Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9b333105-e3d9-321a-9bbf-813a03610445.roa
File:                     9b333105-e3d9-321a-9bbf-813a03610445.roa (raw, json)
Hash identifier:          RrUkV8EQggJf3InF0wt7TJ7YsV/h0YwnpKeY1BhqZFI=
Subject key identifier:   1F:00:FC:05:2E:2D:B6:EC:C5:24:E3:76:4E:53:92:A5:53:71:71:CF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A03F4D1099C9FA541BD4720
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9b333105-e3d9-321a-9bbf-813a03610445.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.194.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:47:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:03:f4:d1:09:9c:9f:a5:41:bd:47:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=7ed8c2a5-26ba-497a-a7ee-4107ff354a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0a:b6:af:88:09:eb:f2:6c:e9:a9:dd:f5:29:
                    0d:87:99:eb:da:51:0d:e4:44:77:41:30:f1:44:de:
                    9e:77:c6:34:00:f9:fb:df:e9:10:e8:81:5d:ad:c7:
                    ce:81:d0:6c:5b:20:41:53:bc:a2:eb:68:8f:56:ef:
                    5a:65:99:5a:a4:e0:af:4d:a4:f3:a9:18:79:f3:fb:
                    e4:7c:55:5a:ec:d2:b9:6d:79:82:e2:0f:18:22:22:
                    1b:14:c2:39:0b:a9:78:af:f7:f8:2f:c2:4e:c3:23:
                    2b:55:21:d0:b9:9e:9d:1a:a3:8a:10:7c:4a:f0:56:
                    54:22:fa:22:ea:a4:56:0b:79:e8:08:85:88:33:1a:
                    ea:45:bf:f3:54:93:d7:a9:20:68:c6:c4:53:f2:f1:
                    78:fc:2f:cc:10:40:a9:28:6c:31:22:09:87:22:9d:
                    f6:ad:2d:f5:23:6d:fd:16:18:ef:20:4d:05:71:d1:
                    5a:e2:63:3b:12:da:6a:07:17:04:c5:01:01:5c:76:
                    45:37:0b:10:d5:3a:19:04:d0:d6:b8:af:48:68:0a:
                    77:e7:11:7d:20:5d:46:15:41:a2:93:f2:1a:d1:a8:
                    60:a2:72:34:29:fd:17:a7:09:7d:95:7b:2b:d6:16:
                    e9:51:23:7b:62:9c:a9:d0:17:86:63:bd:8a:83:e9:
                    50:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:00:FC:05:2E:2D:B6:EC:C5:24:E3:76:4E:53:92:A5:53:71:71:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9b333105-e3d9-321a-9bbf-813a03610445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:0a:6c:fd:3d:93:5b:c2:71:c3:6e:9c:41:54:45:f3:b7:05:
         b0:3e:c1:ca:ec:4b:fb:bc:8e:db:c3:06:aa:31:ca:29:63:09:
         cf:dd:ea:95:11:c5:22:b7:6c:b3:e6:74:a0:10:f6:d8:10:c8:
         58:9f:99:d3:b7:8d:67:77:29:25:a9:f1:ce:53:57:47:8e:98:
         8f:49:74:24:ae:a2:a8:30:20:eb:1b:b8:04:3f:15:05:2d:20:
         f9:b2:65:1c:07:c5:a5:a3:83:90:06:f5:65:6b:e9:37:a8:d4:
         cc:09:e3:f5:f6:65:5b:a9:10:08:0c:0e:4a:2f:fc:1c:9d:3f:
         53:86:91:48:35:11:a8:ad:19:f6:61:d4:03:b3:7e:4b:7e:4b:
         30:dc:68:78:f1:9c:aa:61:52:85:8b:31:4d:34:94:21:39:43:
         cf:20:05:74:19:03:5e:d8:87:fb:49:75:da:29:20:05:92:c0:
         14:5e:15:37:7d:b8:97:db:32:59:4a:09:a3:2e:a3:04:0a:54:
         63:b8:97:c6:d1:04:74:d2:c7:55:bb:27:3f:89:6c:3d:a1:0a:
         26:e7:54:86:67:87:41:20:f9:6d:f7:5b:fb:aa:fb:17:90:e4:
         ea:7a:99:4c:1e:5d:89:74:4e:5c:7a:6e:6e:ce:e0:8f:f3:0f:
         cd:f5:ef:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----