Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/be400452-27fd-36b4-87d2-23f92964ef9c.roa
File:                     be400452-27fd-36b4-87d2-23f92964ef9c.roa (raw, json)
Hash identifier:          FKbxwhEVrJ56yLJ9Nsy/3a1g+u8rZ1Zx9fF9gPyPyhc=
Subject key identifier:   EA:0E:99:00:D3:F7:D0:AD:19:F4:0F:2B:0D:13:AB:34:EC:92:70:66
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0E8A5432160160BE118B00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/be400452-27fd-36b4-87d2-23f92964ef9c.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.68.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0e:8a:54:32:16:01:60:be:11:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=28777109-2c26-486a-a6c8-5fc02346ae9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7f:62:fc:2f:12:f5:ba:b2:74:49:d7:51:f7:
                    de:f0:ca:ab:b8:f5:07:3c:df:36:99:c5:70:68:5f:
                    86:5c:31:d3:f0:31:90:ee:ba:f7:15:1d:a7:fb:29:
                    4e:74:bf:b8:2e:94:43:72:f5:ce:76:fc:db:e9:9e:
                    fa:0e:69:55:8d:6a:e0:16:4d:4d:c2:ec:fe:b2:fc:
                    07:04:ea:9b:d3:30:a8:03:b2:fe:f1:fd:74:88:27:
                    20:59:9a:ca:a7:a5:27:0c:cf:31:79:67:a7:16:fa:
                    bc:5d:3a:67:3b:a4:d5:77:8d:82:ec:a5:44:9c:ec:
                    f6:0a:5c:ae:47:50:71:98:17:48:4b:c5:e7:f1:aa:
                    2b:4e:b4:95:6b:4d:55:c5:7a:c8:d6:a7:d1:d4:2d:
                    ec:56:64:ab:da:98:d7:46:35:97:91:3d:b2:8a:90:
                    f7:95:80:01:90:f5:74:7c:e5:e8:37:a3:7d:3d:64:
                    84:1f:41:7d:99:90:7e:86:2f:ac:04:33:a9:d1:78:
                    da:91:0c:68:5e:e0:86:f3:c3:f3:34:86:2e:7d:20:
                    9a:b6:4b:b7:47:12:4c:88:1c:49:17:04:dc:c9:34:
                    6d:ff:b9:63:45:86:92:99:76:5d:ad:c8:f7:7e:2c:
                    63:3b:14:0e:51:ef:7c:08:4b:b7:5c:e8:ff:0d:67:
                    c3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0E:99:00:D3:F7:D0:AD:19:F4:0F:2B:0D:13:AB:34:EC:92:70:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/be400452-27fd-36b4-87d2-23f92964ef9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:86:e4:99:00:48:6a:79:d0:7a:e4:ab:c8:75:10:ca:e6:81:
         1e:db:09:f8:8c:77:4b:7e:ec:d7:0c:a0:d6:f3:55:1b:f4:f5:
         a7:1f:c6:58:f5:e7:f2:66:f7:25:d1:52:04:d0:3f:f1:52:91:
         d5:44:62:b9:8d:a3:6c:aa:1a:82:20:56:01:c7:9b:56:66:7a:
         48:76:18:63:cc:84:10:f4:64:3d:ec:06:26:86:db:ae:0e:a2:
         c3:f3:d9:11:da:01:e6:ce:d7:47:1d:86:3f:ce:f7:21:bd:65:
         1a:bd:cf:2d:32:78:db:8c:12:88:b7:d2:50:b5:ed:d0:ec:01:
         31:05:0b:70:fa:40:8e:8c:e1:c6:b2:05:23:80:79:12:4e:a3:
         fe:b1:d9:4b:88:60:5c:67:ee:b0:6b:aa:41:09:60:a6:f8:69:
         94:87:02:00:5c:89:e7:8b:60:9d:b2:16:49:a8:ae:44:31:4d:
         b6:3d:ea:39:35:d0:ca:67:f6:73:fd:7b:4c:d9:2d:bf:4c:27:
         5e:f5:e4:5a:19:5e:e6:14:89:58:85:61:de:68:33:cf:78:f7:
         92:45:08:48:09:c1:24:cc:a7:7f:5e:c9:8e:dc:33:d1:ea:ec:
         3e:1d:31:aa:af:d2:e2:91:d5:65:f1:61:92:7d:d9:8c:cc:39:
         60:65:eb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----