Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cd88e5f0-b79c-3437-9b5d-a365dd00a3d3.roa
File:                     cd88e5f0-b79c-3437-9b5d-a365dd00a3d3.roa (raw, json)
Hash identifier:          MH049E+tJJjQZroy40F0aUsqws6dlD0SkAQVYPqwxRI=
Subject key identifier:   A2:A8:BA:0D:08:5C:DD:33:BA:11:10:A7:56:9F:BD:94:B0:71:1C:84
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0D3F7ADFD6485DB0805F80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cd88e5f0-b79c-3437-9b5d-a365dd00a3d3.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     395973
IP address blocks:        104.134.133.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0d:3f:7a:df:d6:48:5d:b0:80:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=39aa46ae-8ea6-45ee-b798-7e6682934b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:20:eb:91:67:52:cf:9e:d0:61:de:37:27:c5:
                    6a:2a:7a:21:2d:95:9f:ee:d1:a2:78:cf:f1:00:ee:
                    f1:47:8f:96:da:fb:c2:a2:cf:0d:99:ce:3f:2e:cb:
                    ef:11:30:c0:0b:51:c5:a1:89:b5:da:15:7a:4d:55:
                    a7:21:8b:40:71:6c:eb:e3:35:e4:9f:37:44:95:e1:
                    9d:b2:1d:f6:a2:64:c4:54:60:84:d2:4b:1c:2d:19:
                    1f:37:a1:99:bd:ad:8d:10:80:78:2b:17:4a:d5:ee:
                    8b:96:55:24:4c:b9:43:eb:6e:6b:58:c0:c8:f2:46:
                    8b:ca:dc:38:c7:3e:25:68:6c:02:68:96:32:07:d1:
                    17:2d:b0:3c:eb:4c:00:2a:4a:64:c9:29:b5:fc:12:
                    18:19:2e:09:3b:3f:20:d6:2e:32:88:b5:35:be:92:
                    a2:6b:a9:91:b6:b8:2f:63:93:41:14:75:5d:34:22:
                    31:b7:b3:40:94:43:1c:50:b7:ce:b5:42:2b:35:18:
                    ce:36:f0:20:be:06:35:ed:4d:1e:ba:9d:6a:9a:09:
                    f5:ad:5b:7c:4b:56:0a:4c:e2:c8:b3:6a:b9:71:6b:
                    c1:66:84:96:fe:45:f2:1e:4f:98:e1:a4:d7:1e:99:
                    2e:02:e8:82:11:13:cd:27:49:7b:9f:a0:cc:64:7f:
                    88:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A8:BA:0D:08:5C:DD:33:BA:11:10:A7:56:9F:BD:94:B0:71:1C:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cd88e5f0-b79c-3437-9b5d-a365dd00a3d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:c0:ca:51:85:1b:75:dd:fc:28:5c:28:bb:8a:2a:b4:d3:fe:
         d3:94:cc:0d:8e:95:f5:27:af:1f:3b:dd:cd:4e:09:61:16:35:
         ba:e3:97:64:a6:7c:96:0d:27:29:41:1e:00:2d:34:0c:a9:32:
         37:a5:40:5a:77:4f:3a:4e:23:a0:32:07:4a:5f:d6:36:5e:c3:
         5e:6e:7e:4d:29:4a:7a:9c:81:33:93:08:be:fe:b9:39:3d:64:
         69:14:bd:40:22:18:06:d4:7c:78:1d:b6:59:33:7f:6b:a3:ca:
         6e:9c:b2:db:10:a0:c9:9c:cd:23:e6:57:05:f4:7c:bf:e2:1f:
         24:23:b4:a3:07:b0:e5:22:26:2d:3c:b2:ea:18:d1:c5:a3:bb:
         ba:10:07:4d:0a:fe:c0:d8:a3:fb:84:d0:7e:4d:07:57:6a:3c:
         3e:5f:c1:00:09:95:20:63:e1:54:81:81:57:b7:ef:86:4c:13:
         61:74:c7:5a:8a:5f:14:6f:6a:e2:41:fe:a8:97:9b:e2:23:47:
         2b:fb:ad:98:24:9a:8d:e8:f8:b6:50:7c:a5:7b:d8:6c:6e:de:
         bb:61:8b:9e:3e:9f:2d:21:9a:e3:fb:20:ea:f5:a9:a2:16:d3:
         03:d3:d6:bf:b6:2e:70:eb:cf:94:0a:ae:3c:b1:21:4f:81:b9:
         66:fa:31:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----