Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fb2edb9c-a0df-3f48-a2f6-a5d7a7b83b49.roa
File:                     fb2edb9c-a0df-3f48-a2f6-a5d7a7b83b49.roa (raw, json)
Hash identifier:          HP3kQMBxi6BynFbucGZrjs2lP+HD/f87H4lLb9HR1+Y=
Subject key identifier:   18:2A:02:DA:33:75:0E:E2:D3:17:C1:3C:11:B3:93:C5:A8:69:47:75
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0D21D3D13795B4D7B15C40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fb2edb9c-a0df-3f48-a2f6-a5d7a7b83b49.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.158.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:37:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0d:21:d3:d1:37:95:b4:d7:b1:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=c031cb53-41f7-41e1-871c-d42930709b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ce:e7:4c:c5:d2:d9:66:06:f8:7f:f6:be:51:
                    ed:c3:fb:2d:f6:85:10:3c:80:7f:5d:3c:7c:b6:30:
                    92:3c:25:4d:f6:12:50:75:17:c7:d7:29:69:7c:4c:
                    88:8c:36:21:20:24:5a:03:93:fa:53:dd:7b:d6:b2:
                    5a:72:16:af:e7:c5:8e:41:99:ec:ba:d4:21:d6:f0:
                    f7:82:d8:53:cf:16:f9:f5:94:10:27:c1:57:74:f6:
                    17:e4:c6:c8:6c:5d:5b:fd:c9:ff:93:f2:99:6d:72:
                    17:d9:40:55:44:76:3c:ac:39:42:93:c7:f6:a3:2a:
                    dc:86:85:b6:cb:65:fc:9e:24:98:5d:74:d6:f3:11:
                    42:c7:80:39:6f:eb:20:21:ff:42:bb:8f:e6:cb:4c:
                    46:47:b8:43:56:ab:b4:fb:dd:6e:2b:85:80:79:cb:
                    42:93:27:0f:8f:11:93:2d:21:74:b7:79:ff:1a:14:
                    de:f4:3f:5c:4a:2a:f2:43:94:04:5b:37:ff:e6:85:
                    57:1d:17:0d:d9:23:d7:c9:46:87:cb:75:41:78:5c:
                    65:98:1b:cd:ad:1c:78:5d:6b:15:5d:38:fb:85:7e:
                    79:36:e6:5e:f1:2d:e8:88:57:d0:b3:31:25:25:c9:
                    cc:b9:ce:b8:92:15:0b:3f:aa:f7:03:c7:4b:b0:53:
                    68:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2A:02:DA:33:75:0E:E2:D3:17:C1:3C:11:B3:93:C5:A8:69:47:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fb2edb9c-a0df-3f48-a2f6-a5d7a7b83b49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:c8:6c:7e:3c:49:5d:58:c1:46:77:d9:37:ed:d4:3e:61:3d:
         7b:fc:b1:e9:91:15:ed:92:ed:bc:77:b4:ba:ac:3b:3d:e3:0b:
         0f:7e:0f:20:b9:7a:97:85:a1:48:00:c1:e7:4e:0d:dc:ea:06:
         26:43:89:d9:9f:1b:61:32:62:44:7c:a8:5f:04:82:5c:1f:81:
         9b:bb:d4:3e:d6:04:a1:25:97:02:26:01:b3:fb:b8:71:83:6e:
         6c:89:d1:27:df:64:24:75:ea:1d:28:8f:a2:89:33:15:36:71:
         c8:99:39:16:51:bd:59:d8:02:af:d8:52:fd:94:09:5e:ce:58:
         ea:c0:69:ec:63:4a:10:61:6c:23:09:8e:bc:0f:43:94:cd:19:
         b3:54:6a:26:aa:bf:cb:38:5a:1d:f1:9b:4a:03:93:89:01:8a:
         02:85:51:c7:28:44:56:04:1f:f9:ae:85:c9:08:bd:2c:7c:25:
         94:86:ff:91:a1:cd:b4:08:68:b9:3d:c9:07:fc:b7:45:94:8f:
         88:88:60:22:9c:55:2e:64:af:23:6f:42:a7:ea:83:31:a9:b6:
         14:54:bf:34:d5:60:1b:65:fa:8c:c0:2b:f9:b7:3a:7e:1f:b0:
         4f:34:96:9f:2e:f3:34:89:76:72:8c:4b:5b:9e:ae:b7:4b:61:
         1f:ed:fa:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----