Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b0395980-13b0-348f-b92e-45d61562a2af.roa
File:                     b0395980-13b0-348f-b92e-45d61562a2af.roa (raw, json)
Hash identifier:          c8A6UpXGLRhVV43exs5fD+PCQcTou3qc0KiQLJ68KVI=
Subject key identifier:   09:3F:48:27:A7:9F:3F:66:6A:C4:A9:ED:68:C6:E2:B5:8F:F7:06:FF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309FD9BFA0660B31B3BD23C00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b0395980-13b0-348f-b92e-45d61562a2af.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.128.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:35:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fd:9b:fa:06:60:b3:1b:3b:d2:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=7f834d41-ec79-4c5f-aaae-cbcae6e06035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:42:06:ca:bb:bc:04:b9:80:0b:8a:6a:33:53:
                    63:b5:30:1d:e1:85:58:c1:58:1b:9e:53:d9:8f:3b:
                    40:5d:e0:2e:b8:d5:36:c2:7a:65:6b:4c:9b:41:2c:
                    c3:54:d2:e7:db:c7:3a:1f:1c:31:6e:e8:d2:d5:fe:
                    51:2a:78:1a:73:1c:60:08:24:b8:c8:69:87:19:cc:
                    7a:3d:1b:48:3e:44:f2:c2:fb:e8:66:a9:3b:3c:ea:
                    02:65:3b:a1:5a:5d:bf:93:96:07:c3:d4:54:04:de:
                    27:6d:1d:dd:08:dc:1d:e7:cf:55:9d:44:1e:49:e0:
                    04:fd:c9:13:2c:c4:b7:1f:9d:2e:c8:4d:dd:fb:04:
                    04:4d:9b:c6:df:54:8b:6f:0c:47:17:55:50:03:9e:
                    13:c2:22:9f:03:1b:a8:60:02:f6:1f:a1:2b:a3:2b:
                    86:35:9f:a0:c9:13:a1:35:96:5a:ea:a4:c3:21:a1:
                    dd:01:32:6a:37:43:cb:11:9b:a4:4b:79:70:b1:49:
                    31:88:30:f5:80:9c:84:61:42:db:8f:b2:03:64:ec:
                    43:cd:22:50:82:01:65:74:49:29:bf:7b:58:d4:f0:
                    01:d2:c3:65:1a:c0:68:b3:fb:16:b6:b4:4d:3f:07:
                    ef:9e:da:30:fb:22:1c:c4:21:f1:44:82:27:0d:e0:
                    b2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3F:48:27:A7:9F:3F:66:6A:C4:A9:ED:68:C6:E2:B5:8F:F7:06:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b0395980-13b0-348f-b92e-45d61562a2af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:8c:60:c3:19:94:c8:80:74:7e:de:d2:46:62:cf:00:2a:09:
         85:13:11:13:f8:4c:e2:4f:0c:e9:92:97:5e:3e:0f:a6:52:b9:
         08:9b:35:5d:b4:6a:5c:f7:f5:c5:8c:b7:9f:83:9f:c5:02:1b:
         33:9f:62:09:52:c0:40:19:bc:b0:b4:49:d7:ac:15:6e:10:f0:
         f2:ab:2a:ac:3e:70:65:9c:43:83:42:48:94:7b:05:fc:e6:64:
         5d:0d:b7:95:bc:76:64:72:cc:cb:de:ab:18:5d:47:58:3e:ce:
         74:b3:af:09:10:06:42:ab:fd:cf:60:b0:3e:06:cb:03:af:0d:
         96:5c:aa:1b:60:19:5d:34:94:eb:6a:6f:19:93:a6:ff:4c:fd:
         3e:d8:53:1b:23:3c:78:71:87:36:fd:f0:5e:03:c0:83:b2:94:
         a7:ee:b2:fe:53:75:9f:32:fb:fc:fa:0b:6f:04:d9:91:81:8b:
         4d:cd:b8:19:24:f6:c7:12:ad:a6:9f:1b:5b:1b:be:ba:bf:50:
         2c:95:ba:f4:81:5e:a1:d7:40:f3:7a:f4:e6:5b:8e:d5:f6:3e:
         ec:93:92:45:ca:a1:0e:8f:77:1d:48:09:cb:4b:3b:81:1d:92:
         c9:72:fb:ad:56:2a:03:8f:15:bb:9f:4b:f4:df:b2:15:01:c8:
         e9:25:34:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----