Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b11d631f-c3f6-3a60-9691-33d47cb0f521.roa
File:                     b11d631f-c3f6-3a60-9691-33d47cb0f521.roa (raw, json)
Hash identifier:          m8wg6hOkakyp+OWk43ePRb2kcGP6OgzV/vhJt8yigo8=
Subject key identifier:   7F:90:79:01:1F:AA:F5:2E:C7:6C:4A:66:73:1D:19:8B:CC:15:DE:61
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309F78BEDAF912F55C6624B80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b11d631f-c3f6-3a60-9691-33d47cb0f521.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.184.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:38:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f7:8b:ed:af:91:2f:55:c6:62:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=45ea096b-5d32-42b4-808c-aa4e4d3ae171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:57:52:5f:7e:f2:c5:ef:39:49:ec:5e:b9:6c:
                    7e:ee:f1:f1:7a:38:34:9c:d0:3d:fe:11:e7:62:ad:
                    8f:72:da:7b:ec:60:22:36:3a:44:1d:41:3d:74:25:
                    a6:90:d5:6d:6a:33:3f:b7:ef:56:8a:3e:03:d6:8b:
                    bb:b3:57:31:42:5f:70:75:bd:e2:b8:19:b8:93:42:
                    fc:c5:36:fc:fb:c2:9d:96:a4:8a:a2:71:7a:7a:18:
                    97:75:b6:e5:c6:25:16:f1:64:3e:7d:8d:d9:7f:2e:
                    75:60:0b:1a:e4:9f:75:a8:d5:76:56:dc:18:d4:fb:
                    5f:29:b1:5b:8f:21:b0:be:68:a1:44:6e:54:2b:97:
                    ca:57:c9:6d:8e:c2:c6:50:c8:04:c7:38:20:e9:3f:
                    06:4e:e2:9b:15:92:18:0e:b7:e3:89:a3:a5:43:6c:
                    55:62:1c:45:41:10:96:05:60:e9:95:18:20:cc:6f:
                    1f:ea:83:b2:e6:11:ea:e9:6c:7f:e9:76:97:17:d8:
                    10:b1:9f:42:d1:f3:a8:11:54:76:e9:ef:06:6f:b1:
                    4e:09:a4:0a:c0:08:49:b8:90:66:d8:b7:ac:06:f5:
                    f3:e1:b0:c3:4f:f7:1d:59:52:7d:ee:0d:8a:eb:0b:
                    d8:cd:88:09:36:5a:0c:5c:bf:f1:d1:d8:20:c1:35:
                    9e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:90:79:01:1F:AA:F5:2E:C7:6C:4A:66:73:1D:19:8B:CC:15:DE:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b11d631f-c3f6-3a60-9691-33d47cb0f521.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:b4:e8:ed:7d:8d:e5:a5:a9:dd:34:21:0c:e3:f7:bf:c7:67:
         b5:7c:4a:8a:17:fa:e3:f1:72:54:49:f5:92:5e:35:bc:c0:6b:
         9d:4a:95:22:7e:b7:fe:4f:47:e5:de:eb:d2:80:1c:50:3b:77:
         96:eb:ba:07:79:01:6b:2e:ec:4e:bd:c1:ba:44:af:b3:78:3f:
         59:cc:18:34:11:8a:09:ff:47:93:8c:ff:e4:db:48:8f:0c:d4:
         2e:0a:a0:e1:44:eb:46:46:ce:da:65:82:7f:d4:d4:b7:64:a9:
         bb:34:be:86:1a:30:ff:5d:cb:e5:e1:35:93:33:5d:52:53:9a:
         80:43:a5:fc:82:ed:35:26:d1:97:4e:ac:62:68:8e:89:e3:8a:
         f9:94:5c:28:a8:6e:0c:cd:c8:d4:6c:ac:08:ee:d7:31:6d:bd:
         84:59:67:03:1f:04:5c:dc:55:62:ef:2b:1e:44:13:ef:0d:1b:
         12:8b:3c:99:ed:e9:52:19:31:31:ce:48:73:46:d4:e6:33:f4:
         46:c6:58:92:7e:90:b7:fc:3e:29:e7:07:c4:d8:13:af:5a:19:
         2c:96:4b:bf:4b:89:58:57:1b:dc:f8:d3:e1:98:11:49:d1:4c:
         d6:3d:a2:4d:9c:c2:ef:a7:5a:5a:8c:de:8d:ef:4d:19:6a:95:
         f8:04:70:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----