Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ce91429a-8544-34b8-ad1a-802ae63d4dc9.roa
File:                     ce91429a-8544-34b8-ad1a-802ae63d4dc9.roa (raw, json)
Hash identifier:          KS+wUdhnzotPwi6nCGyjWKFA5wXixWsgwi90/CEuuUw=
Subject key identifier:   A6:C1:F5:D2:2C:2B:BC:21:08:75:99:8A:0B:9A:33:38:06:63:06:C8
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0BC365A9270D3E960B43C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ce91429a-8544-34b8-ad1a-802ae63d4dc9.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0b:c3:65:a9:27:0d:3e:96:0b:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=3c8f019e-1592-41de-89ea-92526513b0ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:23:3e:bc:a0:32:35:cb:7b:51:1f:f0:30:23:
                    ca:01:d8:52:83:ac:0f:a9:87:57:6f:4c:37:d9:00:
                    8c:97:62:bd:6f:ca:0b:8d:f7:21:b5:a1:c5:79:63:
                    57:fa:16:9f:33:dd:e5:b4:ac:63:ed:5d:f3:9d:7c:
                    03:16:15:35:6a:13:33:01:e4:19:6d:cf:5a:71:bd:
                    da:58:89:cc:83:87:51:af:75:50:2b:3a:ff:8c:3a:
                    be:3b:4f:2b:0a:36:53:d3:72:ad:62:46:2c:bd:b8:
                    72:bc:68:25:a1:ff:f3:61:41:6b:fa:d5:6f:00:0f:
                    c0:7b:c9:0f:ca:69:4c:63:59:ca:2d:77:21:51:b6:
                    56:35:a8:04:19:1c:3b:fc:fb:5a:aa:29:d8:61:31:
                    95:33:e0:76:a6:9b:e1:99:1b:39:f1:31:6a:79:1d:
                    12:56:3a:e0:02:7a:59:bb:cd:af:5c:1b:38:e6:73:
                    66:62:ca:42:cd:fe:06:dd:7e:24:f8:7e:84:b5:44:
                    77:cf:04:bf:28:ba:36:9d:77:18:25:08:62:03:d6:
                    98:e3:e9:be:3e:a9:b9:18:97:eb:bd:1e:7d:0f:82:
                    a2:f7:67:ec:19:77:3e:b3:9c:d5:a1:ab:2e:d3:1c:
                    90:e0:da:c9:b2:7f:80:8c:5a:76:bd:ef:ea:ce:b4:
                    a7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C1:F5:D2:2C:2B:BC:21:08:75:99:8A:0B:9A:33:38:06:63:06:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ce91429a-8544-34b8-ad1a-802ae63d4dc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:9a:c0:14:00:84:aa:f4:0d:59:5d:46:b6:34:02:ee:7a:64:
         ea:c5:98:29:8a:d7:13:b2:e2:21:c9:8b:fd:13:a6:cf:30:78:
         65:26:f3:78:52:1a:26:ea:ef:42:f4:e7:23:af:09:bb:30:0b:
         7a:c0:a9:64:ed:18:d3:b9:3e:fd:99:e4:1d:90:5f:85:1c:49:
         48:7d:9d:03:69:4a:c6:f0:c1:99:0b:b5:58:89:5b:d7:1e:d1:
         ac:67:40:50:a6:22:f5:5f:fc:00:26:73:96:a9:ab:d2:2f:10:
         45:b1:fa:b9:38:41:cc:5f:38:fb:67:4b:0e:93:f1:4f:74:7b:
         b0:0d:a7:73:dc:1a:2b:d4:e8:98:b1:c1:43:12:0d:7c:3c:7d:
         87:c5:a9:c8:f6:a0:77:fc:a9:f2:fe:66:30:7a:0a:fa:43:91:
         d5:2d:45:e8:36:89:87:34:73:4a:68:ca:ef:a6:80:db:53:01:
         88:cf:c2:76:68:41:8b:6f:6c:3e:3e:12:70:d1:e3:86:28:19:
         23:3d:4a:0d:31:41:7a:9a:40:72:db:bf:ac:c7:01:f8:12:07:
         61:64:3b:b0:da:29:7c:3a:82:a4:c3:7a:54:de:f8:d7:fb:93:
         31:d1:d3:e8:3d:fe:6a:84:62:52:30:4f:6a:be:23:34:8b:cd:
         f8:92:92:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----