Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b6c31084-ea84-3af6-8e1e-d99657a7ad96.roa
File:                     b6c31084-ea84-3af6-8e1e-d99657a7ad96.roa (raw, json)
Hash identifier:          QFNf/WvfxFtWnB0z1zQCHond0vrFU6/DS/48orMCKoI=
Subject key identifier:   18:17:0B:85:59:0B:1E:4F:E3:2A:4C:0F:63:EB:EF:93:DE:5A:C0:CC
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309F5A92F75B030313E47AF00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b6c31084-ea84-3af6-8e1e-d99657a7ad96.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.177.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:47:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f5:a9:2f:75:b0:30:31:3e:47:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=4d565e72-b726-4c0d-88ec-f88a150ada7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:30:91:f2:e7:56:c2:50:ea:80:d0:63:0b:36:
                    45:7d:bc:ef:97:a1:43:43:dc:da:d0:dd:ff:67:33:
                    5a:47:8e:98:3f:55:55:11:b1:f9:22:7c:ec:39:4a:
                    c5:81:d5:09:b1:59:14:68:3b:34:3f:c3:af:6e:6e:
                    a1:b0:55:75:c5:58:80:3f:ac:5a:24:bd:d0:32:03:
                    e9:88:46:50:cc:a5:3b:b7:c9:cc:8a:4b:5f:97:54:
                    97:6b:dd:29:e5:e5:6c:cd:4a:a4:2a:5c:4b:80:8f:
                    39:e3:1c:f0:47:ff:22:bf:47:95:8e:81:46:a0:fd:
                    1a:b6:e9:ab:07:d5:df:d1:32:4d:4f:67:b7:49:58:
                    b3:53:37:55:02:38:ed:a7:8d:22:a9:30:39:1a:14:
                    3e:9b:73:69:16:5b:59:9f:23:93:e1:83:77:6c:a0:
                    8f:81:45:bf:bc:2c:dd:16:c4:57:15:3f:c7:71:36:
                    99:b1:b9:4a:d1:a8:6b:a8:df:a2:fe:5f:f6:2d:be:
                    74:98:97:d7:d1:8a:67:13:a3:e6:e9:6a:83:8a:6e:
                    18:37:4e:47:9c:4f:0e:d1:56:08:d6:3a:dc:d1:bc:
                    37:c0:a2:0b:aa:91:9a:8b:2d:f9:31:e8:70:26:8f:
                    df:bc:5b:28:61:90:3e:29:73:97:78:9f:87:ee:48:
                    eb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:17:0B:85:59:0B:1E:4F:E3:2A:4C:0F:63:EB:EF:93:DE:5A:C0:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b6c31084-ea84-3af6-8e1e-d99657a7ad96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:21:54:68:b1:10:58:53:b7:6e:f5:c6:52:79:25:70:0e:5d:
         cb:7b:74:f6:52:0b:c2:45:06:5f:b3:84:ac:c2:9c:5f:19:3d:
         d5:dd:5e:fa:80:ce:f7:37:88:38:73:8a:05:43:70:6b:fa:11:
         d9:62:e0:36:c9:15:66:e9:95:63:d4:0a:eb:bb:f9:23:15:3c:
         76:b3:33:97:15:bb:35:57:cc:d4:47:8c:36:0f:19:54:e5:f8:
         6b:f4:40:71:9d:c5:35:e5:4f:9a:bb:00:1e:bd:4c:31:6c:61:
         74:b4:0a:a4:65:f3:62:73:e8:da:a2:c5:59:16:6c:f8:95:bc:
         ef:b2:e7:2f:93:cb:7b:03:2e:d9:96:d1:8d:2d:66:c3:18:a6:
         f8:e9:6f:89:e4:16:24:c0:3d:ab:38:49:d0:5f:d7:90:12:af:
         9c:94:81:56:f9:5d:c3:48:7e:8a:a1:c8:7c:4b:f8:f7:21:a2:
         eb:36:5a:0f:e7:58:24:3f:03:9b:b7:01:8d:f1:87:bd:af:68:
         3c:cf:80:40:12:a0:70:cc:04:4e:cb:a6:92:61:38:4a:30:27:
         a5:31:8f:50:56:e8:11:e4:10:36:16:bb:3c:ee:9d:39:1a:70:
         8b:61:9c:36:0b:6b:7f:cc:09:58:b6:f2:47:66:6a:51:b0:55:
         e8:a8:f5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----