Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d262e425-f7ea-3fa7-adac-7f17a675f574.roa
File:                     d262e425-f7ea-3fa7-adac-7f17a675f574.roa (raw, json)
Hash identifier:          ZDqkEf3GBQ8nFaiU8X9elXyWInbUrPSa78wRsCIDfgk=
Subject key identifier:   53:D2:9B:5B:E7:3D:A3:0C:B9:2C:B7:57:81:C2:1F:A4:8F:AB:45:51
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A02A4E4D1BCCFB7D3166CC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d262e425-f7ea-3fa7-adac-7f17a675f574.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.240.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:02:a4:e4:d1:bc:cf:b7:d3:16:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=dec2ece2-2343-4ce2-ab29-6cd1d2cbdfee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:35:5d:97:06:f4:21:45:61:ad:12:12:6e:57:
                    37:20:b2:4c:1b:1c:81:27:2f:16:92:98:83:1a:e1:
                    d3:07:3c:da:d8:3b:f5:66:3c:1e:d0:54:68:97:a5:
                    e1:c2:44:72:aa:3e:95:29:ff:58:40:aa:3a:e3:cc:
                    a1:09:8f:80:fe:d8:30:a7:6b:f6:38:9a:40:23:89:
                    9a:c2:09:ce:fe:16:b6:26:71:6d:fd:be:bd:6e:ad:
                    0b:84:10:38:c2:0a:2a:d7:48:90:8f:8b:c7:c4:bb:
                    d4:e4:59:f1:17:f9:59:5e:b5:fd:a7:a4:3c:13:90:
                    79:e5:09:48:5d:e5:3a:5a:c8:42:16:6c:f5:22:8a:
                    ac:08:f9:a8:b0:ce:0b:c5:33:e0:22:4d:a3:5c:80:
                    bd:88:8a:7d:51:5e:09:1f:f5:a9:0a:b3:91:fa:de:
                    2c:4c:e8:7c:1d:a0:27:55:a7:00:18:3d:20:fa:8e:
                    c4:97:a9:52:68:40:9a:ec:dd:5d:f1:23:f3:ff:35:
                    09:92:f1:57:60:85:5e:cc:68:0c:d2:9a:e9:b5:9f:
                    1b:1a:66:7a:cf:14:60:cd:3f:6b:c6:52:d6:5d:c5:
                    ba:92:e6:6c:4b:f8:ae:36:b4:86:e5:b0:ed:26:00:
                    63:7d:0f:b5:ca:3a:5f:83:1a:e3:26:ca:82:db:5e:
                    18:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D2:9B:5B:E7:3D:A3:0C:B9:2C:B7:57:81:C2:1F:A4:8F:AB:45:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d262e425-f7ea-3fa7-adac-7f17a675f574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:4f:5c:d1:55:f0:f3:43:6c:62:8f:1f:79:a1:0f:8d:69:d2:
         09:3d:d0:4c:de:29:03:b8:2c:6f:83:b1:3b:e8:e1:90:aa:46:
         4c:2e:dd:58:7b:d6:f6:83:8e:c2:db:f4:33:5b:de:eb:c1:50:
         bb:15:bf:d5:30:bd:48:c0:32:02:fe:18:ee:81:4a:a2:23:3b:
         69:7f:b1:58:5f:78:ff:34:60:ea:d0:dd:fe:8f:20:76:80:f9:
         c7:ae:b1:de:4f:d3:d0:f6:d5:7b:74:dc:14:90:f1:d1:e7:dd:
         9e:4b:57:f9:7d:f7:ce:1a:50:b4:6e:1e:cb:d7:ac:90:51:13:
         43:a4:df:81:20:47:8c:c9:80:e2:95:46:45:c1:b1:74:f4:f4:
         c9:87:a0:d8:51:76:76:c7:1a:25:2d:50:e8:52:0d:66:83:fb:
         67:73:b8:b6:c3:65:c4:7b:5a:78:a4:68:a6:5a:b0:a9:d5:da:
         71:35:f2:6a:69:fa:10:09:e3:d8:51:ba:f3:09:6e:de:24:c2:
         4a:6b:d6:9c:34:1d:5c:6d:09:ed:0d:a4:72:29:9d:8b:1c:3a:
         a1:4f:e0:50:4c:08:05:c6:32:5c:62:99:75:a4:33:c3:2e:77:
         a5:97:e4:23:30:59:02:d8:87:08:5b:23:88:a7:16:33:5c:d4:
         fc:69:5c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----