Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bda6261c-704f-32d6-a585-c4292a3804af.roa
File:                     bda6261c-704f-32d6-a585-c4292a3804af.roa (raw, json)
Hash identifier:          D4+FqV9QlrpWCcHn4HJafhHXdyIYAF6Z/QgrbeEN0e8=
Subject key identifier:   B5:4F:B3:1B:4F:99:86:E1:0D:E5:21:54:5A:B4:AB:7A:44:5E:34:0A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309F728761E7F874CA70DFC40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bda6261c-704f-32d6-a585-c4292a3804af.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f7:28:76:1e:7f:87:4c:a7:0d:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=dc3d0ff3-cd77-498b-a9b8-642fc5e489ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e4:20:4a:80:af:9b:1b:bd:ca:1a:fe:a9:45:
                    f3:e2:d9:59:8d:fa:7a:8b:e7:80:ea:c7:1c:cb:d4:
                    d6:aa:14:ff:2b:85:ea:93:a9:03:8c:f5:87:c1:be:
                    90:d0:a9:91:c2:b3:1c:09:c7:fa:85:df:eb:4b:32:
                    ae:28:f1:9e:12:43:d4:f2:46:d7:81:aa:f5:dd:94:
                    d7:06:b4:ae:94:5f:a9:3e:c6:96:02:18:c8:a3:c8:
                    85:83:2b:99:eb:7d:97:99:e4:fa:24:59:67:da:9a:
                    c7:1b:19:3f:85:6d:50:34:84:8f:50:f0:22:00:cf:
                    30:1b:bc:fa:8c:c5:a5:ff:88:0d:74:5e:66:de:ce:
                    90:2c:cd:5a:10:ba:55:54:57:02:42:64:29:14:3f:
                    e7:f8:62:cd:27:32:b6:32:0b:f8:6e:d7:aa:60:a5:
                    89:86:16:b2:88:61:f8:0a:28:92:44:7b:1a:c8:38:
                    66:77:2f:d3:62:29:b9:ab:d9:ba:c9:ad:9a:f1:64:
                    60:b0:d6:f5:1b:57:8e:80:ef:55:16:65:04:ec:cc:
                    fc:ff:3f:c6:cb:41:e8:9a:00:2b:9c:65:97:20:57:
                    7f:ce:bd:6b:66:8e:2a:52:c4:88:97:13:be:1f:24:
                    ba:6d:39:8a:4c:2a:9b:31:42:28:a7:a7:75:00:e4:
                    b3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4F:B3:1B:4F:99:86:E1:0D:E5:21:54:5A:B4:AB:7A:44:5E:34:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bda6261c-704f-32d6-a585-c4292a3804af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:b3:06:37:9b:2d:da:ec:cc:3c:8a:f8:06:44:64:38:68:74:
         6b:81:db:6c:24:61:40:98:cc:bb:ec:db:dd:bf:28:32:3e:36:
         b5:e0:b9:25:28:92:5b:73:82:8b:b5:7d:23:23:df:8c:c6:07:
         1c:55:fc:af:8b:23:ac:ec:fe:ba:70:9e:6a:b6:86:d5:ac:bf:
         15:e8:31:e6:4c:e7:5b:79:d9:ee:b9:6b:f5:d8:ce:92:83:62:
         90:98:e6:09:d6:10:13:2c:73:0e:1f:a3:03:02:98:1e:a6:34:
         13:09:cb:41:95:65:59:33:d4:c2:7a:d5:ef:c4:ef:01:8f:ae:
         ba:c6:d2:61:99:db:19:c8:89:f0:f3:2c:b6:c3:5d:3f:c9:90:
         4b:a1:0f:81:b7:62:0d:68:3a:14:39:cc:13:6e:90:d0:59:c5:
         80:6b:3c:b9:7c:b8:fe:a5:f7:5d:ee:52:d0:97:55:1a:b3:8e:
         a0:fc:40:fe:5c:bb:1c:68:d0:69:e8:81:21:78:fd:39:e0:5b:
         25:48:41:9c:14:16:3a:3f:c8:2c:5d:65:f4:56:75:8f:7d:a7:
         9d:f9:83:ee:9e:d4:a8:d0:cd:eb:43:d8:70:e6:b4:c1:92:34:
         4f:97:8e:bf:cc:72:a4:7c:d8:2a:f6:7a:72:57:54:e1:9b:13:
         3d:09:77:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----