Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a985a2bf-0c82-3b8d-ad9e-c1630725811f.roa
File:                     a985a2bf-0c82-3b8d-ad9e-c1630725811f.roa (raw, json)
Hash identifier:          CVQjKu2+wvd1KQHtrTrMNExSTCoA+RnGZql7ZSCO6S8=
Subject key identifier:   88:64:02:D2:FA:2E:94:03:D5:2C:49:6A:2E:14:A3:1C:35:95:C7:1B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309FECD99CFCB5B86CF98BE50
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a985a2bf-0c82-3b8d-ad9e-c1630725811f.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.151.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fe:cd:99:cf:cb:5b:86:cf:98:be:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=5ea07673-3b4e-49cb-85f3-79c1d01fc9aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c1:bb:3e:bd:5c:b9:05:f3:68:de:0d:93:e6:
                    df:c7:82:00:e1:57:e7:1c:47:0f:b5:22:82:1f:ac:
                    b4:04:36:fe:68:93:e5:0e:1b:9a:ce:f3:aa:dc:c7:
                    5b:e6:5a:8b:1d:4a:da:3e:05:7d:cc:72:64:5b:c2:
                    b8:bb:5c:5f:40:e0:53:2d:c0:e1:4b:f3:92:8c:7c:
                    67:71:09:e4:e8:26:36:18:b0:df:43:04:dc:a9:79:
                    f4:28:69:50:0e:6c:ba:f0:c3:39:33:60:37:3e:8c:
                    d5:fc:f9:09:50:28:b1:a3:46:69:67:c6:1e:09:42:
                    d7:8d:23:32:a2:97:95:50:05:a5:97:99:29:92:e9:
                    8f:c7:18:49:82:a9:e1:62:62:eb:81:36:6c:fb:3d:
                    49:33:54:d0:4d:39:14:66:14:dd:2c:76:4d:93:00:
                    e1:03:73:45:18:8b:97:0f:ae:13:ac:ad:01:31:88:
                    75:dc:d1:b1:7a:a6:93:63:17:29:c0:77:62:cd:ad:
                    c7:14:70:16:6e:ec:78:65:c5:a4:12:73:a6:bf:f8:
                    9e:44:1f:fd:c4:23:bb:58:96:b8:e3:d9:c6:41:6b:
                    eb:11:a4:48:68:9c:17:16:4c:13:d4:1f:5f:2d:63:
                    a8:e1:e5:7f:dd:0e:9b:f7:aa:ab:1c:37:9f:7e:1d:
                    2e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:64:02:D2:FA:2E:94:03:D5:2C:49:6A:2E:14:A3:1C:35:95:C7:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a985a2bf-0c82-3b8d-ad9e-c1630725811f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b5:21:0a:7b:29:81:cc:99:c9:1c:05:6f:dc:d8:32:d8:a2:
         79:a8:a8:a2:2a:9c:22:37:b9:4a:17:33:25:8c:a8:7b:82:51:
         13:9f:6b:25:54:33:6e:88:2b:d5:da:d9:67:87:f3:9f:5e:80:
         5c:ea:1d:ad:97:87:35:05:18:9b:6c:30:ca:1a:7c:d3:1d:d5:
         08:2c:d7:1b:83:a2:01:3d:34:6c:ac:a6:33:68:af:58:c2:0a:
         cc:f4:94:59:6d:4e:a5:68:ae:a8:05:5b:ad:ae:93:97:ec:07:
         29:c7:9a:ce:f3:1e:6f:ec:a5:f9:6c:87:cf:3b:62:06:95:c7:
         47:5a:c6:50:7b:99:88:d8:02:97:f5:97:6a:b3:bb:32:df:90:
         e9:d3:d0:8d:60:54:9c:a2:32:1c:a4:52:bc:dd:bc:b1:43:30:
         8f:b7:fe:2d:22:c5:ed:c7:f8:9d:e8:26:31:5a:3f:8a:15:8d:
         9b:00:6e:86:da:46:38:9a:52:67:e0:e1:97:39:75:47:40:cf:
         91:b6:74:f9:07:0c:a6:d0:19:57:6a:b9:82:c6:55:e6:66:9f:
         24:bd:d5:f9:ca:f5:da:02:84:46:d4:9a:34:cd:00:22:99:d4:
         62:0e:f9:c8:24:3e:2d:25:dc:9c:ff:03:f0:95:fb:20:e9:67:
         ee:9e:26:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----