc:54:7f:e4:c4:b0:aa:26:db:4f:88:a7:b5:6c:cc:
         d3:37:7c:ac:a2:9c:7a:c2:34:4c:6b:7a:fa:10:c3:d5:e0:28:
         63:c5:79:c2:65:c3:c3:0f:83:59:21:be:63:d5:1c:d7:e1:bb:
         b2:2b:6d:76:4b:f6:4e:34:e2:40:5c:b9:32:30:28:6c:88:a5:
         dd:f8:04:0d:db:50:93:02:39:e8:9b:b5:2c:e4:61:26:4f:06:
         bc:9c:5b:01:36:c3:f7:65:46:7d:e6:5c:ee:61:a7:5f:65:cc:
         01:64:25:3a:50:46:29:9a:2a:2a:53:84:ab:a9:b6:cf:c4:53:
         23:03:f9:a1:38:59:9a:3a:b2:66:8e:20:6e:cc:c5:59:ed:6e:
         3c:c3:ba:46:cd:c0:89:0d:43:78:37:14:ab:18:37:d0:ab:48:
         75:56:57:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----