Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9ae9d04d-ee61-3909-b72c-6bd9439e7ed7.roa
File:                     9ae9d04d-ee61-3909-b72c-6bd9439e7ed7.roa (raw, json)
Hash identifier:          9zApIAXCRewoOD0NUyvlE6HdFZF80L9iwd1ZNp1RpSk=
Subject key identifier:   7E:4A:41:53:15:B9:E1:6F:62:5F:31:CA:6B:64:4F:39:5C:47:E5:0C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A05729E71552FDD1AEC2300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9ae9d04d-ee61-3909-b72c-6bd9439e7ed7.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:05:72:9e:71:55:2f:dd:1a:ec:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=bc46853e-a61e-4641-88ef-9341f0144f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4c:9b:16:0d:49:05:6c:28:fc:ad:a9:11:4a:
                    64:c9:a6:15:48:82:6b:1f:57:44:8a:1c:c7:47:56:
                    5b:07:83:22:98:1d:7e:c7:b8:f9:ff:19:b0:f9:d5:
                    1e:bb:b6:aa:4f:a6:46:ff:05:59:3e:8b:37:55:02:
                    da:b2:3f:f6:c2:a2:b0:0d:00:cc:76:1a:02:cf:c4:
                    99:65:19:57:d3:99:06:df:2b:64:3e:e3:b5:04:3a:
                    65:d9:20:ae:eb:13:d8:e4:e4:41:ce:6c:a5:67:49:
                    df:69:90:78:5d:7f:94:76:0e:7a:e6:54:82:3e:41:
                    d4:fa:56:07:99:12:52:92:df:06:18:a9:63:84:df:
                    99:7e:a3:3f:ff:d6:13:61:da:f1:0c:6a:29:bf:34:
                    c0:cd:05:c8:7b:87:d0:aa:f3:8a:e9:5a:63:aa:08:
                    2f:f6:db:63:94:d7:c0:45:e2:e4:78:ae:3d:ab:0b:
                    a7:2f:ca:52:e5:2c:86:b1:2e:46:9c:8e:16:3a:82:
                    8f:1d:0b:37:ba:21:41:0a:98:ef:14:6f:0b:e2:6e:
                    8f:d4:b5:76:6a:53:1d:73:a3:48:e6:cd:0b:f9:de:
                    c0:d7:64:24:42:8a:57:1a:23:89:d2:85:48:dc:78:
                    a4:48:79:d6:e6:8d:73:a5:aa:ca:01:a0:65:1e:e9:
                    61:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4A:41:53:15:B9:E1:6F:62:5F:31:CA:6B:64:4F:39:5C:47:E5:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9ae9d04d-ee61-3909-b72c-6bd9439e7ed7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:04:c1:10:ab:07:05:e4:b0:16:01:67:0b:76:4c:40:5f:b8:
         03:fd:4b:8e:9e:80:0c:7c:ca:98:60:0a:1b:8f:09:dd:81:5a:
         8c:ff:fd:53:a6:93:b9:19:b7:45:3f:61:ad:0e:81:98:71:8d:
         54:6b:68:74:1f:2c:6e:45:5a:a2:d6:d8:56:9b:da:f7:02:a5:
         8b:67:a8:c8:47:9d:99:af:67:da:4d:44:f1:86:69:4f:c4:31:
         a0:cb:92:d1:a3:c9:d1:31:80:0e:a6:8a:ef:3f:31:01:92:d1:
         5a:d6:29:ec:ec:45:ed:b2:f5:73:02:ee:3c:95:8f:82:10:e8:
         68:3e:d6:d9:6c:75:39:07:1a:28:9d:be:19:95:d8:9d:4b:41:
         3d:93:db:8f:68:23:bc:45:79:f5:6a:78:25:94:c5:bc:41:6d:
         58:55:6e:e8:0a:ec:65:89:f1:63:da:a1:bc:e2:5d:94:65:d0:
         74:4f:ac:8d:e3:3b:e8:8d:64:1b:07:1b:6a:cd:2f:25:5a:7d:
         52:4c:48:32:92:b9:48:ba:01:4f:9d:1c:2c:27:37:98:59:5b:
         40:97:ec:0d:99:40:fb:c0:0b:cf:db:26:3b:31:d1:ed:19:8c:
         7b:06:c0:16:83:1b:18:da:b9:08:13:57:f2:ab:bf:4c:8e:16:
         f0:6b:f2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----