Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b734d5a4-3856-3779-aa1e-bf9d68f9b9fd.roa
File:                     b734d5a4-3856-3779-aa1e-bf9d68f9b9fd.roa (raw, json)
Hash identifier:          Lv1Q2Qh3vYCmQ4l1b8iGuZySkNO9TnNzyVLwImsyXkY=
Subject key identifier:   CB:1E:8F:82:C8:74:97:6B:10:F9:77:6F:62:4C:E8:7A:83:73:74:81
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309F6DE520CE4F14AD6196B00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b734d5a4-3856-3779-aa1e-bf9d68f9b9fd.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.68.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f6:de:52:0c:e4:f1:4a:d6:19:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=3aad5f32-6df6-4d0c-b5e5-b78f0f9919f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:00:f3:9c:94:be:d9:28:66:cf:ed:e4:05:d0:
                    7b:0a:c0:ad:08:ea:09:3d:7c:31:6c:ef:8b:a3:83:
                    90:b2:a3:7c:13:d2:af:36:81:10:57:a8:71:4c:71:
                    64:cd:ea:6a:d8:65:5d:63:a1:fa:e7:b1:fb:02:9c:
                    88:b4:ab:37:85:16:6f:b9:8d:52:f0:cd:53:73:e0:
                    ed:69:1d:9b:02:3e:7b:e4:1b:9d:59:41:b7:6e:67:
                    1c:4f:24:cd:17:68:e6:ee:e8:d4:8e:88:28:73:08:
                    f9:d9:2e:f8:b6:cd:25:1b:75:9c:89:17:30:07:51:
                    6e:35:1c:d3:84:b0:6f:41:c1:d8:98:a5:24:b0:ee:
                    1e:b4:79:87:ec:dc:4c:9d:35:59:8b:03:57:fb:0c:
                    3c:8a:8b:5f:b4:6d:61:3e:4b:f6:78:85:0b:41:97:
                    5a:cd:a9:34:01:d5:45:d6:2c:84:b9:b2:c5:23:57:
                    05:c5:05:ed:ed:b2:30:08:4b:b4:01:bc:45:9d:6a:
                    a9:a5:50:3e:be:13:37:2b:df:ee:20:4b:81:8d:4d:
                    90:40:a8:9d:b9:71:bc:23:2f:92:99:65:13:b4:bc:
                    69:9b:d9:66:32:c4:4f:11:c4:10:db:e9:df:bc:40:
                    0c:f1:80:ce:99:cd:43:9e:8c:bf:6f:61:ac:bc:f4:
                    51:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1E:8F:82:C8:74:97:6B:10:F9:77:6F:62:4C:E8:7A:83:73:74:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b734d5a4-3856-3779-aa1e-bf9d68f9b9fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:9b:30:2c:3d:07:04:35:f8:18:1c:f3:29:18:4e:c7:53:97:
         4d:df:90:bf:83:10:ed:5e:4e:68:b2:d5:31:98:1f:75:0e:a1:
         0d:85:1a:38:75:0d:00:b9:77:6f:41:99:e4:ec:ee:8d:8f:16:
         96:cd:8f:42:8f:05:6f:8e:c0:4c:a8:14:9a:0b:05:fd:a1:22:
         c6:d9:fa:ab:7c:7e:29:b6:ce:8d:4f:10:62:ff:4f:f2:13:15:
         52:89:e5:cf:c9:af:fc:f6:fb:90:4d:de:e2:6b:ab:56:ff:76:
         5a:0f:b7:1d:58:65:be:06:2c:48:f5:89:9f:0c:57:37:9b:80:
         f5:dd:3e:a6:6c:0a:2a:88:5f:0e:75:b3:46:1a:08:e5:3b:c8:
         c4:22:ef:a6:28:f7:c4:bd:69:da:34:db:e8:77:f2:23:f2:08:
         68:6f:b0:5c:b6:6a:45:fe:a8:d0:5b:79:0c:d5:4b:16:b7:de:
         2c:72:f8:18:3f:ef:1e:80:51:1c:b1:20:23:9c:ec:97:86:3f:
         47:66:9c:e6:f7:a9:8e:2a:d0:7a:2a:66:74:9c:b2:ef:57:c8:
         b6:7d:c2:03:8e:cf:53:30:49:e2:7b:5d:03:24:26:44:28:68:
         4a:db:8b:dc:79:8d:2a:99:7b:e8:e6:48:2b:b9:ad:f4:ae:6d:
         8d:fe:dd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----