Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b1ffe724-78f9-34ff-8c3f-02afba7b5a61.roa
File:                     b1ffe724-78f9-34ff-8c3f-02afba7b5a61.roa (raw, json)
Hash identifier:          AstCG3z1+St0PhrIHYRDQVal6lgjyrkvFdC4L2lUTwc=
Subject key identifier:   D9:05:B7:36:DE:BC:F5:FC:F9:25:39:6E:54:53:79:74:25:43:5D:75
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A049A036C367160E73E4EE0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b1ffe724-78f9-34ff-8c3f-02afba7b5a61.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:04:9a:03:6c:36:71:60:e7:3e:4e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=6553f1e2-866d-4b4d-bee0-0b7289f2ddfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fa:c9:c6:83:71:b7:64:41:c7:05:23:be:06:
                    a4:17:3a:cb:54:55:cc:28:a9:68:bb:bf:5e:bf:07:
                    1c:af:89:5e:a3:99:85:82:3b:36:21:d5:af:c3:1c:
                    43:1a:f0:9a:c2:db:ea:3d:46:7b:6d:42:e9:ec:54:
                    66:d3:68:26:5e:f5:83:0d:85:31:ab:ac:31:51:5b:
                    ee:ef:87:7d:a6:4c:91:c1:d3:33:7a:17:de:d9:aa:
                    1f:29:c9:f1:f6:e7:bf:d3:97:9c:b2:83:2c:b8:c6:
                    2b:ae:9e:c1:0c:2e:53:38:d8:05:b3:7c:68:52:bc:
                    92:82:b4:9d:bc:fb:7e:e1:f5:97:4b:cd:86:de:1e:
                    65:2c:11:eb:2b:27:80:58:13:4d:fc:0f:a2:d4:0e:
                    14:df:e1:bb:b8:d1:73:9e:cd:8d:08:29:d9:13:9d:
                    54:e0:f9:c9:bf:eb:17:eb:90:4a:e4:cb:5f:88:62:
                    d5:46:ce:28:04:1b:90:29:9c:db:6f:1b:94:5b:78:
                    95:cd:ae:f1:09:75:09:23:7b:da:27:34:fb:35:8c:
                    ec:96:33:1b:a7:4c:9e:bd:46:31:e3:60:97:1c:fc:
                    7a:f5:cf:c3:5c:0d:33:7b:7e:0d:5c:1b:12:09:9d:
                    95:c4:f7:a0:74:cf:46:6f:80:4a:2d:98:fa:94:5a:
                    34:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:05:B7:36:DE:BC:F5:FC:F9:25:39:6E:54:53:79:74:25:43:5D:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b1ffe724-78f9-34ff-8c3f-02afba7b5a61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:25:7a:82:71:4a:a5:c6:b0:96:44:52:fa:8c:38:5a:f7:74:
         1b:1f:29:4e:ef:e1:f4:39:f3:87:4d:68:aa:84:49:81:98:43:
         a6:9b:1e:62:4d:8e:2a:bd:27:5a:17:e4:fa:da:46:dc:54:74:
         89:28:56:1b:ff:ad:bd:f7:74:9a:fb:22:c1:b3:9a:a0:e3:9b:
         63:7b:78:13:cc:38:f9:9f:6d:8f:e9:a0:1d:50:80:1f:1a:0f:
         f0:b4:49:28:19:58:02:b5:6a:66:cf:47:99:20:97:e1:f0:49:
         81:09:0a:54:d6:2d:34:52:c2:03:64:22:47:39:29:5e:81:95:
         45:91:9e:19:f0:46:7a:72:d2:df:b0:50:a4:b9:58:d1:41:da:
         92:2e:08:b8:9c:5b:fc:88:da:22:dc:37:21:35:3f:99:be:7e:
         13:44:34:f7:79:3a:2f:e4:f9:83:39:0c:7e:3f:9d:4d:48:3e:
         71:ce:98:fe:cd:d5:54:37:d7:93:01:1c:b7:8d:09:97:77:be:
         8e:5b:0b:e3:bb:1e:47:16:a9:61:a9:f6:ab:a0:72:c6:45:07:
         b4:1f:58:f4:fc:fb:ed:be:63:6b:ae:1f:c3:2c:0b:95:03:cf:
         57:ff:8a:d3:61:c4:6c:44:0a:a6:68:bc:c5:cd:40:e3:52:d3:
         3c:d3:d6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----