Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d3340f00-a6c8-3aa7-a806-d2eb0f076b2e.roa
File:                     d3340f00-a6c8-3aa7-a806-d2eb0f076b2e.roa (raw, json)
Hash identifier:          /ahSQwceGbxwR7GsRCFr2J0kliYya9b2j82fd1zDKBQ=
Subject key identifier:   19:3F:35:4E:0E:DE:7C:4F:36:53:72:67:F8:2C:EF:07:EC:D5:4E:9C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584309FBECCF2E11612F60716E80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d3340f00-a6c8-3aa7-a806-d2eb0f076b2e.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fb:ec:cf:2e:11:61:2f:60:71:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=0743d15f-179a-4f59-bc59-b35b883bff47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2f:e8:60:52:29:a0:2e:4e:d7:73:0d:cf:db:
                    dc:d3:78:e4:12:fa:2c:f0:3c:fa:4b:78:96:9f:84:
                    01:d2:20:d0:95:1b:63:c2:fc:b2:95:ee:35:0a:b2:
                    e2:42:aa:4b:52:a8:77:26:39:61:8b:b2:6f:8a:85:
                    a3:ee:a4:28:c1:3a:2d:0c:0d:65:b2:be:6b:18:39:
                    00:fb:89:f5:c1:6b:00:0a:57:3e:a9:a9:f4:9c:c6:
                    a4:3e:17:7b:2c:10:7f:59:1e:cf:61:66:7b:16:37:
                    d1:b7:05:86:e0:f1:56:6e:75:9b:98:3f:64:c6:80:
                    ed:21:d7:38:18:bb:cb:50:ac:61:62:f7:f6:52:7d:
                    83:23:7f:74:20:d0:38:15:5a:6a:3b:43:3c:9b:c4:
                    b4:f6:a3:03:9e:0e:a8:fe:4d:07:4b:f3:e9:82:80:
                    6a:2c:cf:e7:1d:7a:c5:2e:08:99:d6:af:5d:b5:c2:
                    9b:d9:29:7a:f7:53:80:d7:85:f1:6c:5e:ea:43:c4:
                    bc:60:d8:e7:4d:5d:20:3f:3a:96:0f:cf:d1:44:96:
                    3b:3f:c2:ed:86:8c:cc:5c:58:6c:39:4f:fc:1a:af:
                    b5:e6:b3:73:13:95:c9:68:c1:40:fb:47:b5:ea:11:
                    de:bf:49:80:2e:54:10:2e:98:4f:2f:c2:2c:f8:ab:
                    cb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:3F:35:4E:0E:DE:7C:4F:36:53:72:67:F8:2C:EF:07:EC:D5:4E:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d3340f00-a6c8-3aa7-a806-d2eb0f076b2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:3f:d2:8d:14:9c:f7:f5:88:9b:f3:8b:7e:e0:ea:93:94:92:
         38:6f:5d:f9:3f:e4:48:11:f1:a2:76:63:87:ee:4f:e1:5f:3d:
         32:38:6f:b4:d5:84:5e:bc:07:24:c2:70:7a:65:fc:d7:5d:6c:
         60:df:d5:bf:cc:84:54:f5:60:f7:d9:2c:c9:51:58:4e:82:e3:
         e3:d8:ea:c6:2e:82:5c:40:67:3a:a3:63:ba:18:c6:97:6c:67:
         e6:8e:95:6d:93:ed:66:c9:a2:10:21:f5:a4:7b:9e:88:cf:a7:
         b0:fa:fb:02:f7:ee:30:4b:76:e1:79:e1:7c:9f:42:0f:2b:0c:
         a1:c9:e7:80:88:74:04:93:46:2c:a7:42:65:40:81:40:dd:29:
         b9:7b:74:a8:b0:ed:f3:fc:4c:6d:00:ab:a4:0f:0e:28:a3:1e:
         41:0d:4b:3a:93:7f:21:7b:11:41:b0:76:5d:84:fd:da:59:fa:
         d4:40:23:12:c4:60:ba:77:ae:a8:40:b3:a3:de:b5:d7:01:ae:
         68:67:10:53:f6:2f:78:8e:ef:92:4b:6a:69:31:31:21:f4:35:
         31:76:dd:3c:3b:a1:8d:6f:30:ff:d4:0e:8d:91:f4:b4:92:40:
         f0:8d:5a:d7:b7:3b:78:8e:74:d6:14:83:65:05:f4:d1:41:e2:
         92:db:a5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----