Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ea2f91a8-1733-3197-a7f3-b1ab4b6627eb.roa
File:                     ea2f91a8-1733-3197-a7f3-b1ab4b6627eb.roa (raw, json)
Hash identifier:          sWq2wyD39kPsnz6NofAMgR/6TOK5whN+9kUoUrPK3wg=
Subject key identifier:   A7:7E:8B:67:4C:BC:51:3C:0C:7F:95:32:B9:82:FC:00:DB:3A:B9:18
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A084175222F87FA0189A640
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ea2f91a8-1733-3197-a7f3-b1ab4b6627eb.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.146.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:08:41:75:22:2f:87:fa:01:89:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=1fb69e5f-ea94-439b-843c-17ea6b50b369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4f:53:d4:33:d1:3b:16:d2:02:a6:de:4b:0e:
                    1d:a6:a6:68:3f:52:aa:76:2c:7e:8d:26:f1:9a:18:
                    65:bd:f7:94:1b:e4:f4:c7:46:7b:e6:a9:3e:2e:61:
                    55:2f:8c:13:a9:85:96:f4:af:9e:41:6a:ab:47:75:
                    b9:f2:84:c5:73:22:83:d9:64:7c:4d:6b:7b:05:04:
                    04:3e:f4:da:a2:c7:50:fe:0b:d7:a2:3f:81:41:5e:
                    1a:d1:9f:6c:26:90:b5:2d:b8:79:f7:c0:37:95:3a:
                    49:81:fc:be:50:3b:83:01:3b:cc:e7:23:9b:6e:30:
                    bc:5d:73:62:17:92:94:6d:71:e4:0c:8e:10:4e:9a:
                    99:c7:26:78:3b:a6:bb:f7:63:b6:50:99:8d:d6:a7:
                    5f:2e:e7:cc:ba:b4:28:2f:b6:ac:f6:e1:f3:ff:af:
                    3f:fc:7d:40:c7:68:9c:f2:57:7d:97:7e:da:4f:85:
                    16:e4:f9:79:ad:71:7b:39:d4:68:d4:d2:7d:73:1a:
                    78:ad:1a:f4:74:ba:2b:14:d1:28:8f:4c:8b:15:8c:
                    2f:bc:68:20:8c:7a:1f:b2:0f:bf:4b:63:45:78:2f:
                    23:fb:99:00:e8:62:90:94:c7:81:ef:3e:c9:12:37:
                    aa:6b:fa:fc:a6:ba:1c:39:37:16:96:c0:87:56:b3:
                    95:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7E:8B:67:4C:BC:51:3C:0C:7F:95:32:B9:82:FC:00:DB:3A:B9:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ea2f91a8-1733-3197-a7f3-b1ab4b6627eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:a8:bc:5a:2c:0e:84:03:94:dd:ce:0e:f4:06:3c:4d:d4:ba:
         ff:af:a9:88:2a:47:81:ca:36:d5:75:e5:7c:7d:97:91:15:6d:
         58:fe:2c:db:74:64:82:74:7a:4b:b8:64:9c:5f:67:56:d4:ba:
         2e:b6:c2:5f:7b:74:3c:fd:23:24:ef:aa:10:b3:c2:88:b8:b8:
         d9:04:41:cf:8c:dd:5c:2c:35:b9:38:0b:49:ce:18:d4:70:06:
         c8:2e:dc:58:33:f2:f3:9d:45:0a:70:89:84:b3:45:cd:3f:2f:
         ab:6d:99:96:13:3d:12:47:6a:0f:9f:6a:71:79:24:f7:1f:e2:
         93:b4:8e:cb:15:d2:99:5e:b5:06:88:a0:10:fa:b2:3b:e9:64:
         a5:b9:ea:a2:90:6d:a4:46:4c:b3:e5:06:2d:92:af:e6:aa:1a:
         b1:5f:71:85:95:2a:3e:c1:f2:7c:e0:4f:f4:a7:84:4f:36:dc:
         34:86:3a:6a:d1:f0:e8:22:b4:ba:86:9c:fd:33:e9:7a:cd:44:
         00:e6:eb:50:e9:f6:ea:0a:81:48:53:17:20:87:59:02:f2:83:
         04:0c:e1:aa:5e:44:3a:aa:b3:4f:51:77:c2:e5:c2:8d:ba:56:
         62:08:bc:45:60:02:b5:37:1d:9f:7f:71:ad:42:fb:59:42:26:
         c1:11:75:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----