Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e06a35df-c388-31d9-9655-fe8b57a5838c.roa
File:                     e06a35df-c388-31d9-9655-fe8b57a5838c.roa (raw, json)
Hash identifier:          rhNBAqbaUFdvG4qAPG9eCwiyCa+Y1RzGkFhJjgX8FRA=
Subject key identifier:   95:7D:1A:AC:51:0B:5B:AE:77:CA:4C:37:6D:F5:5D:64:72:74:8B:63
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A14B2FF7F092E09B4BCFBF4
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e06a35df-c388-31d9-9655-fe8b57a5838c.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     395973
IP address blocks:        104.134.132.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:14:b2:ff:7f:09:2e:09:b4:bc:fb:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=d6eeec69-38fc-4ea0-9327-afda19fe1ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:72:ad:74:5c:2a:cf:6f:1d:f0:57:e9:72:91:
                    ee:4f:b6:1b:dd:04:ef:30:fd:5a:f9:f0:fc:c4:4f:
                    96:77:86:3d:39:82:91:f1:c6:72:1a:8d:e9:73:f7:
                    e4:8c:ed:5c:72:2e:ac:c6:41:9d:da:18:c6:38:5b:
                    fa:e6:b0:de:0b:9c:4f:d9:a4:7d:ac:f5:9d:0f:8e:
                    da:d5:61:e5:f7:8c:ec:7e:42:f4:de:96:83:79:59:
                    89:b9:63:b9:fc:5e:99:67:1b:06:a0:f2:35:9c:7c:
                    ae:e9:17:91:5e:e3:55:03:3f:d0:2b:a8:85:f8:ae:
                    46:20:8c:18:8b:48:f6:66:0e:ad:a8:a7:1f:63:c6:
                    fe:14:0a:62:74:fc:0f:bf:63:04:1a:b5:7c:9f:d1:
                    6c:a5:07:a7:a2:15:50:30:e7:b8:10:f5:fa:ba:51:
                    6a:de:48:40:ee:87:a4:da:f2:a2:93:f3:bb:a6:ab:
                    2a:45:5b:84:05:83:8e:52:9a:a4:50:67:84:de:e4:
                    42:e4:80:c6:67:3c:a8:9b:54:9c:c2:6a:c3:e1:e9:
                    40:13:ab:0c:bc:88:c7:4f:a4:1a:20:be:70:23:0d:
                    9b:84:fb:98:33:95:bd:79:18:23:06:c9:59:ad:4d:
                    72:ea:5a:39:7a:2c:91:9f:9a:3b:55:67:5c:8b:f8:
                    7a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7D:1A:AC:51:0B:5B:AE:77:CA:4C:37:6D:F5:5D:64:72:74:8B:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e06a35df-c388-31d9-9655-fe8b57a5838c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:f3:67:7f:d5:00:68:7c:d4:af:ee:f6:7c:0f:54:e3:32:3b:
         c3:e5:36:b9:68:97:c7:d3:a5:2e:42:f2:43:6b:f0:42:0d:31:
         a9:74:55:dd:f8:a1:e3:4d:8d:24:21:2c:06:6a:bc:1d:3d:8d:
         22:58:27:58:a0:c1:0e:1c:73:02:2d:2c:0c:bb:cd:81:87:07:
         98:e3:9a:c7:08:54:95:72:43:b8:c8:4f:53:66:33:d1:a6:10:
         a9:19:57:4c:6e:b6:ca:9b:17:79:ba:fb:69:00:3d:cf:aa:68:
         65:e2:5b:84:e9:1e:27:47:dc:04:30:af:18:19:74:86:2b:bd:
         15:21:9d:46:aa:1a:70:57:cf:c9:c6:c4:a2:fb:3b:e9:db:13:
         d8:34:ac:d2:b2:30:39:c7:4d:af:82:f7:da:f1:69:f7:1f:e0:
         d3:2b:1f:d0:ae:0a:0b:6f:ba:6b:4e:c5:c6:b1:d4:c1:79:e3:
         ae:49:62:11:cb:61:ee:86:6e:b4:b8:76:a4:2c:fd:a5:eb:d4:
         43:76:7c:c6:65:34:a6:4b:01:f8:12:cb:0c:21:5e:8c:19:33:
         38:03:0f:2e:10:3d:ab:1f:00:ea:0f:3d:2b:b7:10:c1:76:29:
         9c:8e:86:52:14:1c:14:fa:d6:9d:7b:68:21:bf:ff:bd:2e:e0:
         10:f4:cf:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----