Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9f10dcac-24be-3ec1-9dc3-b5a2903bcc18.roa
File:                     9f10dcac-24be-3ec1-9dc3-b5a2903bcc18.roa (raw, json)
Hash identifier:          kmRV50Y8OGQoPM1eBNP98UwFM73lQ9i3jEGMUNXoVHk=
Subject key identifier:   8D:C1:96:4C:2E:2D:29:0D:6D:45:63:3F:07:1C:01:FB:83:54:19:3B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A16A7A5C2AA864AD8EA4980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9f10dcac-24be-3ec1-9dc3-b5a2903bcc18.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.101.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:45:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:16:a7:a5:c2:aa:86:4a:d8:ea:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=797b7e8c-9294-43f3-96e8-1fa9625ffcd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f1:1e:94:f8:ba:73:b8:3f:a2:cf:d6:09:4a:
                    de:a2:5f:ed:9d:ff:12:db:d0:e4:db:16:53:c2:f4:
                    e7:d0:ee:0c:61:1d:c2:7f:25:85:af:95:f8:bf:ae:
                    ac:a6:b0:17:4e:d1:21:a9:86:2f:0e:ab:5f:be:07:
                    48:c7:aa:88:bf:ca:07:99:e6:55:3c:cc:8a:66:e4:
                    08:23:c3:20:d8:9b:a4:04:e9:c3:13:2a:4d:6c:fe:
                    12:f0:70:82:c3:2f:43:ea:cd:d3:57:ed:0e:ed:62:
                    68:54:48:ca:55:a8:cc:76:36:27:12:87:7d:16:a6:
                    dd:97:0b:b1:82:24:ab:2e:67:85:65:4c:68:e2:f4:
                    86:3e:3f:f7:68:13:73:f0:ae:b3:c5:e0:f0:a2:ae:
                    a5:a6:ed:bc:3e:70:39:b1:f2:08:33:ff:52:49:2b:
                    be:e2:fc:3a:75:9f:4a:50:5d:72:c9:3f:5f:24:99:
                    45:02:2b:6c:ee:10:ac:6a:97:3a:12:cf:2d:d1:16:
                    88:0f:b2:01:34:18:0a:b9:a2:2e:bf:d4:cb:8a:bc:
                    44:16:c0:20:f9:a6:c3:58:c8:33:2b:a4:19:a6:1f:
                    01:3e:1b:04:7c:04:19:8b:a3:ae:94:ff:8a:14:ba:
                    ae:e9:f6:88:82:67:c6:e2:d0:cb:19:e2:df:ee:a9:
                    a5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C1:96:4C:2E:2D:29:0D:6D:45:63:3F:07:1C:01:FB:83:54:19:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9f10dcac-24be-3ec1-9dc3-b5a2903bcc18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:1b:9c:64:d2:2c:a5:28:fb:43:00:44:c8:d6:2f:36:72:c0:
         a4:b2:91:25:08:0e:da:e2:b8:95:13:23:e0:d1:8c:5e:3f:c9:
         5b:63:07:02:57:2e:94:a3:64:e1:61:5a:37:61:5b:85:ff:dc:
         b3:ac:4f:8d:73:81:d9:2f:3c:18:2f:d5:f5:5a:9e:c5:7c:34:
         c1:9e:7c:02:fb:b6:83:ca:56:e9:df:84:c8:1c:30:ec:6a:2a:
         e7:d2:46:6f:01:dc:12:e0:dc:7e:46:33:50:29:a1:4d:43:95:
         dc:2b:d1:39:cd:e3:9d:a7:a6:92:73:a7:58:0c:43:73:56:62:
         2a:f9:03:e7:62:23:96:7c:84:c7:00:99:3e:ed:55:36:b2:f0:
         6f:6b:f8:6c:e8:93:f8:33:ee:f6:92:55:04:ab:e2:9c:82:2b:
         96:4a:8f:64:5a:f3:b7:01:f1:35:af:3a:20:d5:7a:a4:86:86:
         28:b5:7a:02:3d:65:d9:67:68:48:f2:c2:f3:c4:dc:7e:58:86:
         2d:13:bc:50:10:7b:cd:a0:2d:ea:87:4e:47:cc:57:fa:bd:f9:
         77:80:76:3e:bc:45:9a:e8:4c:40:39:58:96:1d:68:53:fe:ab:
         aa:58:24:b7:cb:90:ff:fa:60:57:db:87:2d:70:d6:99:06:27:
         5e:65:b3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----