Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c602334e-a284-392a-8177-e65d63d9f166.roa
File:                     c602334e-a284-392a-8177-e65d63d9f166.roa (raw, json)
Hash identifier:          pi8jUAq3sqzXV7jEj4ghTPfh6xtKR5pA5OiNLPnZo4w=
Subject key identifier:   2C:67:FA:45:09:05:C2:E0:B4:50:10:21:DF:7C:FE:F2:23:CC:25:DA
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0782E4E859A90461C37680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c602334e-a284-392a-8177-e65d63d9f166.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.249.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:07:82:e4:e8:59:a9:04:61:c3:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=6583a6b3-ab59-479d-9b84-82390f0112a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a0:15:bc:27:f9:da:b3:5f:b3:30:34:e4:26:
                    d9:6d:69:54:0c:cf:94:1f:c9:fd:69:34:34:6d:6c:
                    a3:37:d5:38:2c:e7:bc:49:ae:48:ca:6c:ec:79:40:
                    b3:6d:2a:90:50:ce:07:72:9a:79:88:4b:ff:b2:e3:
                    aa:8b:1b:89:4e:6e:15:19:74:2b:6e:bb:4f:af:40:
                    9c:d5:31:0c:d8:56:72:85:b7:6e:92:d9:75:b4:81:
                    b9:1d:c0:88:b8:23:dc:08:92:df:ee:e5:3e:1a:69:
                    92:9c:7a:f5:a1:72:d8:5d:2a:25:9e:0a:b6:91:76:
                    bd:11:97:a2:0f:f6:92:2a:4e:67:6d:e8:66:d3:d2:
                    53:d8:75:30:06:6a:5b:fb:db:19:1e:a3:86:60:d7:
                    1b:47:67:ba:1a:0d:d5:17:b7:45:2f:76:e5:67:2b:
                    46:37:70:14:a4:0a:a8:fb:a7:47:d7:28:2b:65:8a:
                    20:a2:bd:4c:c4:66:2a:bc:1c:d7:20:21:6b:b6:aa:
                    5e:27:91:8c:23:a6:3a:90:9e:4a:67:41:3f:69:46:
                    b2:cd:2c:64:32:df:7e:dc:1f:99:78:dc:c6:9b:ae:
                    68:12:30:74:cb:e5:2b:3b:e2:9d:aa:91:cd:9d:97:
                    f9:04:05:d3:45:cb:87:53:cf:45:70:98:c6:38:29:
                    a7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:67:FA:45:09:05:C2:E0:B4:50:10:21:DF:7C:FE:F2:23:CC:25:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c602334e-a284-392a-8177-e65d63d9f166.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:47:e1:f7:eb:c4:e9:d9:f9:a3:c9:36:45:ef:78:e2:e3:67:
         5b:b4:dd:84:56:c0:30:76:a3:88:51:76:be:bc:ec:24:a5:d9:
         69:c9:c4:38:ab:9d:86:9b:31:b8:29:96:fb:1c:fe:a7:8b:76:
         a9:79:5c:94:f8:19:13:7e:ec:2b:51:12:c7:50:9e:d3:17:ad:
         b1:65:9e:9c:16:9c:e3:98:01:ff:f0:fb:e3:09:d5:bb:6e:38:
         60:a1:c4:6a:27:a4:df:53:3d:59:1d:62:08:50:0b:e2:67:49:
         4b:14:08:8b:38:ec:58:b7:3e:b2:a0:cc:dc:be:6a:c3:1a:16:
         b2:ed:c4:2d:f1:9d:af:72:25:99:f7:bc:ef:5b:ee:64:2c:50:
         59:8e:f8:64:40:f0:91:5e:36:c2:8d:a2:9d:4c:89:87:02:24:
         61:90:fd:fe:0d:b3:55:f7:46:55:cb:dc:7a:e0:2c:67:83:d3:
         1e:a2:47:50:a9:9b:f7:71:7b:0a:73:cf:70:e6:03:96:21:58:
         9a:7f:ee:90:5f:bf:15:52:5b:e6:b8:f3:93:5c:cc:8f:6c:42:
         bc:26:81:45:cb:ba:0a:64:04:e5:14:db:b6:d0:86:b9:83:31:
         20:78:22:89:64:29:31:3a:b3:75:67:1b:4a:83:e8:0c:b5:32:
         55:c8:0c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----