Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9fd5629a-4048-3f9d-826d-466cf73bc1de.roa
File:                     9fd5629a-4048-3f9d-826d-466cf73bc1de.roa (raw, json)
Hash identifier:          PUHpuiWy+5xiUm2DFjEGbO9Ut6ayOX4SToohycKNYxU=
Subject key identifier:   32:BA:2E:A4:3A:06:B1:F6:F2:56:A9:CA:41:EB:B5:72:68:3B:E1:2F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A1C90BB6BAEEE40C93F95C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9fd5629a-4048-3f9d-826d-466cf73bc1de.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.224.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:40:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1c:90:bb:6b:ae:ee:40:c9:3f:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=48df466f-bd25-418e-b3cc-e3ff27ead611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:12:35:7a:db:19:8c:ef:ef:70:dd:fb:b3:c6:
                    c9:bf:51:99:e3:18:21:9f:84:a3:f8:87:63:78:81:
                    92:bb:40:28:dd:17:f8:21:8c:ac:10:30:8f:23:d0:
                    35:87:ba:ba:c5:72:b8:30:cf:57:29:b7:a3:6e:66:
                    da:ab:35:cc:24:e5:bb:21:b4:d8:14:bf:16:09:77:
                    dd:73:14:94:45:ac:30:07:82:2d:e5:09:ea:a1:46:
                    a8:f3:3f:05:42:92:dc:22:57:c7:d0:37:26:89:dd:
                    3f:66:1c:c8:d7:e5:7b:2f:c8:10:38:ba:fa:ce:36:
                    8a:03:85:54:9f:d4:6c:2f:d9:14:4a:dd:76:76:78:
                    dc:58:89:d4:46:81:42:12:5f:99:5e:4f:10:3e:a5:
                    54:bd:bd:e0:c7:1c:bc:1d:6c:f3:4f:40:e6:5b:6d:
                    52:cb:92:bf:4b:a8:30:3e:02:93:33:40:eb:15:f0:
                    e9:fe:3f:4b:bd:3e:25:7b:47:84:da:44:f2:c0:91:
                    8d:3b:20:b4:5d:34:1b:f5:36:34:6f:39:46:43:af:
                    30:01:6b:a5:6b:24:1b:95:2e:d0:17:30:17:80:a3:
                    ae:53:7b:f2:8a:0a:09:9b:63:92:53:33:b0:b6:c3:
                    03:ff:87:b8:92:ae:71:52:04:63:ad:96:39:b3:a2:
                    f8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BA:2E:A4:3A:06:B1:F6:F2:56:A9:CA:41:EB:B5:72:68:3B:E1:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9fd5629a-4048-3f9d-826d-466cf73bc1de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:f4:4f:f6:03:de:62:b5:73:87:fb:eb:3f:0b:ed:fe:8f:ac:
         34:9e:a4:19:ee:bc:58:c8:93:25:31:f8:cc:10:e8:1a:1f:65:
         a3:50:dc:02:17:27:8d:2c:c8:ae:5a:4a:39:24:dd:1a:85:98:
         4e:45:73:84:b3:c8:15:14:0c:87:f9:a9:dc:d7:ce:f0:67:c8:
         e0:77:1c:87:ad:38:30:79:80:9a:27:86:5a:08:a5:00:be:f4:
         46:4e:03:05:23:c7:c1:04:ff:1e:a2:88:12:46:06:31:fb:5a:
         16:66:a3:78:4b:47:c6:2d:8e:a7:21:93:2b:c1:6c:90:2d:74:
         2b:ae:7d:6b:d1:fe:75:96:f5:45:ee:da:fc:a2:98:47:39:a7:
         fb:9d:60:66:2b:d9:a8:db:3d:b4:81:10:52:5e:34:da:c7:ac:
         36:7c:b9:41:d3:82:49:db:19:77:62:14:a7:a2:28:ac:78:36:
         5f:2e:38:bb:ae:3e:85:e5:19:8a:cb:af:c4:62:08:53:1f:99:
         d7:78:1c:69:45:2c:11:5e:a0:48:0c:3b:d4:1e:d1:e5:a4:88:
         c5:25:55:a9:58:ab:63:66:0d:d2:7c:9c:0a:c4:5d:72:1d:d2:
         6f:97:55:0e:b9:e4:4e:59:4a:b7:d7:00:1e:f4:0a:7e:51:d5:
         89:70:47:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----