Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e25645ff-af07-37a3-a15a-c9eb569c6558.roa
File:                     e25645ff-af07-37a3-a15a-c9eb569c6558.roa (raw, json)
Hash identifier:          qHBb4kPzy6Apd7Q2nhCPrg72crIR6cioqNSxgl0hSVw=
Subject key identifier:   23:33:C8:15:F1:D7:B0:A8:E6:E7:A7:89:94:A2:6D:56:A2:4C:99:24
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A223F2030DBCB2FD9708390
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e25645ff-af07-37a3-a15a-c9eb569c6558.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     395973
IP address blocks:        104.134.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:57:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:22:3f:20:30:db:cb:2f:d9:70:83:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=816c6f20-f576-40cf-aa08-c8e80ed89216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b0:57:b9:8a:1a:71:60:e5:a9:4d:dc:d9:06:
                    b1:3d:95:f4:85:41:48:dc:f8:dc:7b:5c:ff:0e:ad:
                    eb:78:dc:a9:4b:be:20:21:9a:48:29:32:e8:2a:a0:
                    6e:e6:d7:ff:0b:ba:9d:0e:46:99:5c:ad:1a:19:39:
                    3b:8e:45:0e:1b:e7:c5:41:0b:fb:70:e5:9e:32:54:
                    cf:6e:48:ad:48:2d:f6:44:01:94:74:e5:33:75:50:
                    98:a7:81:60:a7:8c:e4:4a:62:e8:9c:47:fb:78:55:
                    c0:1b:d1:92:3e:c9:f5:3f:bb:5a:bb:81:25:8e:0b:
                    63:f0:35:6f:c0:8b:70:3f:81:68:c3:b3:40:81:eb:
                    12:38:d9:68:30:e4:d8:b5:f1:60:42:d0:3b:c0:ce:
                    c0:e0:b7:ad:2b:d0:4a:ee:f0:28:e4:27:4c:a5:e1:
                    d3:33:93:f0:50:97:55:72:c8:3c:ec:56:a5:ce:43:
                    08:1f:43:0d:ef:1b:ea:ed:bf:b3:18:85:c1:03:cc:
                    1c:60:24:d5:5a:91:98:a2:12:35:e6:35:b5:58:e1:
                    26:86:bc:07:17:88:2e:7f:85:9b:5b:1b:45:b0:66:
                    49:f5:e6:94:95:b6:98:f3:2b:7e:21:03:39:80:b0:
                    e5:a2:7f:1d:c8:bc:17:11:f2:de:92:96:a1:24:bb:
                    2a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:33:C8:15:F1:D7:B0:A8:E6:E7:A7:89:94:A2:6D:56:A2:4C:99:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e25645ff-af07-37a3-a15a-c9eb569c6558.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:71:6b:b1:5c:85:8c:25:45:98:17:15:f5:9f:32:97:bc:74:
         e4:19:c8:57:36:1f:c3:3c:e9:75:54:cb:3c:1f:18:d7:d4:2e:
         b8:98:1e:1a:ee:6b:90:9b:d6:2a:a4:04:45:1f:73:7e:4f:ef:
         0d:c8:3b:58:15:7f:d5:a1:79:5c:fe:44:06:08:66:17:b7:c6:
         47:df:5e:3b:74:b9:78:02:d8:75:9b:c1:eb:a6:ad:86:58:c1:
         35:84:75:05:a7:88:17:d1:c1:84:da:db:77:e4:92:84:a0:be:
         45:bb:7c:e4:d0:e6:4c:00:fd:13:00:14:3a:34:a8:25:a7:2b:
         e9:2d:2f:16:72:69:f1:6d:43:c7:f0:06:02:b9:70:e7:83:c2:
         cb:51:61:8a:6e:e5:50:e4:6c:b6:83:ef:d6:0d:95:9f:3a:c3:
         76:f9:67:6d:5e:5b:ef:62:f3:b2:f9:e5:a6:ae:02:2f:0b:d6:
         83:f4:02:8b:f9:99:e5:69:13:20:77:36:eb:cc:84:2b:c4:40:
         1f:a0:4c:bc:05:e7:97:0a:91:74:c0:86:80:2c:ee:84:1d:37:
         6b:3c:07:ea:60:c6:f4:84:8e:dc:87:0b:23:1f:6b:50:17:49:
         09:20:cb:f5:b4:63:b0:ee:b2:38:47:8e:da:ed:de:e1:b2:66:
         f0:9c:42:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----