Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ad880a31-d215-346a-b118-faaef181316f.roa
File:                     ad880a31-d215-346a-b118-faaef181316f.roa (raw, json)
Hash identifier:          z3qbn8xxLRBOzZ4WfPNWq5Bz5Cas07YKDudX401O84o=
Subject key identifier:   6F:23:8A:AD:2B:3C:AB:87:E4:D6:E2:07:06:F4:2C:74:86:71:45:1E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A1C05F7076CE71DC5742B80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ad880a31-d215-346a-b118-faaef181316f.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.152.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1c:05:f7:07:6c:e7:1d:c5:74:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=36b76944-b2e4-4bb6-91dd-caa64a15b61a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fe:a3:4b:37:e3:99:a9:21:30:6e:98:38:05:
                    fb:32:01:c0:db:0a:df:09:af:3d:9e:53:87:c0:35:
                    0c:7d:7b:61:34:54:61:bc:ac:97:91:2d:eb:4a:75:
                    af:ce:1b:c8:ec:1e:d6:d1:e4:59:e2:fa:31:f9:9d:
                    d4:ca:81:54:b5:b7:47:29:88:92:91:5c:f6:94:b4:
                    aa:8c:1b:35:5e:4f:fb:db:60:22:bc:01:af:3f:0d:
                    2d:80:01:95:fc:0b:d5:b5:5d:fe:05:49:6f:d0:23:
                    0b:fd:9b:3f:1a:ca:5e:c0:68:5c:8f:30:a4:3c:08:
                    d2:6f:38:9c:a1:8d:7f:45:e6:c4:13:0f:09:92:c6:
                    12:17:4a:a0:a4:00:36:30:97:6f:6d:17:53:d4:57:
                    44:a1:de:18:d3:88:2a:7a:4c:12:10:bb:28:b6:49:
                    47:3e:a3:0e:9c:04:92:f6:73:a6:f6:f0:ba:4d:40:
                    13:b1:ae:30:22:fa:18:7d:28:9c:c6:69:e9:fd:00:
                    45:09:27:a4:29:63:9e:ee:0c:19:9b:60:2e:40:89:
                    78:fb:16:e1:09:35:66:df:18:83:a6:e6:1c:91:71:
                    cc:18:ab:8b:32:33:71:6f:67:6e:ec:49:72:40:88:
                    59:69:2f:25:49:88:ce:96:a3:ac:9c:62:e0:62:41:
                    03:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:23:8A:AD:2B:3C:AB:87:E4:D6:E2:07:06:F4:2C:74:86:71:45:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ad880a31-d215-346a-b118-faaef181316f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:11:1b:60:42:f0:0e:e3:17:fa:83:e9:07:3d:fc:28:c8:5d:
         8a:df:f9:7d:68:71:83:b0:4c:83:0f:83:81:f9:13:23:b7:e1:
         06:b9:67:06:83:d3:81:d0:55:e3:12:fd:88:5d:a4:cf:fa:38:
         5a:04:0f:22:d7:6f:62:ae:b4:a9:23:91:53:f0:a6:aa:66:d5:
         84:fc:4c:64:c3:53:db:7a:78:b7:2f:e2:51:cd:fb:3e:47:b5:
         fb:d8:4f:13:c3:07:e7:11:b3:c2:a8:18:0e:d1:3a:f5:c4:d4:
         ab:9b:e1:83:e4:cc:4d:ef:d1:90:42:0f:c1:8c:c5:b3:e7:0f:
         34:14:2b:3d:9f:1e:f4:6a:a8:b3:b4:8c:7c:e5:e8:ae:5b:ec:
         d3:3b:19:94:6a:1a:b9:cb:88:39:e6:8c:d7:c2:59:f2:51:0d:
         0d:20:a3:15:44:ea:e2:a0:44:d4:2f:8b:b1:05:a2:5a:2f:6a:
         5e:e2:12:1c:b7:65:73:80:38:d2:bc:a8:a7:20:d5:97:64:6d:
         d0:f1:58:8b:53:97:ba:bc:63:a2:04:64:97:9f:2c:a7:17:96:
         83:21:34:61:c4:ee:5d:41:2a:4f:f0:ae:bb:58:fe:3c:41:03:
         f6:fe:24:fc:0b:7d:f7:29:bd:41:58:bb:b1:a3:12:38:50:81:
         42:30:16:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----